WHM access not by me

rs200

October 25, 2020 13:29

Hello, today lfd notified me a new WHM/cPanel root access to my VPS by an IP from Romania (it's not mine). When i saw the email, i logged immediately into WHM and i blocked that IP. I changed also my root password. Apparently it seems that everything works fine. My VPS has CSF installed and running, mod_security installed and running, The hosting provider where VPS runs, uses WHMCS and the VPS in on Cloud. I searched that IP in the logs /usr/local/cpanel/logs/access_logs path with CSF. This was the output (sensitive data have been replaced) [CODE=bash]xxx.xxx.xxx.xx - - [10/25/2020:14:57:11 -0000] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [10/25/2020:14:57:12 -0000] "GET /cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [10/25/2020:14:57:12 -0000] "GET /cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [10/25/2020:14:57:12 -0000] "GET /cPanel_magic_revision_1503953613/unprotected/cpanel/images/whm-logo_white.svg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [10/25/2020:14:57:12 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/notice-error.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [10/25/2020:14:57:12 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/icon-username.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [10/25/2020:14:57:13 -0000] "GET /cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [10/25/2020:14:57:13 -0000] "GET /cPanel_magic_revision_1503953609/unprotected/cpanel/images/cp-logo_white.svg HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [10/25/2020:14:57:13 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/notice-info.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [10/25/2020:14:57:13 -0000] "GET /cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [10/25/2020:14:57:13 -0000] "GET /cPanel_magic_revision_1386192031/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [10/25/2020:14:57:13 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/icon-password.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [10/25/2020:14:57:13 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/notice-success.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [10/25/2020:14:57:13 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/warning.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:15 -0000] "POST /login/?login_only=1 HTTP/1.1" 301 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:15 -0000] "GET /cpsess3800031215/?login=1&post_login=32675550695883 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:16 -0000] "GET /cPanel_magic_revision_1450389573/yui-gen/utilities_container/utilities_container.js HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1543294476/templates/menu/main.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1573707258/templates/menu/header_and_navigation.cmb.min.js HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1542084972/cjt/cjt-min.js?locale=en&locale_revision=1603166074 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1503956841/themes/x/icons/support.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1503956834/themes/x/logo.svg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1503956851/themes/x/icons/networking_setup.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1503956837/themes/x/icons/server_configuration.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1503956828/themes/x/icons/server_contacts.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1503956836/themes/x/icons/security_center.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cpsess3800031215/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cpsess3800031215/json-api/quota_enabled?api.version=1 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /libraries/ui-fonts/open_sans/optimized/OpenSans-Regular-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /libraries/ui-fonts/open_sans/optimized/OpenSans-Bold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /libraries/ui-fonts/open_sans/optimized/OpenSans-Semibold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /themes/x/images/filter-search.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /themes/x/images/collapse-all.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /themes/x/images/expand-all.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /themes/x/images/expand-sprite.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958544/themes/x/icons/resellers.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1509944194/images/questioncircle.svg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1450389575/themes/x/images/jumpUp.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /images/hamburger-left-dark.svg HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503957411/themes/x/icons/create_a_new_account.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1542084942/themes/x/icons/list_accounts.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503957435/themes/x/icons/add_a_package.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958544/themes/x/icons/reseller_center.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /libraries/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958520/themes/x/icons/transfer_tool.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958535/themes/x/icons/backup_restoration.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958525/themes/x/icons/process_manager.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958546/themes/x/icons/service_manager.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958536/themes/x/icons/show_current_disk_usage.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958540/themes/x/icons/service_configuration.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503956839/themes/x/icons/locales.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503956832/themes/x/icons/backup.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958540/themes/x/icons/clusters.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503956829/themes/x/icons/system_reboot.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958534/themes/x/icons/server_status.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503956833/themes/x/icons/account_information.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503956840/themes/x/icons/account_functions.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503956834/themes/x/icons/multi_account_functions.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958546/themes/x/icons/transfers.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958546/themes/x/icons/themes.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958540/themes/x/icons/packages.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958530/themes/x/icons/dns_functions.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503956834/themes/x/icons/sql_services.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958535/themes/x/icons/ip_functions.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958539/themes/x/icons/software.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958532/themes/x/icons/email.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958523/themes/x/icons/system_health.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503956822/themes/x/icons/cpanel.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503956835/themes/x/icons/market.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958551/themes/x/icons/ssl_tls.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503956830/themes/x/icons/restart_services.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503956849/themes/x/icons/development.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503956844/themes/x/icons/plugins.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1450389574/favicon.ico HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /themes/x/images/filter-cancel.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:22 -0000] "GET /cpsess3800031215/scripts4/listaccts HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1572388868/styles/legacy_yui_styles.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1410366601/yui/datatable/assets/skins/sam/datatable.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1559102142/templates/accounts/listaccts.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1525816806/cjt/css/ajaxapp-min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:25 -0000] "GET /cPanel_magic_revision_1509944157/js/sorttable.js HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cPanel_magic_revision_1503958548/cjt/ajaxapp-min.js HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cPanel_magic_revision_1410366601/yui/datatable/assets/skins/sam/dt-arrow-up.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1410366601/yui/datatable/assets/skins/sam/datatable.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cPanel_magic_revision_1450389575/plus.gif HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cPanel_magic_revision_1450389575/images/cpanel.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cPanel_magic_revision_1450389572/cjt/images/icons/warning.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cpsess3800031215/json-api/get_update_availability?api.version=1 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cPanel_magic_revision_1450389572/cjt/images/progress_bar.gif HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cpsess3800031215/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cpsess3800031215/json-api/get_update_availability?api.version=1 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cPanel_magic_revision_1450389572/cjt/images/check.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [10/25/2020:14:57:38 -0000] "GET /logout/?locale=en HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
How is possible that someone entered as root user into WHM? By guessing root password? Or by some vulnerabilities? Any help is appreciated. Thanks in advance

