WHM access not by me

rs200 · Oct 25, 2020

Hello,

today lfd notified me a new WHM/cPanel root access to my VPS by an IP from Romania (it's not mine).

When i saw the email, i logged immediately into WHM and i blocked that IP. I changed also my root password.

Apparently it seems that everything works fine.

My VPS has CSF installed and running, mod_security installed and running, The hosting provider where VPS runs, uses WHMCS and the VPS in on Cloud.

I searched that IP in the logs /usr/local/cpanel/logs/access_logs path with CSF.

This was the output (sensitive data have been replaced)

Bash:

xxx.xxx.xxx.xx - - [10/25/2020:14:57:11 -0000] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [10/25/2020:14:57:12 -0000] "GET /cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [10/25/2020:14:57:12 -0000] "GET /cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [10/25/2020:14:57:12 -0000] "GET /cPanel_magic_revision_1503953613/unprotected/cpanel/images/whm-logo_white.svg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [10/25/2020:14:57:12 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/notice-error.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [10/25/2020:14:57:12 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/icon-username.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [10/25/2020:14:57:13 -0000] "GET /cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [10/25/2020:14:57:13 -0000] "GET /cPanel_magic_revision_1503953609/unprotected/cpanel/images/cp-logo_white.svg HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [10/25/2020:14:57:13 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/notice-info.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [10/25/2020:14:57:13 -0000] "GET /cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [10/25/2020:14:57:13 -0000] "GET /cPanel_magic_revision_1386192031/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [10/25/2020:14:57:13 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/icon-password.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [10/25/2020:14:57:13 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/notice-success.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [10/25/2020:14:57:13 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/warning.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:15 -0000] "POST /login/?login_only=1 HTTP/1.1" 301 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "-" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:15 -0000] "GET /cpsess3800031215/?login=1&post_login=32675550695883 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:16 -0000] "GET /cPanel_magic_revision_1450389573/yui-gen/utilities_container/utilities_container.js HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1543294476/templates/menu/main.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1573707258/templates/menu/header_and_navigation.cmb.min.js HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1542084972/cjt/cjt-min.js?locale=en&locale_revision=1603166074 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1503956841/themes/x/icons/support.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1503956834/themes/x/logo.svg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1503956851/themes/x/icons/networking_setup.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1503956837/themes/x/icons/server_configuration.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1503956828/themes/x/icons/server_contacts.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cPanel_magic_revision_1503956836/themes/x/icons/security_center.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cpsess3800031215/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cpsess3800031215/json-api/quota_enabled?api.version=1 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /libraries/ui-fonts/open_sans/optimized/OpenSans-Regular-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /libraries/ui-fonts/open_sans/optimized/OpenSans-Bold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /libraries/ui-fonts/open_sans/optimized/OpenSans-Semibold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /themes/x/images/filter-search.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /themes/x/images/collapse-all.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /themes/x/images/expand-all.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /themes/x/images/expand-sprite.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958544/themes/x/icons/resellers.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1509944194/images/questioncircle.svg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1450389575/themes/x/images/jumpUp.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /images/hamburger-left-dark.svg HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503957411/themes/x/icons/create_a_new_account.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1542084942/themes/x/icons/list_accounts.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503957435/themes/x/icons/add_a_package.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958544/themes/x/icons/reseller_center.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /libraries/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958520/themes/x/icons/transfer_tool.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958535/themes/x/icons/backup_restoration.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958525/themes/x/icons/process_manager.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958546/themes/x/icons/service_manager.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958536/themes/x/icons/show_current_disk_usage.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958540/themes/x/icons/service_configuration.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503956839/themes/x/icons/locales.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503956832/themes/x/icons/backup.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958540/themes/x/icons/clusters.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503956829/themes/x/icons/system_reboot.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503958534/themes/x/icons/server_status.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503956833/themes/x/icons/account_information.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503956840/themes/x/icons/account_functions.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:18 -0000] "GET /cPanel_magic_revision_1503956834/themes/x/icons/multi_account_functions.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958546/themes/x/icons/transfers.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958546/themes/x/icons/themes.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958540/themes/x/icons/packages.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958530/themes/x/icons/dns_functions.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503956834/themes/x/icons/sql_services.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958535/themes/x/icons/ip_functions.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958539/themes/x/icons/software.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958532/themes/x/icons/email.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958523/themes/x/icons/system_health.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503956822/themes/x/icons/cpanel.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503956835/themes/x/icons/market.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503958551/themes/x/icons/ssl_tls.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503956830/themes/x/icons/restart_services.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503956849/themes/x/icons/development.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1503956844/themes/x/icons/plugins.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1450389574/favicon.ico HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /themes/x/images/filter-cancel.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1599383957/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:22 -0000] "GET /cpsess3800031215/scripts4/listaccts HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1572388868/styles/legacy_yui_styles.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1410366601/yui/datatable/assets/skins/sam/datatable.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1559102142/templates/accounts/listaccts.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:19 -0000] "GET /cPanel_magic_revision_1525816806/cjt/css/ajaxapp-min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:25 -0000] "GET /cPanel_magic_revision_1509944157/js/sorttable.js HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cPanel_magic_revision_1503958548/cjt/ajaxapp-min.js HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cPanel_magic_revision_1410366601/yui/datatable/assets/skins/sam/dt-arrow-up.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1410366601/yui/datatable/assets/skins/sam/datatable.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cPanel_magic_revision_1450389575/plus.gif HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cPanel_magic_revision_1450389575/images/cpanel.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cPanel_magic_revision_1450389572/cjt/images/icons/warning.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:17 -0000] "GET /cpsess3800031215/json-api/get_update_availability?api.version=1 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cPanel_magic_revision_1450389572/cjt/images/progress_bar.gif HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cpsess3800031215/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cpsess3800031215/json-api/get_update_availability?api.version=1 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:26 -0000] "GET /cPanel_magic_revision_1450389572/cjt/images/check.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [10/25/2020:14:57:38 -0000] "GET /logout/?locale=en HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" "s" "-" 2087

