Leaseweb Managed Hosting Hardening Script Version: 12 CentOS 9 Version Logging in file /root/managed/harden-2026-05-12-20-13-14.log Check for duplicate almalinux.repo in AlmaLinux 9 + Checking almalinux.repo ...  Install Perl FindBin + Checking for FindBin ...  installed Install Kernel Headers + Checking for kernel headers ...  installed Install Kernel Devel + Checking for kernel devel ...  installed Leaseweb Support Key + Checking Leaseweb Support SSH Key ...  exists Preliminary fixes + Import new MySQL GPG Key ...  done + Fix sudoers line in /etc/nsswitch.conf ...  done Checking cPanel Status + Checking for cPanel ...  installed Set Shared IP + Setting to main IP if set to 127.0.0.1 ...  done Checking if Server is up-to-date + Checking if updated ...  yes AlmaLinux Installation + Checking for AlmaLinux ...  installed Check for Acronis Agent + Checking for agent ...  not installed + Installing temp Directory ...  done + Changing to temp Directory ...  done + Downloading 64-bit version ...  2026-05-12 20:19:27 URL:https://leaseweb-redirect.servint.net/acronis/Cyber_Protection_Agent_for_Linux_x86_64.bin [1160781091/1160781091] -> "acronis.bin" [1] done Initializing...Done Stopping services...Done Installing Cyber Protection Agent Packages dkms-3.10.16.1-99 snapapi26_modules-0.8.65-1 file_protector-1.1-1592 BackupAndRecoveryBootableComponents-26.4.42393-1 BackupAndRecoveryAgent-26.4.42393-1 Please wait while checking whether GCC is installed...Done Please wait while checking whether all the required packages are installed...Done Please wait while installing the 'file_protector' kernel module...Done Please wait while installing the 'snapapi26' kernel module...Done Upgrading services... Starting services...Done Upgrading services stage after-start... Registering on management server.Success Congratulations! Cyber Protection Agent has been successfully installed in the system. + Removing temp dir ...  done cPanel Tweak Settings + Turning off Restrict outgoing SMTP to root, exim, and mailman (FKA SMTP Tweak) ...  --- metadata: command: set_tweaksetting reason: OK result: 1 version: 1 done + Setting nightly Kernel Updates ...  --- metadata: command: set_tweaksetting reason: OK result: 1 version: 1 done Install IPSet + Checking for IPSet ...  installed CSF Firewall + Checking for CSF Firewall ...  not installed + Installing temp Directory ...  done + Changing to temp Directory ...  done + CSF downloading ...  --2026-05-12 20:20:40-- https://leaseweb-redirect.servint.net/files/csf.tgz Resolving leaseweb-redirect.servint.net (leaseweb-redirect.servint.net)... 162.210.199.197 Connecting to leaseweb-redirect.servint.net (leaseweb-redirect.servint.net)|162.210.199.197|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 2297087 (2.2M) [application/x-gzip] Saving to: ‘csf.tgz’ 0K .......... .......... .......... .......... .......... 2% 843K 3s 50K .......... .......... .......... .......... .......... 4% 1.65M 2s 100K .......... .......... .......... .......... .......... 6% 59.1M 1s 150K .......... .......... .......... .......... .......... 8% 1.70M 1s 200K .......... .......... .......... .......... .......... 11% 73.6M 1s 250K .......... .......... .......... .......... .......... 13% 100M 1s 300K .......... .......... .......... .......... .......... 15% 88.7M 1s 350K .......... .......... .......... .......... .......... 17% 93.1M 1s 400K .......... .......... .......... .......... .......... 20% 1.76M 1s 450K .......... .......... .......... .......... .......... 22% 81.1M 1s 500K .......... .......... .......... .......... .......... 24% 97.7M 0s 550K .......... .......... .......... .......... .......... 26% 96.0M 0s 600K .......... .......... .......... .......... .......... 28% 88.1M 0s 650K .......... .......... .......... .......... .......... 31% 97.9M 0s 700K .......... .......... .......... .......... .......... 33% 100M 0s 750K .......... .......... .......... .......... .......... 35% 95.9M 0s 800K .......... .......... .......... .......... .......... 37% 1.91M 0s 850K .......... .......... .......... .......... .......... 40% 80.5M 0s 900K .......... .......... .......... .......... .......... 42% 91.4M 0s 950K .......... .......... .......... .......... .......... 44% 95.1M 0s 1000K .......... .......... .......... .......... .......... 46% 79.3M 0s 1050K .......... .......... .......... .......... .......... 49% 95.8M 0s 1100K .......... .......... .......... .......... .......... 51% 96.2M 0s 1150K .......... .......... .......... .......... .......... 53% 101M 0s 1200K .......... .......... .......... .......... .......... 