Comments

8 comments

ZenHostingTravis

October 26, 2020 04:56
Hi @rs200, It was good you reacted quickly. Have you shared your root password with anyone? Additionally, are the PCs you use to access cPanel / WHM secured? If your system has indeed been compromised, I'd reinstall it from your backups. If you don't install logwatch and tripwire usually, I'd recommend you do.
0
keat63

October 26, 2020 09:07
Host Access Control is ideal for blocking access to WHM
0
rs200

October 26, 2020 11:13
Hi @rs200, It was good you reacted quickly. Have you shared your root password with anyone?

Hi @ZenHostingTravis , absolutely no, i'm the only one. But i know that the hosting provider where i have the VPS uses onApp software. In the onApp panel there's a section where the password can be showed just by a click and i don't like it... [QUOTE] Additionally, are the PCs you use to access cPanel / WHM secured? If your system has indeed been compromised, I'd reinstall it from your backups.
My PC has an antivirus and is updated. [QUOTE] If you don't install logwatch and tripwire usually, I'd recommend you do.
I'll consider this option, thanks. Unfortunately i saw from the email alerts two times accesses more, one of this on August and one of this on September, so yesterday was the third time :( I hope that blocking those IP (they are all under the same subnet) and changing password is enough.
0
ZenHostingTravis

October 26, 2020 11:53
Hi @rs200, That's good. I don't think viewing the password in their Client Area is an issue. Good to hear your personal computer is secure. Tripwire is one of my favourite tools and is recommended by cPanel so do follow up. I think the cPanel team would agree the best thing to do would be to reinstall the server, from your backups. What do you think, @cPanelLauren?
0
cPanelBrianK

October 27, 2020 11:19
Hello @rs200 and thanks for the great advice @ZenHostingTravis. Unrecognized logins for the root user in WHM are a serious concern. Whenever there is a compromise of the root user, we advise migrating to a new clean system or re-imaging your server and restoring from backups. We have the following article that discusses why you cannot truly secure a server that has been previously compromised at the root level.
0
keat63

October 27, 2020 12:07
@rs200 Without being rude, may I ask why you think blocking the IP (or subnet) is enough? Any serious hacker could bypass this faster than you could physically block the IP. I'd definitely recommend that you look at utilising host access control.
0
rs200