How is possible that someone entered as root user into WHM? By guessing root password? Or by some vulnerabilities?

Any help is appreciated.

Thanks in advance

ZenHostingTravis · Oct 25, 2020

Hi @rs200,

It was good you reacted quickly.

Have you shared your root password with anyone?

Additionally, are the PCs you use to access cPanel / WHM secured?

If your system has indeed been compromised, I'd reinstall it from your backups.

If you don't install logwatch and tripwire usually, I'd recommend you do.

keat63 · Oct 26, 2020

Host Access Control is ideal for blocking access to WHM

rs200 · Oct 26, 2020

ZenHostingTravis said:
Hi @rs200,

It was good you reacted quickly.

Have you shared your root password with anyone?

Hi @ZenHostingTravis ,

absolutely no, i'm the only one.

But i know that the hosting provider where i have the VPS uses onApp software. In the onApp panel there's a section where the password can be showed just by a click and i don't like it...

Additionally, are the PCs you use to access cPanel / WHM secured?

If your system has indeed been compromised, I'd reinstall it from your backups.

My PC has an antivirus and is updated.

If you don't install logwatch and tripwire usually, I'd recommend you do.

I'll consider this option, thanks.

Unfortunately i saw from the email alerts two times accesses more, one of this on August and one of this on September, so yesterday was the third time

I hope that blocking those IP (they are all under the same subnet) and changing password is enough.

ZenHostingTravis · Oct 26, 2020

Hi @rs200,

That's good.

I don't think viewing the password in their Client Area is an issue.

Good to hear your personal computer is secure.

Tripwire is one of my favourite tools and is recommended by cPanel so do follow up.

I think the cPanel team would agree the best thing to do would be to reinstall the server, from your backups.

What do you think, @cPanelLauren?

cPanelBrianK · Oct 27, 2020

Hello @rs200 and thanks for the great advice @ZenHostingTravis.

Unrecognized logins for the root user in WHM are a serious concern. Whenever there is a compromise of the root user, we advise migrating to a new clean system or re-imaging your server and restoring from backups. We have the following article that discusses why you cannot truly secure a server that has been previously compromised at the root level.

Why Can't I Clean a Hacked Machine?

If you would like to discuss this further with our analysts, I would advise opening a ticket using the link in my signature.

keat63 · Oct 27, 2020

@rs200
Without being rude, may I ask why you think blocking the IP (or subnet) is enough?
Any serious hacker could bypass this faster than you could physically block the IP.

I'd definitely recommend that you look at utilising host access control.

rs200 · Oct 28, 2020

Thanks @ZenHostingTravis and @cPanelBrianK for your response, unfortunately i can't restore entire VPS (i have different copies) because the first unauth login was on 24 August, if i restore a previous copy i'd lost new user data from September to now.

Probably the best solution is reinstall and configure OS and cPanel manually on a fresh VPS, and import manually only the data (web, database and email).

I'll ponder for a few days how to proceed.