55% 76.8M 0s 1250K .......... .......... .......... .......... .......... 57% 94.3M 0s 1300K .......... .......... .......... .......... .......... 60% 91.1M 0s 1350K .......... .......... .......... .......... .......... 62% 91.4M 0s 1400K .......... .......... .......... .......... .......... 64% 86.1M 0s 1450K .......... .......... .......... .......... .......... 66% 119M 0s 1500K .......... .......... .......... .......... .......... 69% 121M 0s 1550K .......... .......... .......... .......... .......... 71% 121M 0s 1600K .......... .......... .......... .......... .......... 73% 104M 0s 1650K .......... .......... .......... .......... .......... 75% 129M 0s 1700K .......... .......... .......... .......... .......... 78% 2.28M 0s 1750K .......... .......... .......... .......... .......... 80% 88.0M 0s 1800K .......... .......... .......... .......... .......... 82% 79.3M 0s 1850K .......... .......... .......... .......... .......... 84% 94.0M 0s 1900K .......... .......... .......... .......... .......... 86% 95.6M 0s 1950K .......... .......... .......... .......... .......... 89% 95.7M 0s 2000K .......... .......... .......... .......... .......... 91% 77.3M 0s 2050K .......... .......... .......... .......... .......... 93% 94.1M 0s 2100K .......... .......... .......... .......... .......... 95% 92.2M 0s 2150K .......... .......... .......... .......... .......... 98% 99.6M 0s 2200K .......... .......... .......... .......... ... 100% 88.3M=0.2s 2026-05-12 20:20:41 (10.3 MB/s) - ‘csf.tgz’ saved [2297087/2297087] done + CSF installing ...  csf/ csf/ConfigServer/ csf/ConfigServer/AbuseIP.pm csf/ConfigServer/CheckIP.pm csf/ConfigServer/CloudFlare.pm csf/ConfigServer/Config.pm csf/ConfigServer/cseUI.pm csf/ConfigServer/DisplayResellerUI.pm csf/ConfigServer/DisplayUI.pm csf/ConfigServer/GetEthDev.pm csf/ConfigServer/GetIPs.pm csf/ConfigServer/KillSSH.pm csf/ConfigServer/Logger.pm csf/ConfigServer/LookUpIP.pm csf/ConfigServer/Messenger.pm csf/ConfigServer/Ports.pm csf/ConfigServer/RBLCheck.pm csf/ConfigServer/RBLLookup.pm csf/ConfigServer/RegexMain.pm csf/ConfigServer/Sanity.pm csf/ConfigServer/Sendmail.pm csf/ConfigServer/ServerCheck.pm csf/ConfigServer/ServerStats.pm csf/ConfigServer/Service.pm csf/ConfigServer/Slurp.pm csf/ConfigServer/URLGet.pm csf/cpanel/ csf/cpanel/csf.cgi csf/cpanel/csf.conf csf/cpanel/csf.tmpl csf/cpanel/Driver/ csf/cpanel/Driver/ConfigServercsf/ csf/cpanel/Driver/ConfigServercsf/META.pm csf/cpanel/Driver/ConfigServercsf.pm csf/cpanel/upgrade.sh csf/Crypt/ csf/Crypt/Blowfish_PP.pm csf/Crypt/CBC.pm csf/csf/ csf/csf/admin_icon.svg csf/csf/bootstrap/ csf/csf/bootstrap/css/ csf/csf/bootstrap/css/bootstrap.min.css csf/csf/bootstrap/css/bootstrap.min.css.map csf/csf/bootstrap/fonts/ csf/csf/bootstrap/fonts/glyphicons-halflings-regular.eot csf/csf/bootstrap/fonts/glyphicons-halflings-regular.svg csf/csf/bootstrap/fonts/glyphicons-halflings-regular.ttf csf/csf/bootstrap/fonts/glyphicons-halflings-regular.woff csf/csf/bootstrap/fonts/glyphicons-halflings-regular.woff2 csf/csf/bootstrap/js/ csf/csf/bootstrap/js/bootstrap.min.js csf/csf/bootstrap-chosen.css csf/csf/chosen-sprite.png csf/csf/chosen-sprite@2x.png csf/csf/chosen.min.css csf/csf/chosen.min.js csf/csf/configserver.css csf/csf/csf-loader.gif csf/csf/csf.svg csf/csf/csf_small.png csf/csf/jquery.min.js csf/csf/LICENSE.txt csf/csf/loader.gif csf/csf/reseller_icon.svg csf/cwp/ csf/cwp/ajax_csfframe.php csf/cwp/configserver.php csf/cwp/csf.pl csf/cwp/csfofficial.php csf/cyberpanel/ csf/cyberpanel/configservercsf/ csf/cyberpanel/configservercsf/admin.py csf/cyberpanel/configservercsf/apps.py csf/cyberpanel/configservercsf/config csf/cyberpanel/configservercsf/meta.xml csf/cyberpanel/configservercsf/migrations/ csf/cyberpanel/configservercsf/migrations/__init__.py csf/cyberpanel/configservercsf/models.py csf/cyberpanel/configservercsf/signals.py csf/cyberpanel/configservercsf/static/ csf/cyberpanel/configservercsf/static/configservercsf/ csf/cyberpanel/configservercsf/templates/ csf/cyberpanel/configservercsf/templates/configservercsf/ csf/cyberpanel/configservercsf/templates/configservercsf/index.html csf/cyberpanel/configservercsf/templates/configservercsf/menu.html csf/cyberpanel/configservercsf/tests.py csf/cyberpanel/configservercsf/urls.py csf/cyberpanel/configservercsf/views.py csf/cyberpanel/configservercsf/__init__.py csf/cyberpanel/cyberpanel.pl csf/da/ csf/da/admin/ csf/da/admin/index.html csf/da/admin/index.raw csf/da/exec/ csf/da/exec/da_csf.cgi csf/da/exec/da_csf_reseller.cgi csf/da/hooks/ csf/da/hooks/admin_img.html csf/da/hooks/admin_txt.html csf/da/hooks/reseller_img.html csf/da/hooks/reseller_txt.html csf/da/images/ csf/da/images/admin_icon.svg csf/da/images/bootstrap/ csf/da/images/bootstrap/css/ csf/da/images/bootstrap/css/bootstrap.min.css csf/da/images/bootstrap/css/bootstrap.min.css.map csf/da/images/bootstrap/fonts/ csf/da/images/bootstrap/fonts/glyphicons-halflings-regular.eot csf/da/images/bootstrap/fonts/glyphicons-halflings-regular.svg csf/da/images/bootstrap/fonts/glyphicons-halflings-regular.ttf csf/da/images/bootstrap/fonts/glyphicons-halflings-regular.woff csf/da/images/bootstrap/fonts/glyphicons-halflings-regular.woff2 csf/da/images/bootstrap/js/ csf/da/images/bootstrap/js/bootstrap.min.js csf/da/images/bootstrap-chosen.css csf/da/images/chosen.min.css csf/da/images/chosen.min.js csf/da/images/chosen-sprite@2x.png csf/da/images/chosen-sprite.png csf/da/images/configserver.css csf/da/images/csf-loader.gif csf/da/images/csf_small.png csf/da/images/csf.svg csf/da/images/jquery.min.js csf/da/images/LICENSE.txt csf/da/images/loader.gif csf/da/images/reseller_icon.svg csf/da/plugin.conf csf/da/reseller/ csf/da/reseller/index.html csf/da/reseller/index.raw csf/da/scripts/ csf/da/scripts/install.sh csf/da/scripts/uninstall.sh csf/da/scripts/update.sh csf/HTTP/ csf/HTTP/Tiny.pm csf/interworx/ csf/interworx/Ctrl/ csf/interworx/Ctrl/Nodeworx/ csf/interworx/Ctrl/Nodeworx/Configservercsf.php csf/interworx/images/ csf/interworx/images/bootstrap/ csf/interworx/images/bootstrap/css/ csf/interworx/images/bootstrap/css/bootstrap.min.css csf/interworx/images/bootstrap/css/bootstrap.min.css.map csf/interworx/images/bootstrap/fonts/ csf/interworx/images/bootstrap/fonts/glyphicons-halflings-regular.eot csf/interworx/images/bootstrap/fonts/glyphicons-halflings-regular.svg csf/interworx/images/bootstrap/fonts/glyphicons-halflings-regular.ttf csf/interworx/images/bootstrap/fonts/glyphicons-halflings-regular.woff csf/interworx/images/bootstrap/fonts/glyphicons-halflings-regular.woff2 csf/interworx/images/bootstrap/js/ csf/interworx/images/bootstrap/js/bootstrap.min.js csf/interworx/images/bootstrap-chosen.css csf/interworx/images/chosen-sprite.png csf/interworx/images/chosen-sprite@2x.png csf/interworx/images/chosen.min.css csf/interworx/images/chosen.min.js csf/interworx/images/configserver.css csf/interworx/images/csf-loader.gif csf/interworx/images/csf.svg csf/interworx/images/csf_small.png csf/interworx/images/jquery.min.js csf/interworx/images/LICENSE.txt csf/interworx/images/loader.gif csf/interworx/images/admin_icon.svg csf/interworx/images/reseller_icon.svg csf/interworx/lib/ csf/interworx/lib/index.pl csf/interworx/lib/reseller.pl csf/interworx/Plugin/ csf/interworx/Plugin/Configservercsf.php csf/interworx/plugin.ini csf/interworx/templates/ csf/interworx/templates/admin.tpl csf/interworx/templates/reseller.tpl csf/JSON/ csf/JSON/Tiny.pm csf/messenger/ csf/messenger/en.php csf/messenger/index.html csf/messenger/index.php csf/messenger/index.recaptcha.html csf/messenger/index.recaptcha.php csf/messenger/index.text csf/Module/ csf/Module/Installed/ csf/Module/Installed/Tiny.pm csf/Net/ csf/Net/CIDR/ csf/Net/CIDR/Lite.pm csf/Net/IP.pm csf/profiles/ csf/profiles/block_all_perm.conf csf/profiles/block_all_temp.conf csf/profiles/disable_alerts.conf csf/profiles/protection_high.conf csf/profiles/protection_low.conf csf/profiles/protection_medium.conf csf/ui/ csf/ui/images/ csf/ui/images/admin_icon.svg csf/ui/images/bootstrap/ csf/ui/images/bootstrap/css/ csf/ui/images/bootstrap/css/bootstrap.min.css csf/ui/images/bootstrap/css/bootstrap.min.css.map csf/ui/images/bootstrap/fonts/ csf/ui/images/bootstrap/fonts/glyphicons-halflings-regular.eot csf/ui/images/bootstrap/fonts/glyphicons-halflings-regular.svg csf/ui/images/bootstrap/fonts/glyphicons-halflings-regular.ttf csf/ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff csf/ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff2 csf/ui/images/bootstrap/js/ csf/ui/images/bootstrap/js/bootstrap.min.js csf/ui/images/bootstrap-chosen.css csf/ui/images/chosen.min.css csf/ui/images/chosen.min.js csf/ui/images/chosen-sprite@2x.png csf/ui/images/chosen-sprite.png csf/ui/images/configserver.css csf/ui/images/csf-loader.gif csf/ui/images/csf_small.png csf/ui/images/csf.svg csf/ui/images/jquery.min.js csf/ui/images/LICENSE.txt csf/ui/images/loader.gif csf/ui/images/reseller_icon.svg csf/ui/server.crt csf/ui/server.key csf/ui/ui.allow csf/ui/ui.ban csf/version/ csf/version/version/ csf/version/version/regex.pm csf/version/version/vpp.pm csf/version/version.pm csf/vestacp/ csf/vestacp/csf.pl csf/vestacp/frame.php csf/vestacp/index.php csf/webmin/ csf/webmin/csf/ csf/webmin/csf/images/ csf/webmin/csf/images/admin_icon.svg csf/webmin/csf/images/bootstrap/ csf/webmin/csf/images/bootstrap/css/ csf/webmin/csf/images/bootstrap/css/bootstrap.min.css csf/webmin/csf/images/bootstrap/css/bootstrap.min.css.map csf/webmin/csf/images/bootstrap/fonts/ csf/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.eot csf/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.svg csf/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.ttf csf/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff csf/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff2 csf/webmin/csf/images/bootstrap/js/ csf/webmin/csf/images/bootstrap/js/bootstrap.min.js csf/webmin/csf/images/bootstrap-chosen.css csf/webmin/csf/images/chosen.min.css csf/webmin/csf/images/chosen.min.js csf/webmin/csf/images/chosen-sprite@2x.png csf/webmin/csf/images/chosen-sprite.png csf/webmin/csf/images/configserver.css csf/webmin/csf/images/csf-loader.gif csf/webmin/csf/images/csf_small.png csf/webmin/csf/images/csf.svg csf/webmin/csf/images/jquery.min.js csf/webmin/csf/images/LICENSE.txt csf/webmin/csf/images/loader.gif csf/webmin/csf/images/reseller_icon.svg csf/webmin/csf/index.cgi csf/webmin/csf/module.info csf/accounttracking.txt csf/alert.txt csf/apache.http.txt csf/apache.https.txt csf/apache.main.txt csf/apf_stub.pl csf/auto.cwp.pl csf/auto.cyberpanel.pl csf/auto.directadmin.pl csf/auto.generic.pl csf/auto.interworx.pl csf/auto.pl csf/auto.vesta.pl csf/changelog.txt csf/connectiontracking.txt csf/consolealert.txt csf/cpanel.allow csf/cpanel.comodo.allow csf/cpanel.comodo.ignore csf/cpanel.ignore csf/cpanelalert.txt csf/csf.1.txt csf/csf.allow csf/csf.blocklists csf/csf.c csf/csf.cloudflare csf/csf.conf csf/csf.cwp.allow csf/csf.cwp.conf csf/csf.cwp.ignore csf/csf.cwp.pignore csf/csf.cyberpanel.allow csf/csf.cyberpanel.conf csf/csf.cyberpanel.ignore csf/csf.cyberpanel.pignore csf/csf.deny csf/csf.directadmin.allow csf/csf.directadmin.conf csf/csf.directadmin.ignore csf/csf.directadmin.pignore csf/csf.dirwatch csf/csf.div csf/csf.dyndns csf/csf.fignore csf/csf.generic.allow csf/csf.generic.conf csf/csf.generic.ignore csf/csf.generic.pignore csf/csf.help csf/csf.ignore csf/csf.interworx.allow csf/csf.interworx.conf csf/csf.interworx.ignore csf/csf.interworx.pignore csf/csf.logfiles csf/csf.logignore csf/csf.mignore csf/csf.pignore csf/csf.pl csf/csf.rblconf csf/csf.rbls csf/csf.redirect csf/csf.resellers csf/csf.rignore csf/csf.service csf/csf.sh csf/csf.signore csf/csf.sips csf/csf.smtpauth csf/csf.suignore csf/csf.syslogs csf/csf.syslogusers csf/csf.uidignore csf/csf.vesta.allow csf/csf.vesta.conf csf/csf.vesta.ignore csf/csf.vesta.pignore csf/csfajaxtail.js csf/csfcron.sh csf/csftest.pl csf/csget.pl csf/downloadservers csf/exploitalert.txt csf/filealert.txt csf/forkbombalert.txt csf/install.cpanel.sh csf/install.cwp.sh csf/install.cyberpanel.sh csf/install.directadmin.sh csf/install.generic.sh csf/install.interworx.sh csf/install.sh csf/install.txt csf/install.vesta.sh csf/integrityalert.txt csf/lfd.logrotate csf/lfd.pl csf/lfd.service csf/lfd.sh csf/lfdcron.directadmin.sh csf/lfdcron.sh csf/license.txt csf/litespeed.http.txt csf/litespeed.https.txt csf/litespeed.main.txt csf/loadalert.txt csf/logalert.txt csf/logfloodalert.txt csf/migratedata.sh csf/modsecipdbalert.txt csf/netblock.txt csf/os.pl csf/perf.sh csf/permblock.txt csf/portknocking.txt csf/portscan.txt csf/processtracking.txt csf/pt_deleted_action.pl csf/queuealert.txt csf/readme.txt csf/recaptcha.txt csf/regex.custom.pm csf/relayalert.txt csf/remove_apf_bfd.sh csf/resalert.txt csf/reselleralert.txt csf/restricted.txt csf/sanity.txt csf/scriptalert.txt csf/sshalert.txt csf/sualert.txt csf/sudoalert.txt csf/syslogalert.txt csf/tracking.txt csf/uialert.txt csf/uidscan.txt csf/uninstall.cwp.sh csf/uninstall.cyberpanel.sh csf/uninstall.directadmin.sh csf/uninstall.generic.sh csf/uninstall.interworx.sh csf/uninstall.sh csf/uninstall.vesta.sh csf/upgrade.txt csf/usertracking.txt csf/version.txt csf/watchalert.txt csf/webminalert.txt csf/x-arf.txt Selecting installer... Running csf cPanel installer Installing csf and lfd Check we're running as root mkdir: created directory '/etc/csf' 'install.txt' -> '/etc/csf/install.txt' Checking Perl modules... Configuration modified to use iptables-nft Configuration modified to use ip6tables-nft cannot access /var/lib/alternatives/ip6tables: No such file or directory Using configuration defaults ...Perl modules OK mkdir: created directory '/var/lib/csf' mkdir: created directory '/var/lib/csf/backup' mkdir: created directory '/var/lib/csf/Geo' mkdir: created directory '/var/lib/csf/ui' mkdir: created directory '/var/lib/csf/stats' mkdir: created directory '/var/lib/csf/lock' mkdir: created directory '/var/lib/csf/webmin' mkdir: created directory '/var/lib/csf/zone' mkdir: created directory '/usr/local/csf' mkdir: created directory '/usr/local/csf/bin' mkdir: created directory '/usr/local/csf/lib' mkdir: created directory '/usr/local/csf/tpl' 'csf.conf' -> '/etc/csf/./csf.conf' 'csf.allow' -> '/etc/csf/./csf.allow' 'csf.deny' -> '/etc/csf/./csf.deny' 'csf.redirect' -> '/etc/csf/./csf.redirect' 'csf.resellers' -> '/etc/csf/./csf.resellers' 'csf.dirwatch' -> '/etc/csf/./csf.dirwatch' 'csf.syslogs' -> '/etc/csf/./csf.syslogs' 'csf.logfiles' -> '/etc/csf/./csf.logfiles' 'csf.logignore' -> '/etc/csf/./csf.logignore' 'csf.blocklists' -> '/etc/csf/./csf.blocklists' 'csf.ignore' -> '/etc/csf/./csf.ignore' 'csf.pignore' -> '/etc/csf/./csf.pignore' 'csf.rignore' -> '/etc/csf/./csf.rignore' 'csf.fignore' -> '/etc/csf/./csf.fignore' 'csf.signore' -> '/etc/csf/./csf.signore' 'csf.suignore' -> '/etc/csf/./csf.suignore' 'csf.uidignore' -> '/etc/csf/./csf.uidignore' 'csf.mignore' -> '/etc/csf/./csf.mignore' 'csf.sips' -> '/etc/csf/./csf.sips' 'csf.dyndns' -> '/etc/csf/./csf.dyndns' 'csf.syslogusers' -> '/etc/csf/./csf.syslogusers' 'csf.smtpauth' -> '/etc/csf/./csf.smtpauth' 'csf.rblconf' -> '/etc/csf/./csf.rblconf' 'csf.cloudflare' -> '/etc/csf/./csf.cloudflare' 'alert.txt' -> '/usr/local/csf/tpl/./alert.txt' 'reselleralert.txt' -> '/usr/local/csf/tpl/./reselleralert.txt' 'logalert.txt' -> '/usr/local/csf/tpl/./logalert.txt' 'logfloodalert.txt' -> '/usr/local/csf/tpl/./logfloodalert.txt' 'syslogalert.txt' -> '/usr/local/csf/tpl/./syslogalert.txt' 'integrityalert.txt' -> '/usr/local/csf/tpl/./integrityalert.txt' 'exploitalert.txt' -> '/usr/local/csf/tpl/./exploitalert.txt' 'queuealert.txt' -> '/usr/local/csf/tpl/./queuealert.txt' 'modsecipdbalert.txt' -> '/usr/local/csf/tpl/./modsecipdbalert.txt' 'tracking.txt' -> '/usr/local/csf/tpl/./tracking.txt' 'connectiontracking.txt' -> '/usr/local/csf/tpl/./connectiontracking.txt' 'processtracking.txt' -> '/usr/local/csf/tpl/./processtracking.txt' 'accounttracking.txt' -> '/usr/local/csf/tpl/./accounttracking.txt' 'usertracking.txt' -> '/usr/local/csf/tpl/./usertracking.txt' 'sshalert.txt' -> '/usr/local/csf/tpl/./sshalert.txt' 'webminalert.txt' -> '/usr/local/csf/tpl/./webminalert.txt' 'sualert.txt' -> '/usr/local/csf/tpl/./sualert.txt' 'sudoalert.txt' -> '/usr/local/csf/tpl/./sudoalert.txt' 'consolealert.txt' -> '/usr/local/csf/tpl/./consolealert.txt' 'uialert.txt' -> '/usr/local/csf/tpl/./uialert.txt' 'cpanelalert.txt' -> '/usr/local/csf/tpl/./cpanelalert.txt' 'scriptalert.txt' -> '/usr/local/csf/tpl/./scriptalert.txt' 'relayalert.txt' -> '/usr/local/csf/tpl/./relayalert.txt' 'filealert.txt' -> '/usr/local/csf/tpl/./filealert.txt' 'watchalert.txt' -> '/usr/local/csf/tpl/./watchalert.txt' 'loadalert.txt' -> '/usr/local/csf/tpl/./loadalert.txt' 'resalert.txt' -> '/usr/local/csf/tpl/./resalert.txt' 'portscan.txt' -> '/usr/local/csf/tpl/./portscan.txt' 'uidscan.txt' -> '/usr/local/csf/tpl/./uidscan.txt' 'permblock.txt' -> '/usr/local/csf/tpl/./permblock.txt' 'netblock.txt' -> '/usr/local/csf/tpl/./netblock.txt' 'portknocking.txt' -> '/usr/local/csf/tpl/./portknocking.txt' 'forkbombalert.txt' -> '/usr/local/csf/tpl/./forkbombalert.txt' 'recaptcha.txt' -> '/usr/local/csf/tpl/./recaptcha.txt' 'apache.main.txt' -> '/usr/local/csf/tpl/./apache.main.txt' 'apache.http.txt' -> '/usr/local/csf/tpl/./apache.http.txt' 'apache.https.txt' -> '/usr/local/csf/tpl/./apache.https.txt' 'litespeed.main.txt' -> '/usr/local/csf/tpl/./litespeed.main.txt' 'litespeed.http.txt' -> '/usr/local/csf/tpl/./litespeed.http.txt' 'litespeed.https.txt' -> '/usr/local/csf/tpl/./litespeed.https.txt' 'x-arf.txt' -> '/usr/local/csf/tpl/./x-arf.txt' 'regex.custom.pm' -> '/usr/local/csf/bin/./regex.custom.pm' 'pt_deleted_action.pl' -> '/usr/local/csf/bin/./pt_deleted_action.pl' 'messenger' -> '/etc/csf/./messenger' 'messenger/en.php' -> '/etc/csf/./messenger/en.php' 'messenger/index.html' -> '/etc/csf/./messenger/index.html' 'messenger/index.php' -> '/etc/csf/./messenger/index.php' 'messenger/index.recaptcha.html' -> '/etc/csf/./messenger/index.recaptcha.html' 'messenger/index.recaptcha.php' -> '/etc/csf/./messenger/index.recaptcha.php' 'messenger/index.text' -> '/etc/csf/./messenger/index.text' 'ui' -> '/etc/csf/./ui' 'ui/images' -> '/etc/csf/./ui/images' 'ui/images/admin_icon.svg' -> '/etc/csf/./ui/images/admin_icon.svg' 'ui/images/bootstrap' -> '/etc/csf/./ui/images/bootstrap' 'ui/images/bootstrap/css' -> '/etc/csf/./ui/images/bootstrap/css' 'ui/images/bootstrap/css/bootstrap.min.css' -> '/etc/csf/./ui/images/bootstrap/css/bootstrap.min.css' 