October 28, 2020 14:36
Thanks @ZenHostingTravis and @cPanelBrianK for your response, unfortunately i can't restore entire VPS (i have different copies) because the first unauth login was on 24 August, if i restore a previous copy i'd lost new user data from September to now. Probably the best solution is reinstall and configure OS and cPanel manually on a fresh VPS, and import manually only the data (web, database and email). I'll ponder for a few days how to proceed. Please can you review quickly these log (they refer to first login in August) and say me if you see something of suspect (i see browing on one/two cPanel account and three mailbox) [CODE=bash]xxx.xxx.xxx.xx - - [08/24/2020:13:50:15 -0000] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/notice-error.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1503953613/unprotected/cpanel/images/whm-logo_white.svg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/icon-username.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/icon-password.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1503953609/unprotected/cpanel/images/cp-logo_white.svg HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/notice-info.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1386192031/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/notice-success.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087 xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/warning.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:19 -0000] "POST /login/?login_only=1 HTTP/1.1" 301 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:19 -0000] "GET /cpsess8730218533/?login=1&post_login=22089898054863 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 - - - [08/24/2020:13:50:15 -0000] "-" 301 0 "-" "-" "-" "-" 2082 xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1450389573/yui-gen/utilities_container/utilities_container.js HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1543294476/templates/menu/main.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1573707258/templates/menu/header_and_navigation.cmb.min.js HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1542084972/cjt/cjt-min.js?locale=en&locale_revision=1593057702 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1503956834/themes/x/logo.svg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1503956851/themes/x/icons/networking_setup.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1503956837/themes/x/icons/server_configuration.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1503956841/themes/x/icons/support.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1503956828/themes/x/icons/server_contacts.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1503956836/themes/x/icons/security_center.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cpsess8730218533/json-api/quota_enabled?api.version=1 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /libraries/ui-fonts/open_sans/optimized/OpenSans-Regular-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /libraries/ui-fonts/open_sans/optimized/OpenSans-Bold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /libraries/ui-fonts/open_sans/optimized/OpenSans-Semibold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /themes/x/images/filter-search.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /themes/x/images/collapse-all.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958544/themes/x/icons/resellers.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /libraries/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /themes/x/images/expand-all.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /themes/x/images/expand-sprite.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958540/themes/x/icons/service_configuration.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956839/themes/x/icons/locales.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956832/themes/x/icons/backup.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958540/themes/x/icons/clusters.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956829/themes/x/icons/system_reboot.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958534/themes/x/icons/server_status.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956833/themes/x/icons/account_information.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /images/hamburger-left-dark.svg HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1450389575/themes/x/images/jumpUp.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1509944194/images/questioncircle.svg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503957411/themes/x/icons/create_a_new_account.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1542084942/themes/x/icons/list_accounts.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503957435/themes/x/icons/add_a_package.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958544/themes/x/icons/reseller_center.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958535/themes/x/icons/backup_restoration.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958520/themes/x/icons/transfer_tool.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958525/themes/x/icons/process_manager.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958546/themes/x/icons/service_manager.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958536/themes/x/icons/show_current_disk_usage.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956834/themes/x/icons/multi_account_functions.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956840/themes/x/icons/account_functions.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958546/themes/x/icons/transfers.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958546/themes/x/icons/themes.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958540/themes/x/icons/packages.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958530/themes/x/icons/dns_functions.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956834/themes/x/icons/sql_services.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958535/themes/x/icons/ip_functions.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958539/themes/x/icons/software.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958532/themes/x/icons/email.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958551/themes/x/icons/ssl_tls.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958523/themes/x/icons/system_health.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956822/themes/x/icons/cpanel.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956835/themes/x/icons/market.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956830/themes/x/icons/restart_services.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956849/themes/x/icons/development.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956844/themes/x/icons/plugins.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1450389574/favicon.ico HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:22 -0000] "GET /themes/x/images/filter-cancel.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:23 -0000] "GET /cpsess8730218533/scripts4/listaccts HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cPanel_magic_revision_1572388868/styles/legacy_yui_styles.