Please can you review quickly these log (they refer to first login in August) and say me if you see something of suspect (i see browing on one/two cPanel account and three mailbox)

Bash:

xxx.xxx.xxx.xx - - [08/24/2020:13:50:15 -0000] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/notice-error.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1503953613/unprotected/cpanel/images/whm-logo_white.svg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/icon-username.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/icon-password.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1503953609/unprotected/cpanel/images/cp-logo_white.svg HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/notice-info.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1386192031/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/notice-success.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087
xxx.xxx.xxx.xx - - [08/24/2020:13:50:16 -0000] "GET /cPanel_magic_revision_1450389573/unprotected/cpanel/images/warning.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1591070085/unprotected/cpanel/style_v2_optimized.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:19 -0000] "POST /login/?login_only=1 HTTP/1.1" 301 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:19 -0000] "GET /cpsess8730218533/?login=1&post_login=22089898054863 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
- - - [08/24/2020:13:50:15 -0000] "-" 301 0 "-" "-" "-" "-" 2082
xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1450389573/yui-gen/utilities_container/utilities_container.js HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1543294476/templates/menu/main.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1573707258/templates/menu/header_and_navigation.cmb.min.js HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1542084972/cjt/cjt-min.js?locale=en&locale_revision=1593057702 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1503956834/themes/x/logo.svg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1503956851/themes/x/icons/networking_setup.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1503956837/themes/x/icons/server_configuration.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1503956841/themes/x/icons/support.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1503956828/themes/x/icons/server_contacts.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:20 -0000] "GET /cPanel_magic_revision_1503956836/themes/x/icons/security_center.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cpsess8730218533/json-api/quota_enabled?api.version=1 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /libraries/ui-fonts/open_sans/optimized/OpenSans-Regular-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /libraries/ui-fonts/open_sans/optimized/OpenSans-Bold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /libraries/ui-fonts/open_sans/optimized/OpenSans-Semibold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /themes/x/images/filter-search.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /themes/x/images/collapse-all.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958544/themes/x/icons/resellers.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /libraries/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /themes/x/images/expand-all.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /themes/x/images/expand-sprite.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958540/themes/x/icons/service_configuration.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956839/themes/x/icons/locales.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956832/themes/x/icons/backup.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958540/themes/x/icons/clusters.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956829/themes/x/icons/system_reboot.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958534/themes/x/icons/server_status.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956833/themes/x/icons/account_information.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /images/hamburger-left-dark.svg HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1450389575/themes/x/images/jumpUp.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1509944194/images/questioncircle.svg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503957411/themes/x/icons/create_a_new_account.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1542084942/themes/x/icons/list_accounts.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503957435/themes/x/icons/add_a_package.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958544/themes/x/icons/reseller_center.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958535/themes/x/icons/backup_restoration.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958520/themes/x/icons/transfer_tool.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958525/themes/x/icons/process_manager.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958546/themes/x/icons/service_manager.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958536/themes/x/icons/show_current_disk_usage.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956834/themes/x/icons/multi_account_functions.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956840/themes/x/icons/account_functions.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958546/themes/x/icons/transfers.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958546/themes/x/icons/themes.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958540/themes/x/icons/packages.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958530/themes/x/icons/dns_functions.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956834/themes/x/icons/sql_services.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958535/themes/x/icons/ip_functions.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958539/themes/x/icons/software.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958532/themes/x/icons/email.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958551/themes/x/icons/ssl_tls.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503958523/themes/x/icons/system_health.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956822/themes/x/icons/cpanel.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956835/themes/x/icons/market.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956830/themes/x/icons/restart_services.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956849/themes/x/icons/development.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1503956844/themes/x/icons/plugins.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1450389574/favicon.ico HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:22 -0000] "GET /themes/x/images/filter-cancel.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1582421170/styles/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:23 -0000] "GET /cpsess8730218533/scripts4/listaccts HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cPanel_magic_revision_1572388868/styles/legacy_yui_styles.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:22 -0000] "GET /cPanel_magic_revision_1559102142/templates/accounts/listaccts.min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:22 -0000] "GET /cPanel_magic_revision_1410366601/yui/datatable/assets/skins/sam/datatable.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cPanel_magic_revision_1525816806/cjt/css/ajaxapp-min.css HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:22 -0000] "GET /cPanel_magic_revision_1509944157/js/sorttable.js HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cPanel_magic_revision_1503958548/cjt/ajaxapp-min.js HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cPanel_magic_revision_1450389572/cjt/images/progress_bar.gif HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cPanel_magic_revision_1450389572/cjt/images/icons/warning.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cPanel_magic_revision_1450389575/images/cpanel.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cPanel_magic_revision_1450389575/plus.gif HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cPanel_magic_revision_1410366601/yui/datatable/assets/skins/sam/dt-arrow-up.png HTTP/1.1" 200 0 "https://myserver:2087/cPanel_magic_revision_1410366601/yui/datatable/assets/skins/sam/datatable.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cPanel_magic_revision_1450389572/cjt/images/check.png HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:21 -0000] "GET /cpsess8730218533/json-api/get_update_availability?api.version=1 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cpsess8730218533/json-api/get_update_availability?api.version=1 HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:26 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:50:56 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:51:12 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:51:32 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:51:48 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:52:03 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