'ui/images/bootstrap/css/bootstrap.min.css.map' -> '/etc/csf/./ui/images/bootstrap/css/bootstrap.min.css.map' 'ui/images/bootstrap/fonts' -> '/etc/csf/./ui/images/bootstrap/fonts' 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.eot' -> '/etc/csf/./ui/images/bootstrap/fonts/glyphicons-halflings-regular.eot' 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.svg' -> '/etc/csf/./ui/images/bootstrap/fonts/glyphicons-halflings-regular.svg' 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.ttf' -> '/etc/csf/./ui/images/bootstrap/fonts/glyphicons-halflings-regular.ttf' 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff' -> '/etc/csf/./ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff' 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff2' -> '/etc/csf/./ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff2' 'ui/images/bootstrap/js' -> '/etc/csf/./ui/images/bootstrap/js' 'ui/images/bootstrap/js/bootstrap.min.js' -> '/etc/csf/./ui/images/bootstrap/js/bootstrap.min.js' 'ui/images/bootstrap-chosen.css' -> '/etc/csf/./ui/images/bootstrap-chosen.css' 'ui/images/chosen.min.css' -> '/etc/csf/./ui/images/chosen.min.css' 'ui/images/chosen.min.js' -> '/etc/csf/./ui/images/chosen.min.js' 'ui/images/chosen-sprite@2x.png' -> '/etc/csf/./ui/images/chosen-sprite@2x.png' 'ui/images/chosen-sprite.png' -> '/etc/csf/./ui/images/chosen-sprite.png' 'ui/images/configserver.css' -> '/etc/csf/./ui/images/configserver.css' 'ui/images/csf-loader.gif' -> '/etc/csf/./ui/images/csf-loader.gif' 'ui/images/csf_small.png' -> '/etc/csf/./ui/images/csf_small.png' 'ui/images/csf.svg' -> '/etc/csf/./ui/images/csf.svg' 'ui/images/jquery.min.js' -> '/etc/csf/./ui/images/jquery.min.js' 'ui/images/LICENSE.txt' -> '/etc/csf/./ui/images/LICENSE.txt' 'ui/images/loader.gif' -> '/etc/csf/./ui/images/loader.gif' 'ui/images/reseller_icon.svg' -> '/etc/csf/./ui/images/reseller_icon.svg' 'ui/server.crt' -> '/etc/csf/./ui/server.crt' 'ui/server.key' -> '/etc/csf/./ui/server.key' 'ui/ui.allow' -> '/etc/csf/./ui/ui.allow' 'ui/ui.ban' -> '/etc/csf/./ui/ui.ban' 'csfcron.sh' -> '/etc/cron.d/csf-cron' 'lfdcron.sh' -> '/etc/cron.d/lfd-cron' 'csf.pl' -> '/usr/sbin/csf' 'lfd.pl' -> '/usr/sbin/lfd' '/etc/csf/csf.pl' -> '/usr/sbin/csf' '/etc/csf/lfd.pl' -> '/usr/sbin/lfd' '/etc/csf/csftest.pl' -> '/usr/local/csf/bin/csftest.pl' '/etc/csf/pt_deleted_action.pl' -> '/usr/local/csf/bin/pt_deleted_action.pl' '/etc/csf/remove_apf_bfd.sh' -> '/usr/local/csf/bin/remove_apf_bfd.sh' '/etc/csf/uninstall.sh' -> '/usr/local/csf/bin/uninstall.sh' '/etc/csf/regex.custom.pm' -> '/usr/local/csf/bin/regex.custom.pm' '/etc/csf/webmin' -> '/usr/local/csf/lib/webmin' '/etc/csf/alerts' -> '/usr/local/csf/tpl' mkdir: cannot create directory ‘webmin/csf/images’: File exists mkdir: cannot create directory ‘ui/images’: File exists mkdir: cannot create directory ‘da/images’: File exists mkdir: cannot create directory ‘interworx/images’: File exists 'csf/admin_icon.svg' -> 'webmin/csf/images/admin_icon.svg' 'csf/bootstrap/css/bootstrap.min.css' -> 'webmin/csf/images/bootstrap/css/bootstrap.min.css' 'csf/bootstrap/css/bootstrap.min.css.map' -> 'webmin/csf/images/bootstrap/css/bootstrap.min.css.map' 'csf/bootstrap/fonts/glyphicons-halflings-regular.eot' -> 'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.eot' 'csf/bootstrap/fonts/glyphicons-halflings-regular.svg' -> 'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.svg' 'csf/bootstrap/fonts/glyphicons-halflings-regular.ttf' -> 'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.ttf' 'csf/bootstrap/fonts/glyphicons-halflings-regular.woff' -> 'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff' 'csf/bootstrap/fonts/glyphicons-halflings-regular.woff2' -> 'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff2' 'csf/bootstrap/js/bootstrap.min.js' -> 'webmin/csf/images/bootstrap/js/bootstrap.min.js' 'csf/bootstrap-chosen.css' -> 'webmin/csf/images/bootstrap-chosen.css' 'csf/chosen.min.css' -> 'webmin/csf/images/chosen.min.css' 'csf/chosen.min.js' -> 'webmin/csf/images/chosen.min.js' 'csf/chosen-sprite@2x.png' -> 'webmin/csf/images/chosen-sprite@2x.png' 'csf/chosen-sprite.png' -> 'webmin/csf/images/chosen-sprite.png' 'csf/configserver.css' -> 'webmin/csf/images/configserver.css' 'csf/csf-loader.gif' -> 'webmin/csf/images/csf-loader.gif' 'csf/csf_small.png' -> 'webmin/csf/images/csf_small.png' 'csf/csf.svg' -> 'webmin/csf/images/csf.svg' 'csf/jquery.min.js' -> 'webmin/csf/images/jquery.min.js' 'csf/LICENSE.txt' -> 'webmin/csf/images/LICENSE.txt' 'csf/loader.gif' -> 'webmin/csf/images/loader.gif' 'csf/reseller_icon.svg' -> 'webmin/csf/images/reseller_icon.svg' 'csf/admin_icon.svg' -> 