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:22 -0000] "GET /cPanel_magic_revision_1559102142/templates/accounts/listaccts.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:22 -0000] "GET /cPanel_magic_revision_1410366601/yui/datatable/assets/skins/sam/datatable.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1525816806/cjt/css/ajaxapp-min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:22 -0000] "GET /cPanel_magic_revision_1509944157/js/sorttable.js HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cPanel_magic_revision_1503958548/cjt/ajaxapp-min.js HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cPanel_magic_revision_1450389572/cjt/images/progress_bar.gif HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cPanel_magic_revision_1450389572/cjt/images/icons/warning.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cPanel_magic_revision_1450389575/images/cpanel.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cPanel_magic_revision_1450389575/plus.gif HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cPanel_magic_revision_1410366601/yui/datatable/assets/skins/sam/dt-arrow-up.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1410366601/yui/datatable/assets/skins/sam/datatable.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cPanel_magic_revision_1450389572/cjt/images/check.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cpsess8730218533/json-api/get_update_availability?api.version=1 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cpsess8730218533/json-api/get_update_availability?api.version=1 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:50:56 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:51:12 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:51:32 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:51:48 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:52:03 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 127.0.0.1 - - [08/24/2020:13:52:28 -0000] "GET /.__cpanel__service__check__./serviceauth?sendkey=__HIDDEN__&version=1.2 HTTP/1.0" 200 0 "-" "-" "-" "-" 2086 xxx.xxx.xxx.xx - root [08/24/2020:13:52:18 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:52:33 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:52:48 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:53:03 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - root [08/24/2020:13:53:18 -0000] "POST /xfercpanel HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:20 -0000] "GET /cpsess8730218533/login/?session=cpaneluser3:oUcyCWaABUIVN1fV,8cfc855d4b1e6d58a830f49a349b962f HTTP/1.1" 307 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:20 -0000] "GET /cpsess2314557369/frontend/paper_lantern/index.html?login=1&post_login=89702171505487 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/_assets/css/master-ltr.cmb.min.css HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1455824270/frontend/paper_lantern/libraries/chosen/1.5.1/chosen.min.css HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /styled/current_style/sprites/icon_spritemap.css?1595495086 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /styled/current_style/styles.css?1595495086 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1573066380/frontend/paper_lantern/libraries/requirejs/optimized/require.min.js HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1509944083/frontend/paper_lantern/_assets/deferred/master.deferred.cmb.min.js HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /brand/logo.svg?1595495086 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1503953606/img-sys/powered_by_cpanel.svg HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/libraries/ui-fonts/open_sans/optimized/OpenSans-Regular-webfont.woff HTTP/1.1" 200 0 "https://myserver:2083/cPanel_magic_revision_1582421199/frontend/paper_lantern/_assets/css/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/libraries/ui-fonts/open_sans/optimized/OpenSans-Semibold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2083/cPanel_magic_revision_1582421199/frontend/paper_lantern/_assets/css/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/libraries/bootstrap/optimized/fonts/glyphicons-halflings-regular.woff HTTP/1.1" 200 0 "https://myserver:2083/cPanel_magic_revision_1582421199/frontend/paper_lantern/_assets/css/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/home/index.dist.min.js?locale_optional=1&locale=it&locale_revision=1591070680 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/libraries/cjt2-dist/plugins/locale.js HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/libraries/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1" 200 0 "https://myserver:2083/cPanel_magic_revision_1582421199/frontend/paper_lantern/_assets/css/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /styled/current_style/sprites/icon_spritemap.svg?2d7ac0c654c8665444b2299ebcb19e51afdc0313510d05e05925b8abc32c75c2_4.0 HTTP/1.1" 200 0 "https://myserver:2083/styled/current_style/sprites/icon_spritemap.css?1595495086" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/home/index.cmb.min.js?locale_optional=1&locale=it&locale_revision=1591070680 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/libraries/cjt2-dist/cjt2.cpanel.cmb.min.js?locale=it&locale_revision=1591070680 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/libraries/cjt2-dist/frameworks.cmb.js HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /brand/favicon.ico?1595495086 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/_assets/master.min.js?locale_optional=1&locale=it&locale_revision=1591070680 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/libraries/lodash/4.8.2/lodash.min.js HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "POST /cpsess2314557369/execute/Personalization/get HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /cpsess2314557369/execute/Notifications/get_notifications_count HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1455824270/frontend/paper_lantern/libraries/chosen/1.5.1/chosen-sprite@2x.png HTTP/1.1" 200 0 "https://myserver:2083/cPanel_magic_revision_1455824270/frontend/paper_lantern/libraries/chosen/1.5.1/chosen.