127.0.0.1 - - [08/24/2020:13:52:28 -0000] "GET /.__cpanel__service__check__./serviceauth?sendkey=__HIDDEN__&version=1.2 HTTP/1.0" 200 0 "-" "-" "-" "-" 2086
xxx.xxx.xxx.xx - root [08/24/2020:13:52:18 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:52:33 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:52:48 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:53:03 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - root [08/24/2020:13:53:18 -0000] "POST /xfercpanel HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:20 -0000] "GET /cpsess8730218533/login/?session=cpaneluser3:oUcyCWaABUIVN1fV,8cfc855d4b1e6d58a830f49a349b962f HTTP/1.1" 307 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:20 -0000] "GET /cpsess2314557369/frontend/paper_lantern/index.html?login=1&post_login=89702171505487 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/_assets/css/master-ltr.cmb.min.css HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1455824270/frontend/paper_lantern/libraries/chosen/1.5.1/chosen.min.css HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /styled/current_style/sprites/icon_spritemap.css?1595495086 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /styled/current_style/styles.css?1595495086 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1573066380/frontend/paper_lantern/libraries/requirejs/optimized/require.min.js HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1509944083/frontend/paper_lantern/_assets/deferred/master.deferred.cmb.min.js HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /brand/logo.svg?1595495086 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1503953606/img-sys/powered_by_cpanel.svg HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/libraries/ui-fonts/open_sans/optimized/OpenSans-Regular-webfont.woff HTTP/1.1" 200 0 "https://myserver:2083/cPanel_magic_revision_1582421199/frontend/paper_lantern/_assets/css/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/libraries/ui-fonts/open_sans/optimized/OpenSans-Semibold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2083/cPanel_magic_revision_1582421199/frontend/paper_lantern/_assets/css/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/libraries/bootstrap/optimized/fonts/glyphicons-halflings-regular.woff HTTP/1.1" 200 0 "https://myserver:2083/cPanel_magic_revision_1582421199/frontend/paper_lantern/_assets/css/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/home/index.dist.min.js?locale_optional=1&locale=it&locale_revision=1591070680 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/libraries/cjt2-dist/plugins/locale.js HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/libraries/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1" 200 0 "https://myserver:2083/cPanel_magic_revision_1582421199/frontend/paper_lantern/_assets/css/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /styled/current_style/sprites/icon_spritemap.svg?2d7ac0c654c8665444b2299ebcb19e51afdc0313510d05e05925b8abc32c75c2_4.0 HTTP/1.1" 200 0 "https://myserver:2083/styled/current_style/sprites/icon_spritemap.css?1595495086" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/home/index.cmb.min.js?locale_optional=1&locale=it&locale_revision=1591070680 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/libraries/cjt2-dist/cjt2.cpanel.cmb.min.js?locale=it&locale_revision=1591070680 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/libraries/cjt2-dist/frameworks.cmb.js HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /brand/favicon.ico?1595495086 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/_assets/master.min.js?locale_optional=1&locale=it&locale_revision=1591070680 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/libraries/lodash/4.8.2/lodash.min.js HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "POST /cpsess2314557369/execute/Personalization/get HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /cpsess2314557369/execute/Notifications/get_notifications_count HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:21 -0000] "GET /cPanel_magic_revision_1455824270/frontend/paper_lantern/libraries/chosen/1.5.1/[email protected] HTTP/1.1" 200 0 "https://myserver:2083/cPanel_magic_revision_1455824270/frontend/paper_lantern/libraries/chosen/1.5.1/chosen.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "GET /cpsess2314557369/frontend/paper_lantern/images/spinner.gif HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:23 -0000] "POST /cpsess2314557369/execute/Themes/list HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:23 -0000] "POST /cpsess2314557369/execute/Resellers/list_accounts HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "POST /cpsess2314557369/execute/SSL/installed_host HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:22 -0000] "POST /cpsess2314557369/execute/ResourceUsage/get_usages HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:23 -0000] "GET /cpsess2314557369/frontend/paper_lantern/email_accounts/index.html HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:28 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/email_accounts/index.min.css HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "GET /styled/current_style/icons/email_accounts.png HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:23 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/email_accounts/index.dist.min.js?locale_optional=1&locale=it&locale_revision=1591070680 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/email_accounts/index.cmb.min.js?locale=it&locale_revision=1591070680 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "GET /cpsess2314557369/execute/Notifications/get_notifications_count HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "POST /cpsess2314557369/execute/Personalization/get HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:23 -0000] "POST /cpsess2314557369/execute/Personalization/get HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/libraries/ui-fonts/open_sans/optimized/OpenSans-Italic-webfont.woff HTTP/1.1" 200 0 "https://myserver:2083/cPanel_magic_revision_1582421199/frontend/paper_lantern/_assets/css/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:23 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/libraries/ui-fonts/open_sans/optimized/OpenSans-Bold-webfont.woff HTTP/1.1" 200 0 "https://myserver:2083/cPanel_magic_revision_1582421199/frontend/paper_lantern/_assets/css/master-ltr.cmb.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "POST /cpsess2314557369/execute/Email/list_pops_with_disk HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "POST /cpsess2314557369/execute/ResourceUsage/get_usages HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "GET /cpsess2314557369/frontend/paper_lantern/mail/webmailform.html?user=info%40mysite.com&return_request_uri=%2Fcpsess2314557369%2Ffrontend%2Fpaper_lantern%2Femail_accounts%2Findex.html HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:29 -0000] "GET /cPanel_magic_revision_1542084972/cjt/cjt-min.js?locale=it&locale_optional=1&locale_revision=1591070680 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:33 -0000] "GET /cPanel_magic_revision_1582421199/frontend/paper_lantern/_assets/css/master-legacy-ltr.cmb.min.css HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:30 -0000] "GET /cPanel_magic_revision_1591070117/frontend/paper_lantern/_assets/js/master-legacy.cmb.min.js HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:33 -0000] "GET /cpsess2314557369/frontend/paper_lantern/images/loader.gif HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:33 -0000] "GET /cPanel_magic_revision_1595303657/frontend/paper_lantern/_assets/master.cmb.min.js?locale_optional=1&locale=it&locale_revision=1591070680 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:33 -0000] "GET /cpsess2314557369/execute/Notifications/get_notifications_count HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:34 -0000] "POST /cpsess0347200065/login/ HTTP/1.1" 307 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:34 -0000] "POST /cpsess0347200065/3rdparty/roundcube/index.php?login=1&post_login=89702171505487 HTTP/1.1" 302 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:34 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/styles.min.css?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/calendar/skins/larry/calendar.css?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/libcalendaring/skins/larry/libcal.css?