'ui/images/admin_icon.svg' 'csf/bootstrap/css/bootstrap.min.css' -> 'ui/images/bootstrap/css/bootstrap.min.css' 'csf/bootstrap/css/bootstrap.min.css.map' -> 'ui/images/bootstrap/css/bootstrap.min.css.map' 'csf/bootstrap/fonts/glyphicons-halflings-regular.eot' -> 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.eot' 'csf/bootstrap/fonts/glyphicons-halflings-regular.svg' -> 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.svg' 'csf/bootstrap/fonts/glyphicons-halflings-regular.ttf' -> 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.ttf' 'csf/bootstrap/fonts/glyphicons-halflings-regular.woff' -> 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff' 'csf/bootstrap/fonts/glyphicons-halflings-regular.woff2' -> 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff2' 'csf/bootstrap/js/bootstrap.min.js' -> 'ui/images/bootstrap/js/bootstrap.min.js' 'csf/bootstrap-chosen.css' -> 'ui/images/bootstrap-chosen.css' 'csf/chosen.min.css' -> 'ui/images/chosen.min.css' 'csf/chosen.min.js' -> 'ui/images/chosen.min.js' 'csf/chosen-sprite@2x.png' -> 'ui/images/chosen-sprite@2x.png' 'csf/chosen-sprite.png' -> 'ui/images/chosen-sprite.png' 'csf/configserver.css' -> 'ui/images/configserver.css' 'csf/csf-loader.gif' -> 'ui/images/csf-loader.gif' 'csf/csf_small.png' -> 'ui/images/csf_small.png' 'csf/csf.svg' -> 'ui/images/csf.svg' 'csf/jquery.min.js' -> 'ui/images/jquery.min.js' 'csf/LICENSE.txt' -> 'ui/images/LICENSE.txt' 'csf/loader.gif' -> 'ui/images/loader.gif' 'csf/reseller_icon.svg' -> 'ui/images/reseller_icon.svg' 'csf/admin_icon.svg' -> 'da/images/admin_icon.svg' 'csf/bootstrap/css/bootstrap.min.css' -> 'da/images/bootstrap/css/bootstrap.min.css' 'csf/bootstrap/css/bootstrap.min.css.map' -> 'da/images/bootstrap/css/bootstrap.min.css.map' 'csf/bootstrap/fonts/glyphicons-halflings-regular.eot' -> 'da/images/bootstrap/fonts/glyphicons-halflings-regular.eot' 'csf/bootstrap/fonts/glyphicons-halflings-regular.svg' -> 'da/images/bootstrap/fonts/glyphicons-halflings-regular.svg' 'csf/bootstrap/fonts/glyphicons-halflings-regular.ttf' -> 'da/images/bootstrap/fonts/glyphicons-halflings-regular.ttf' 'csf/bootstrap/fonts/glyphicons-halflings-regular.woff' -> 'da/images/bootstrap/fonts/glyphicons-halflings-regular.woff' 'csf/bootstrap/fonts/glyphicons-halflings-regular.woff2' -> 'da/images/bootstrap/fonts/glyphicons-halflings-regular.woff2' 'csf/bootstrap/js/bootstrap.min.js' -> 'da/images/bootstrap/js/bootstrap.min.js' 'csf/bootstrap-chosen.css' -> 'da/images/bootstrap-chosen.css' 'csf/chosen.min.css' -> 'da/images/chosen.min.css' 'csf/chosen.min.js' -> 'da/images/chosen.min.js' 'csf/chosen-sprite@2x.png' -> 'da/images/chosen-sprite@2x.png' 'csf/chosen-sprite.png' -> 'da/images/chosen-sprite.png' 'csf/configserver.css' -> 'da/images/configserver.css' 'csf/csf-loader.gif' -> 'da/images/csf-loader.gif' 'csf/csf_small.png' -> 'da/images/csf_small.png' 'csf/csf.svg' -> 'da/images/csf.svg' 'csf/jquery.min.js' -> 'da/images/jquery.min.js' 'csf/LICENSE.txt' -> 'da/images/LICENSE.txt' 'csf/loader.gif' -> 'da/images/loader.gif' 'csf/reseller_icon.svg' -> 'da/images/reseller_icon.svg' 'csf/admin_icon.svg' -> 'interworx/images/admin_icon.svg' 'csf/bootstrap/css/bootstrap.min.css' -> 'interworx/images/bootstrap/css/bootstrap.min.css' 'csf/bootstrap/css/bootstrap.min.css.map' -> 'interworx/images/bootstrap/css/bootstrap.min.css.map' 'csf/bootstrap/fonts/glyphicons-halflings-regular.eot' -> 'interworx/images/bootstrap/fonts/glyphicons-halflings-regular.eot' 'csf/bootstrap/fonts/glyphicons-halflings-regular.svg' -> 'interworx/images/bootstrap/fonts/glyphicons-halflings-regular.svg' 'csf/bootstrap/fonts/glyphicons-halflings-regular.ttf' -> 'interworx/images/bootstrap/fonts/glyphicons-halflings-regular.ttf' 'csf/bootstrap/fonts/glyphicons-halflings-regular.woff' -> 'interworx/images/bootstrap/fonts/glyphicons-halflings-regular.woff' 'csf/bootstrap/fonts/glyphicons-halflings-regular.woff2' -> 'interworx/images/bootstrap/fonts/glyphicons-halflings-regular.woff2' 'csf/bootstrap/js/bootstrap.min.js' -> 'interworx/images/bootstrap/js/bootstrap.min.js' 'csf/bootstrap-chosen.css' -> 'interworx/images/bootstrap-chosen.css' 'csf/chosen.min.css' -> 'interworx/images/chosen.min.css' 'csf/chosen.min.js' -> 'interworx/images/chosen.min.js' 'csf/chosen-sprite@2x.png' -> 'interworx/images/chosen-sprite@2x.png' 'csf/chosen-sprite.png' -> 'interworx/images/chosen-sprite.png' 'csf/configserver.css' -> 'interworx/images/configserver.css' 'csf/csf-loader.gif' -> 'interworx/images/csf-loader.gif' 'csf/csf_small.png' -> 'interworx/images/csf_small.png' 'csf/csf.svg' -> 'interworx/images/csf.svg' 'csf/jquery.min.js' -> 