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /cpsess2314557369/frontend/paper_lantern/images/spinner.gif HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:23 -0000] "POST /cpsess2314557369/execute/Themes/list HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:23 -0000] "POST /cpsess2314557369/execute/Resellers/list_accounts HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "POST /cpsess2314557369/execute/SSL/installed_host HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "POST /cpsess2314557369/execute/ResourceUsage/get_usages HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:23 -0000] "GET /cpsess2314557369/frontend/paper_lantern/email_accounts/index.html HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:28 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/email_accounts/index.min.css HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "GET /styled/current_style/icons/email_accounts.png HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:23 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/email_accounts/index.dist.min.js?locale_optional=1&locale=it&locale_revision=1591070680 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/email_accounts/index.cmb.min.js?locale=it&locale_revision=1591070680 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "GET /cpsess2314557369/execute/Notifications/get_notifications_count HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "POST /cpsess2314557369/execute/Personalization/get HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:23 -0000] "POST /cpsess2314557369/execute/Personalization/get HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/libraries/ui-fonts/open_sans/optimized/OpenSans-Italic-webfont.woff HTTP/1.1" 200 0 "https://myserver:2083/cPanel_magic_revision_1582421199/frontend/paper_lantern/_assets/css/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:23 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/libraries/ui-fonts/open_sans/optimized/OpenSans-Bold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2083/cPanel_magic_revision_1582421199/frontend/paper_lantern/_assets/css/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "POST /cpsess2314557369/execute/Email/list_pops_with_disk HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "POST /cpsess2314557369/execute/ResourceUsage/get_usages HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "GET /cpsess2314557369/frontend/paper_lantern/mail/webmailform.html?user=info%40mysite.com&return_request_uri=%2Fcpsess2314557369%2Ffrontend%2Fpaper_lantern%2Femail_accounts%2Findex.html HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "GET /cPanel_magic_revision_1542084972/cjt/cjt-min.js?locale=it&locale_optional=1&locale_revision=1591070680 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:33 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/_assets/css/master-legacy-ltr.cmb.min.css HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:30 -0000] "GET /cPanel_magic_revision_1591070117/frontend/paper_lantern/_assets/js/master-legacy.cmb.min.js HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:33 -0000] "GET /cpsess2314557369/frontend/paper_lantern/images/loader.gif HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:33 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/_assets/master.cmb.min.js?locale_optional=1&locale=it&locale_revision=1591070680 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:33 -0000] "GET /cpsess2314557369/execute/Notifications/get_notifications_count HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:34 -0000] "POST /cpsess0347200065/login/ HTTP/1.1" 307 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:34 -0000] "POST /cpsess0347200065/3rdparty/roundcube/index.php?login=1&post_login=89702171505487 HTTP/1.1" 302 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:34 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/styles.min.css?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/calendar/skins/larry/calendar.css?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/libcalendaring/skins/larry/libcal.css?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/mail.min.css?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/libkolab/skins/larry/libkolab.css?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/return_to_webmail/skins/larry/return_to_webmail.css?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/jqueryui/themes/larry/jquery-ui.css?s=1591528317 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/carddav/skins/larry/carddav.css?s=1538378602 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/ui.min.js?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/js/common.min.js?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/js/list.min.js?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/js/jquery.min.js?s=1591528327 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/js/treelist.min.js?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/js/app.min.js?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/return_to_webmail/return_to_webmail.js?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/archive/archive.min.js?s=1591528317 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/jqueryui/js/i18n/jquery.ui.datepicker-it.js?s=1591528317 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/jqueryui/js/jquery-ui.min.js?s=1591528317 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/calendar/calendar_base.js?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/libcalendaring/libcalendaring.js?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/images/roundcube_logo.png?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/watermark.html HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cPanel_magic_revision_1591528318/3rdparty/roundcube/skins/larry/images/buttons.png?v=2e08.13608 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/skins/larry/styles.min.css?s=1591528318" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cPanel_magic_revision_1591528318/3rdparty/roundcube/skins/larry/images/selector.png?v=0d5b.118 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/skins/larry/styles.min.css?s=1591528318" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cPanel_magic_revision_1591528318/3rdparty/roundcube/skins/larry/images/listicons.png?v=4f40.10460 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/skins/larry/styles.min.css?s=1591528318" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cPanel_magic_revision_1591528318/3rdparty/roundcube/skins/larry/images/splitter.png?v=6d32.134 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/skins/larry/styles.min.css?s=1591528318" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/images/favicon.ico?s=1591528318 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cPanel_magic_revision_1591918387/3rdparty/roundcube/plugins/return_to_webmail/skins/larry/images/cp-logo-RGB-v42015.svg HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/plugins/return_to_webmail/skins/larry/return_to_webmail.css?s=1591918387" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cPanel_magic_revision_1591528318/3rdparty/roundcube/skins/larry/images/ajaxloader_dark.gif?v=cf1b.1849 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/skins/larry/styles.min.css?s=1591528318" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/resources/dummy.pdf HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/resources/blank.tiff HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=getunread&_page=1&_remote=1&_unlock=0&_=1598277214901 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/resources/blank.webp HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_refresh=1&_layout=list&_mbox=INBOX&_remote=1&_unlock=loading1598277215285&_=1598277214900 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/archive/archive.min.js?s=1591528317 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/return_to_webmail/return_to_webmail.js?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/calendar/calendar_base.js?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/libcalendaring/libcalendaring.js?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/images/addcontact.