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/mail.min.css?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/libkolab/skins/larry/libkolab.css?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/return_to_webmail/skins/larry/return_to_webmail.css?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/jqueryui/themes/larry/jquery-ui.css?s=1591528317 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/carddav/skins/larry/carddav.css?s=1538378602 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/ui.min.js?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/js/common.min.js?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/js/list.min.js?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/js/jquery.min.js?s=1591528327 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/js/treelist.min.js?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/js/app.min.js?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/return_to_webmail/return_to_webmail.js?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/archive/archive.min.js?s=1591528317 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/jqueryui/js/i18n/jquery.ui.datepicker-it.js?s=1591528317 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/jqueryui/js/jquery-ui.min.js?s=1591528317 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/calendar/calendar_base.js?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/libcalendaring/libcalendaring.js?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/images/roundcube_logo.png?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/watermark.html HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cPanel_magic_revision_1591528318/3rdparty/roundcube/skins/larry/images/buttons.png?v=2e08.13608 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/skins/larry/styles.min.css?s=1591528318" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cPanel_magic_revision_1591528318/3rdparty/roundcube/skins/larry/images/selector.png?v=0d5b.118 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/skins/larry/styles.min.css?s=1591528318" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cPanel_magic_revision_1591528318/3rdparty/roundcube/skins/larry/images/listicons.png?v=4f40.10460 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/skins/larry/styles.min.css?s=1591528318" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:35 -0000] "GET /cPanel_magic_revision_1591528318/3rdparty/roundcube/skins/larry/images/splitter.png?v=6d32.134 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/skins/larry/styles.min.css?s=1591528318" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/images/favicon.ico?s=1591528318 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cPanel_magic_revision_1591918387/3rdparty/roundcube/plugins/return_to_webmail/skins/larry/images/cp-logo-RGB-v42015.svg HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/plugins/return_to_webmail/skins/larry/return_to_webmail.css?s=1591918387" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cPanel_magic_revision_1591528318/3rdparty/roundcube/skins/larry/images/ajaxloader_dark.gif?v=cf1b.1849 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/skins/larry/styles.min.css?s=1591528318" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/resources/dummy.pdf HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/resources/blank.tiff HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=getunread&_page=1&_remote=1&_unlock=0&_=1598277214901 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/resources/blank.webp HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_refresh=1&_layout=list&_mbox=INBOX&_remote=1&_unlock=loading1598277215285&_=1598277214900 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=bye2y2Bp9WuUdCZ7z3yfKcN5r4R2D2EW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/archive/archive.min.js?s=1591528317 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/return_to_webmail/return_to_webmail.js?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/calendar/calendar_base.js?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/plugins/libcalendaring/libcalendaring.js?s=1591918387 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:36 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/images/addcontact.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cPanel_magic_revision_1591528318/3rdparty/roundcube/skins/larry/images/contactpic_48px.png?v=1bc4.353 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/skins/larry/mail.min.css?s=1591528318" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=addressbook&_action=photo&_email=noreply%anothersite.com HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/resources/blocked.gif HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cPanel_magic_revision_1591528318/3rdparty/roundcube/skins/larry/images/filetypes.png?v=a0f5.4718 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/skins/larry/styles.min.css?s=1591528318" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cPanel_magic_revision_1591528318/3rdparty/roundcube/skins/larry/images/messages.png?v=72e9.1264 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/skins/larry/styles.min.css?s=1591528318" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=getunread&_remote=1&_unlock=0&_=1598277226607 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=pagenav&_uid=19937&_mbox=INBOX&_remote=1&_unlock=loading1598277226779&_=1598277226606 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_refresh=1&_uid=19937&_mbox=INBOX&_page= HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19937&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:51 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/watermark.html HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_refresh=1&_uid=19937&_mbox=INBOX&_page=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:51 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=getunread&_page=1&_remote=1&_unlock=0&_=1598277230901 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:47 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_refresh=1&_layout=list&_mbox=INBOX&_remote=1&_unlock=loading1598277231007&_=1598277230900 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_refresh=1&_uid=19937&_mbox=INBOX&_page=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:52 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19895&_mbox=INBOX&_action=show HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:54 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=addressbook&_action=photo&_email=name.surname%40libero.it HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19895&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:48 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=getunread&_remote=1&_unlock=0&_=1598277233869 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19895&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:52 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=pagenav&_uid=19895&_mbox=INBOX&_remote=1&_unlock=loading1598277233965&_=1598277233868 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19895&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:54 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_frame=1&_mbox=INBOX&_uid=19895&_part=2&_action=get&_extwin=1 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19895&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:56 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX&_uid=19895&_part=2&_action=get&_extwin=1&_preload=1&_framed=1 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_frame=1&_mbox=INBOX&_uid=19895&_part=2&_action=get&_extwin=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:57 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX&_uid=19895&_part=2&_action=get&_extwin=1&_framed=1&_mimewarning=1&_embed=1 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:57 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_refresh=1&_uid=19895&_mbox=INBOX&_page= HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=19895&_mbox=INBOX&_action=show" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:54:08 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/watermark.html HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_refresh=1&_uid=19895&_mbox=INBOX&_page=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:53:55 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=getunread&_page=1&_remote=1&_unlock=0&_=1598277247286 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:54:08 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_refresh=1&_layout=list&_mbox=INBOX&_remote=1&_unlock=loading1598277247471&_=1598277247285 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_refresh=1&_uid=19895&_mbox=INBOX&_page=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite.com [08/24/2020:13:54:08 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_layout=list&_mbox=INBOX&_page=2&_remote=1&_unlock=loading1598277256355&_=1598277247287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:53:34 -0000] "GET /cpsess2314557369/frontend/paper_lantern/mail/webmailform.html?user=info%40mysite2.com&return_request_uri=%2Fcpsess2314557369%2Ffrontend%2Fpaper_lantern%2Femail_accounts%2Findex.html HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:54:27 -0000] "GET /cpsess2314557369/execute/Notifications/get_notifications_count HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:28 -0000] "POST /cpsess2239873588/login/ HTTP/1.1" 307 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2096
xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:29 -0000] "POST /cpsess0347200065/3rdparty/roundcube/index.php?login=1&post_login=89702171505487 HTTP/1.1" 302 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:29 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=SeVpjw3TBgQDDOcGg6NFf4CNGa2WFx0S HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:29 -0000] "GET /cpsess0347200065/3rdparty/roundcube/program/js/list.min.js?s=1591528318 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=SeVpjw3TBgQDDOcGg6NFf4CNGa2WFx0S" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:30 -0000] "GET /cpsess0347200065/3rdparty/roundcube/skins/larry/watermark.html HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=SeVpjw3TBgQDDOcGg6NFf4CNGa2WFx0S" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:30 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=getunread&_page=1&_remote=1&_unlock=0&_=1598277268998 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:30 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_refresh=1&_layout=list&_mbox=INBOX&_remote=1&_unlock=loading1598277269204&_=1598277268997 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_token=SeVpjw3TBgQDDOcGg6NFf4CNGa2WFx0S" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:30 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_layout=list&_mbox=INBOX&_page=2&_remote=1&_unlock=loading1598277278133&_=1598277268999 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:39 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_layout=list&_mbox=INBOX&_page=3&_remote=1&_unlock=loading1598277279048&_=1598277269000 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX&_page=2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:40 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_layout=list&_mbox=INBOX&_page=4&_remote=1&_unlock=loading1598277279796&_=1598277269001 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX&_page=3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:41 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_layout=list&_mbox=INBOX&_page=5&_remote=1&_unlock=loading1598277280686&_=1598277269002 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX&_page=4" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - info%40mysite2.com [08/24/2020:13:54:41 -0000] "GET /cpsess0347200065/3rdparty/roundcube/?_task=mail&_action=list&_layout=list&_mbox=INBOX&_page=6&_remote=1&_unlock=loading1598277281480&_=1598277269003 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/3rdparty/roundcube/?_task=mail&_mbox=INBOX&_page=5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:54:28 -0000] "GET /cpsess2314557369/frontend/paper_lantern/mail/webmailform.html?user=booking%40mysite.com&return_request_uri=%2Fcpsess2314557369%2Ffrontend%2Fpaper_lantern%2Femail_accounts%2Findex.html HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:54:49 -0000] "GET /brand/logo.svg?1595495086 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser3 [08/24/2020:13:54:49 -0000] "GET /cpsess2314557369/execute/Notifications/get_notifications_count HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:49 -0000] "POST /cpsess0085227954/login/ HTTP/1.1" 307 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:50 -0000] "POST /cpsess0347200065/horde/index.php?cpanel=1&login=1&post_login=89702171505487 HTTP/1.1" 302 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:50 -0000] "GET /cpsess0347200065/horde/login.php HTTP/1.1" 302 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:57 -0000] "GET /cpsess0347200065/horde/imp/dynamic.php?page=mailbox HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/themes/default/mime.css HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/horde.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/hordecore.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/themes/default/mozilla.css HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/themes/default/screen.css HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/themes/default/screen.css HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/themes/default/dynamic/screen.css HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/js/viewport_utils.js?v=29c8308baa6508a21e1be9e3345d1287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/js/dimpcore.js?v=29c8308baa6508a21e1be9e3345d1287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/imple.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/contextsensitive.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/js/dimpbase.js?v=29c8308baa6508a21e1be9e3345d1287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/prototype.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/js/viewport.js?v=29c8308baa6508a21e1be9e3345d1287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/js/passphrase.js?v=29c8308baa6508a21e1be9e3345d1287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/js/external/tinycon.js?v=29c8308baa6508a21e1be9e3345d1287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/dragdrop2.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/form_ghost.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/jstorage.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/slider2.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - root [08/24/2020:13:54:58 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/toggle_quotes.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/redbox.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/dialog.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/js/scriptaculous/effects.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:58 -0000] "GET /cpsess0347200065/horde/imp/js/imp.js?v=29c8308baa6508a21e1be9e3345d1287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/colorpicker.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/imp/js/external/base64.js?v=29c8308baa6508a21e1be9e3345d1287 HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/popup.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/date/date.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/date/en-US.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/topbar.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/accesskeys.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/growler.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/sidebar.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/logo.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/themes/default/graphics/search-topbar.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/head-bg.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/js/scriptaculous/sound.js?v=dc442439853f80a9467ce727c08e9b0e HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/navi-left-active.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/navi-center-active.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/navi-arrow-active.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/navi-right-active.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/navi-arrow-normal.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/settings.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/logout.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/popdown.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/sidebar-new-bg.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/sidebar-new.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/slidevert.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/slidevert-bg.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/buttonbar-bg.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/button-split.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/reload.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/checkbox_off.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/tablehead-bg.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/tablehead-split.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/slidehoriz.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/slidehoriz-bg.