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cPanel_magic_revision_1591528318/3rdparty/roundcube/skins/larry/images/contactpic_48px.png?v=1bc4.353 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/skins/larry/mail.min.css?s=1591528318" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=addressbook&_action=photo&_email=noreply%anothersite.com HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/resources/blocked.gif HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cPanel_magic_revision_1591528318/3rdparty/roundcube/skins/larry/images/filetypes.png?v=a0f5.4718 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/skins/larry/styles.min.css?s=1591528318" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cPanel_magic_revision_1591528318/3rdparty/roundcube/skins/larry/images/messages.png?v=72e9.1264 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/skins/larry/styles.min.css?s=1591528318" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=getunread&_remote=1&_unlock=0&_=1598277226607 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=pagenav&_uid=19937&_mbox=INBOX&_remote=1&_unlock=loading1598277226779&_=1598277226606 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_refresh=1&_uid=19937&_mbox=INBOX&_page= HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:51 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/watermark.html HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_refresh=1&_uid=19937&_mbox=INBOX&_page=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:51 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=getunread&_page=1&_remote=1&_unlock=0&_=1598277230901 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_refresh=1&_layout=list&_mbox=INBOX&_remote=1&_unlock=loading1598277231007&_=1598277230900 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_refresh=1&_uid=19937&_mbox=INBOX&_page=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:52 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19895&_mbox=INBOX&_action=show HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:54 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=addressbook&_action=photo&_email=name.surname%40libero.it HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19895&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:48 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=getunread&_remote=1&_unlock=0&_=1598277233869 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19895&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:52 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=pagenav&_uid=19895&_mbox=INBOX&_remote=1&_unlock=loading1598277233965&_=1598277233868 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19895&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:54 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_frame=1&_mbox=INBOX&_uid=19895&_part=2&_action=get&_extwin=1 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19895&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:56 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX&_uid=19895&_part=2&_action=get&_extwin=1&_preload=1&_framed=1 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_frame=1&_mbox=INBOX&_uid=19895&_part=2&_action=get&_extwin=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:57 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX&_uid=19895&_part=2&_action=get&_extwin=1&_framed=1&_mimewarning=1&_embed=1 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:57 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_refresh=1&_uid=19895&_mbox=INBOX&_page= HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19895&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:54:08 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/watermark.html HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_refresh=1&_uid=19895&_mbox=INBOX&_page=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:55 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=getunread&_page=1&_remote=1&_unlock=0&_=1598277247286 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:54:08 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_refresh=1&_layout=list&_mbox=INBOX&_remote=1&_unlock=loading1598277247471&_=1598277247285 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_refresh=1&_uid=19895&_mbox=INBOX&_page=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:54:08 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_layout=list&_mbox=INBOX&_page=2&_remote=1&_unlock=loading1598277256355&_=1598277247287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:34 -0000] "GET /cpsess2314557369/frontend/paper_lantern/mail/webmailform.html?user=info%40mysite2.com&return_request_uri=%2Fcpsess2314557369%2Ffrontend%2Fpaper_lantern%2Femail_accounts%2Findex.html HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:54:27 -0000] "GET /cpsess2314557369/execute/Notifications/get_notifications_count HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:28 -0000] "POST /cpsess2239873588/login/ HTTP/1.1" 307 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2096 xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:29 -0000] "POST /cpsess0347200065/3rdparty/roundcube/index.php?login=1&post_login=89702171505487 HTTP/1.1" 302 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:29 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=SeVpjw3TBgQDDOcGg6NFf4CNGa2WFx0S HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:29 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/js/list.min.js?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=SeVpjw3TBgQDDOcGg6NFf4CNGa2WFx0S" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:30 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/watermark.html HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=SeVpjw3TBgQDDOcGg6NFf4CNGa2WFx0S" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:30 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=getunread&_page=1&_remote=1&_unlock=0&_=1598277268998 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:30 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_refresh=1&_layout=list&_mbox=INBOX&_remote=1&_unlock=loading1598277269204&_=1598277268997 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=SeVpjw3TBgQDDOcGg6NFf4CNGa2WFx0S" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:30 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_layout=list&_mbox=INBOX&_page=2&_remote=1&_unlock=loading1598277278133&_=1598277268999 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:39 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_layout=list&_mbox=INBOX&_page=3&_remote=1&_unlock=loading1598277279048&_=1598277269000 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX&_page=2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:40 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_layout=list&_mbox=INBOX&_page=4&_remote=1&_unlock=loading1598277279796&_=1598277269001 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX&_page=3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:41 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_layout=list&_mbox=INBOX&_page=5&_remote=1&_unlock=loading1598277280686&_=1598277269002 