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/ico_message_off.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/reload.gif HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cpsess0347200065/horde/imp/themes/default/graphics/favicon.ico HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "POST /cpsess0347200065/horde/services/ajax.php/imp/dynamicInit HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/sidebar-active-bg.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/folders/drafts.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/folders/inbox.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/folders/sent.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/folders/plus.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:54:59 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/folders/folder.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/alerts/message.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/close.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "POST /cpsess0347200065/horde/services/ajax.php/imp/viewPort HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/scroller_back.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/sbcursor_top.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/scroller.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/sbcursor_bottom.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/flags/answered.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:00 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/flags/personal.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:01 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/flags/unseen.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:01 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/flags/forwarded.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:01 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/za.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:01 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/reply.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:01 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/forward.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:01 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/flags/personal-inv.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:02 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/checkbox_on.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:01 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/delete.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:07 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/loading.gif HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:01 -0000] "POST /cpsess0347200065/horde/services/ajax.php/imp/showMessage HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:07 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/plus.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:07 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/button.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:07 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/arrow_collapsed.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/dynamic/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:08 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/download.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:07 -0000] "GET /cPanel_magic_revision_1573145768/horde/imp/themes/default/graphics/print.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:08 -0000] "POST /cpsess0347200065/horde/services/ajax.php/imp/showMessage HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:19 -0000] "POST /cpsess0347200065/horde/services/ajax.php/imp/viewPort HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/imp/dynamic.php?page=mailbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - root [08/24/2020:13:54:59 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:24 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/settings-active.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - booking%40mysite.com [08/24/2020:13:55:08 -0000] "GET /cPanel_magic_revision_1573145544/horde/themes/default/graphics/navi-subnavi.png HTTP/1.1" 200 0 "https://myserver:2096/cpsess0347200065/horde/themes/default/screen.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2096
xxx.xxx.xxx.xx - root [08/24/2020:13:55:29 -0000] "POST /xfercpanel HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:45 -0000] "GET /cpsess8730218533/login/?session=cpaneluser1:fLol0sZmDGKhZoHw,cfa7e9fd9cd4ba9cefbc5e32f112e2ab HTTP/1.1" 307 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "GET /cpsess2764116686/frontend/paper_lantern/index.html?login=1&post_login=89702171505487 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "GET /styled/current_style/sprites/icon_spritemap.css?1596972027 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "GET /styled/current_style/styles.css?1596972027 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "GET /brand/logo.svg?1596972027 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "GET /brand/favicon.ico?1596972027 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:47 -0000] "GET /cpsess2764116686/execute/Notifications/get_notifications_count HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "POST /cpsess2764116686/execute/Personalization/get HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:47 -0000] "GET /cpsess2764116686/frontend/paper_lantern/images/spinner.gif HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "POST /cpsess2764116686/execute/Themes/list HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "POST /cpsess2764116686/execute/Resellers/list_accounts HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "POST /cpsess2764116686/execute/SSL/installed_host HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:46 -0000] "POST /cpsess2764116686/execute/ResourceUsage/get_usages HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:47 -0000] "GET /cpsess2764116686/frontend/paper_lantern/email_accounts/index.html HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:49 -0000] "GET /cpsess2764116686/execute/Notifications/get_notifications_count HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:47 -0000] "POST /cpsess2764116686/execute/Personalization/get HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:47 -0000] "POST /cpsess2764116686/execute/Personalization/get HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:50 -0000] "POST /cpsess2764116686/execute/Email/list_pops_with_disk HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser1 [08/24/2020:13:55:47 -0000] "POST /cpsess2764116686/execute/ResourceUsage/get_usages HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - root [08/24/2020:13:55:57 -0000] "POST /xfercpanel HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087
xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:58 -0000] "GET /cpsess8730218533/login/?session=cpaneluser2:3WbvpkuLN1KE6bdt,43ac3628f5c358a819f4ce0b47b9f11e HTTP/1.1" 307 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "-" "-" 2083
xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:58 -0000] "GET /cpsess4668942040/frontend/paper_lantern/index.html?login=1&post_login=89702171505487 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "GET /styled/current_style/sprites/icon_spritemap.css?1596133189 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "GET /styled/current_style/styles.css?1596133189 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "GET /brand/logo.svg?1596133189 HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "GET /brand/favicon.ico?1596133189 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "GET /cpsess4668942040/execute/Notifications/get_notifications_count HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "POST /cpsess4668942040/execute/Personalization/get HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:56:00 -0000] "GET /cpsess4668942040/frontend/paper_lantern/images/spinner.gif HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "POST /cpsess4668942040/execute/Themes/list HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:56:00 -0000] "POST /cpsess4668942040/execute/Resellers/list_accounts HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "POST /cpsess4668942040/execute/SSL/installed_host HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - cpaneluser2 [08/24/2020:13:55:59 -0000] "POST /cpsess4668942040/execute/ResourceUsage/get_usages HTTP/1.1" 200 0 "https://myserver:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2083
xxx.xxx.xxx.xx - root [08/24/2020:13:56:29 -0000] "GET /cpsess8730218533/json-api/loadavg HTTP/1.1" 200 0 "https://myserver:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "s" "-" 2087

@keat63 No of course is not enough, but it's better than nothing (all three unauthorized accesses were from the same subnet).

If you mean host access control in WHM, i could block all IPs except mine, but i have not a static IP.

keat63 · Oct 29, 2020

If your dynamic IP is always from the same subnet, you could whitelist the whole subnet.
I had to do this to gain access from home, before I created a VPN in to the office.
It's not ideal, but you would effectively be locking it down to just 255 IP's, which is a heck of a lot stricter than 4 billion. (currently)

Thread starter	Similar threads	Forum	Replies	Date
T	How to set LFD to send email for WHM/cPanel access alert if the IP in allowed list?	Security	1	Nov 22, 2023
X	My WHM panel version 112.0.7 Safety Center's host access control strategy setting does not take effect	Security	4	Aug 22, 2023
C	Root email changed and cannot have access via WHM	Security	3	Aug 9, 2023
U	How to access WHM panel with Disabled root user	Security	5	May 15, 2023
	Block cPanel and WHM access	Security	3	Feb 16, 2023

Search

Search

WHM access not by me

rs200

Active Member

ZenHostingTravis

Well-Known Member

keat63

Well-Known Member

rs200

Active Member

ZenHostingTravis

Well-Known Member

cPanelBrianK

Technical Analyst III

keat63

Well-Known Member

rs200

Active Member

keat63

Well-Known Member