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX&_page=4" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:41 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_layout=list&_mbox=INBOX&_page=6&_remote=1&_unlock=loading1598277281480&_=1598277269003 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX&_page=5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:54:28 -0000] "GET /cpsess2314557369/frontend/paper_lantern/mail/webmailform.html?user=booking%40mysite.com&return_request_uri=%2Fcpsess2314557369%2Ffrontend%2Fpaper_lantern%2Femail_accounts%2Findex.html HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:54:49 -0000] "GET /brand/logo.svg?1595495086 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:54:49 -0000] "GET /cpsess2314557369/execute/Notifications/get_notifications_count HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:49 -0000] "POST /cpsess0085227954/login/ HTTP/1.1" 307 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:50 -0000] "POST /cpsess0347200065/horde/index.php?cpanel=1&login=1&post_login=89702171505487 HTTP/1.1" 302 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:50 -0000] "GET /cpsess0347200065/horde/login.php HTTP/1.1" 302 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:57 -0000] "GET /cpsess0347200065/horde/imp/dynamic.php?page=mailbox HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/themes/default/mime.css HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/horde.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/hordecore.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/themes/default/mozilla.css HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/themes/default/screen.css HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/themes/default/screen.css HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/themes/default/dynamic/screen.css HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/js/viewport_utils.js?v=29c8308baa6508a21e1be9e3345d1287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/js/dimpcore.js?v=29c8308baa6508a21e1be9e3345d1287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/imple.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/contextsensitive.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/js/dimpbase.js?v=29c8308baa6508a21e1be9e3345d1287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/prototype.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/js/viewport.js?v=29c8308baa6508a21e1be9e3345d1287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/js/passphrase.js?v=29c8308baa6508a21e1be9e3345d1287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/js/external/tinycon.js?v=29c8308baa6508a21e1be9e3345d1287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/dragdrop2.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/form_ghost.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/jstorage.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/slider2.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - root [08/24/2020:13:54:58 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/toggle_quotes.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/redbox.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/dialog.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/scriptaculous/effects.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/js/imp.js?v=29c8308baa6508a21e1be9e3345d1287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/colorpicker.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/imp/js/external/base64.js?v=29c8308baa6508a21e1be9e3345d1287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/popup.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/date/date.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/date/en-US.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/topbar.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/accesskeys.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/growler.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/sidebar.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/logo.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/themes/default/graphics/search-topbar.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/head-bg.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/scriptaculous/sound.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/navi-left-active.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/navi-center-active.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/navi-arrow-active.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/navi-right-active.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/navi-arrow-normal.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/settings.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/logout.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/popdown.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/sidebar-new-bg.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/sidebar-new.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/slidevert.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/slidevert-bg.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/buttonbar-bg.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/button-split.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/reload.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/checkbox_off.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/tablehead-bg.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/tablehead-split.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/slidehoriz.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/slidehoriz-bg.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/ico_message_off.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/reload.gif HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/imp/themes/default/graphics/favicon.ico HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "POST /cpsess0347200065/horde/services/ajax.php/imp/dynamicInit HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/sidebar-active-bg.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/folders/drafts.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/folders/inbox.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/folders/sent.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/folders/plus.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/folders/folder.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/alerts/message.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/close.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "POST /cpsess0347200065/horde/services/ajax.php/imp/viewPort HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/scroller_back.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/sbcursor_top.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/scroller.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/sbcursor_bottom.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/flags/answered.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/flags/personal.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:01 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/flags/unseen.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:01 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/flags/forwarded.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:01 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/za.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:01 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/reply.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:01 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/forward.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:01 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/flags/personal-inv.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:02 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/checkbox_on.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:01 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/delete.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:07 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/loading.gif HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:01 -0000] "POST /cpsess0347200065/horde/services/ajax.php/imp/showMessage HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:07 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/plus.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:07 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/button.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:07 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/arrow_collapsed.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:08 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/download.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:07 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/print.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:08 -0000] "POST /cpsess0347200065/horde/services/ajax.php/imp/showMessage HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:19 -0000] "POST /cpsess0347200065/horde/services/ajax.php/imp/viewPort HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - root [08/24/2020:13:54:59 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:24 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/settings-active.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:08 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/navi-subnavi.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096 xxx.xxx.xxx.xx - root [08/24/2020:13:55:29 -0000] "POST /xfercpanel HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:45 -0000] "GET /cpsess8730218533/login/?session=cpaneluser1:fLol0sZmDGKhZoHw,cfa7e9fd9cd4ba9cefbc5e32f112e2ab HTTP/1.1" 307 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "GET /cpsess2764116686/frontend/paper_lantern/index.html?login=1&post_login=89702171505487 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "GET /styled/current_style/sprites/icon_spritemap.css?1596972027 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "GET /styled/current_style/styles.css?1596972027 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "GET /brand/logo.svg?1596972027 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "GET /brand/favicon.ico?1596972027 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:47 -0000] "GET /cpsess2764116686/execute/Notifications/get_notifications_count HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "POST /cpsess2764116686/execute/Personalization/get HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:47 -0000] "GET /cpsess2764116686/frontend/paper_lantern/images/spinner.gif HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "POST /cpsess2764116686/execute/Themes/list HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "POST /cpsess2764116686/execute/Resellers/list_accounts HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "POST /cpsess2764116686/execute/SSL/installed_host HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "POST /cpsess2764116686/execute/ResourceUsage/get_usages HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:47 -0000] "GET /cpsess2764116686/frontend/paper_lantern/email_accounts/index.html HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:49 -0000] "GET /cpsess2764116686/execute/Notifications/get_notifications_count HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:47 -0000] "POST /cpsess2764116686/execute/Personalization/get HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:47 -0000] "POST /cpsess2764116686/execute/Personalization/get HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:50 -0000] "POST /cpsess2764116686/execute/Email/list_pops_with_disk HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:47 -0000] "POST /cpsess2764116686/execute/ResourceUsage/get_usages HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - root [08/24/2020:13:55:57 -0000] "POST /xfercpanel HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087 xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:58 -0000] "GET /cpsess8730218533/login/?session=cpaneluser2:3WbvpkuLN1KE6bdt,43ac3628f5c358a819f4ce0b47b9f11e HTTP/1.1" 307 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2083 xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:58 -0000] "GET /cpsess4668942040/frontend/paper_lantern/index.html?login=1&post_login=89702171505487 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "GET /styled/current_style/sprites/icon_spritemap.css?1596133189 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "GET /styled/current_style/styles.css?1596133189 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "GET /brand/logo.svg?1596133189 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "GET /brand/favicon.ico?1596133189 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "GET /cpsess4668942040/execute/Notifications/get_notifications_count HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "POST /cpsess4668942040/execute/Personalization/get HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:56:00 -0000] "GET /cpsess4668942040/frontend/paper_lantern/images/spinner.gif HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "POST /cpsess4668942040/execute/Themes/list HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:56:00 -0000] "POST /cpsess4668942040/execute/Resellers/list_accounts HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "POST /cpsess4668942040/execute/SSL/installed_host HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "POST /cpsess4668942040/execute/ResourceUsage/get_usages HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083 xxx.xxx.xxx.xx - root [08/24/2020:13:56:29 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
@keat63 No of course is not enough, but it's better than nothing (all three unauthorized accesses were from the same subnet). If you mean host access control in WHM, i could block all IPs except mine, but i have not a static IP.
0
keat63

October 29, 2020 09:32
If your dynamic IP is always from the same subnet, you could whitelist the whole subnet. I had to do this to gain access from home, before I created a VPN in to the office. It's not ideal, but you would effectively be locking it down to just 255 IP's, which is a heck of a lot stricter than 4 billion. (currently)
0

Please sign in to leave a comment.

Comments

Didn't find what you were looking for?