'interworx/images/jquery.min.js' 'csf/LICENSE.txt' -> 'interworx/images/LICENSE.txt' 'csf/loader.gif' -> 'interworx/images/loader.gif' 'csf/reseller_icon.svg' -> 'interworx/images/reseller_icon.svg' 'messenger/en.php' -> '/etc/csf/messenger/en.php' 'messenger/index.php' -> '/etc/csf/messenger/index.php' 'messenger/index.recaptcha.php' -> '/etc/csf/messenger/index.recaptcha.php' 'csf/csf_small.png' -> '/usr/local/cpanel/whostmgr/docroot/addon_plugins/csf_small.png' 'uninstall.sh' -> '/usr/local/csf/bin/uninstall.sh' 'csftest.pl' -> '/usr/local/csf/bin/csftest.pl' 'remove_apf_bfd.sh' -> '/usr/local/csf/bin/remove_apf_bfd.sh' 'readme.txt' -> '/etc/csf/readme.txt' 'sanity.txt' -> '/usr/local/csf/lib/sanity.txt' 'csf.rbls' -> '/usr/local/csf/lib/csf.rbls' 'restricted.txt' -> '/usr/local/csf/lib/restricted.txt' 'changelog.txt' -> '/etc/csf/changelog.txt' 'downloadservers' -> '/etc/csf/downloadservers' 'install.txt' -> '/etc/csf/install.txt' 'version.txt' -> '/etc/csf/version.txt' 'license.txt' -> '/etc/csf/license.txt' 'webmin' -> '/usr/local/csf/lib/webmin' 'webmin/csf' -> '/usr/local/csf/lib/webmin/csf' 'webmin/csf/images' -> '/usr/local/csf/lib/webmin/csf/images' 'webmin/csf/images/admin_icon.svg' -> '/usr/local/csf/lib/webmin/csf/images/admin_icon.svg' 'webmin/csf/images/bootstrap' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap' 'webmin/csf/images/bootstrap/css' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/css' 'webmin/csf/images/bootstrap/css/bootstrap.min.css' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/css/bootstrap.min.css' 'webmin/csf/images/bootstrap/css/bootstrap.min.css.map' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/css/bootstrap.min.css.map' 'webmin/csf/images/bootstrap/fonts' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/fonts' 'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.eot' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.eot' 'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.svg' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.svg' 'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.ttf' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.ttf' 'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff' 'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff2' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff2' 'webmin/csf/images/bootstrap/js' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/js' 'webmin/csf/images/bootstrap/js/bootstrap.min.js' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/js/bootstrap.min.js' 'webmin/csf/images/bootstrap-chosen.css' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap-chosen.css' 'webmin/csf/images/chosen.min.css' -> '/usr/local/csf/lib/webmin/csf/images/chosen.min.css' 'webmin/csf/images/chosen.min.js' -> '/usr/local/csf/lib/webmin/csf/images/chosen.min.js' 'webmin/csf/images/chosen-sprite@2x.png' -> '/usr/local/csf/lib/webmin/csf/images/chosen-sprite@2x.png' 'webmin/csf/images/chosen-sprite.png' -> '/usr/local/csf/lib/webmin/csf/images/chosen-sprite.png' 'webmin/csf/images/configserver.css' -> '/usr/local/csf/lib/webmin/csf/images/configserver.css' 'webmin/csf/images/csf-loader.gif' -> '/usr/local/csf/lib/webmin/csf/images/csf-loader.gif' 'webmin/csf/images/csf_small.png' -> '/usr/local/csf/lib/webmin/csf/images/csf_small.png' 'webmin/csf/images/csf.svg' -> '/usr/local/csf/lib/webmin/csf/images/csf.svg' 'webmin/csf/images/jquery.min.js' -> '/usr/local/csf/lib/webmin/csf/images/jquery.min.js' 'webmin/csf/images/LICENSE.txt' -> '/usr/local/csf/lib/webmin/csf/images/LICENSE.txt' 'webmin/csf/images/loader.gif' -> '/usr/local/csf/lib/webmin/csf/images/loader.gif' 'webmin/csf/images/reseller_icon.svg' -> '/usr/local/csf/lib/webmin/csf/images/reseller_icon.svg' 'webmin/csf/module.info' -> '/usr/local/csf/lib/webmin/csf/module.info' 'webmin/csf/index.cgi' -> '/usr/local/csf/lib/webmin/csf/index.cgi' 'ConfigServer' -> '/usr/local/csf/lib/ConfigServer' 'ConfigServer/AbuseIP.pm' -> '/usr/local/csf/lib/ConfigServer/AbuseIP.pm' 'ConfigServer/CheckIP.pm' -> '/usr/local/csf/lib/ConfigServer/CheckIP.pm' 'ConfigServer/CloudFlare.pm' -> '/usr/local/csf/lib/ConfigServer/CloudFlare.pm' 'ConfigServer/Config.pm' -> '/usr/local/csf/lib/ConfigServer/Config.pm' 'ConfigServer/cseUI.pm' -> '/usr/local/csf/lib/ConfigServer/cseUI.pm' 'ConfigServer/DisplayResellerUI.pm' -> '/usr/local/csf/lib/ConfigServer/DisplayResellerUI.pm' 'ConfigServer/DisplayUI.pm' -> '/usr/local/csf/lib/ConfigServer/DisplayUI.pm' 'ConfigServer/GetEthDev.pm' -> '/usr/local/csf/lib/ConfigServer/GetEthDev.pm' 'ConfigServer/GetIPs.pm' -> '/usr/local/csf/lib/ConfigServer/GetIPs.pm' 'ConfigServer/KillSSH.pm' -> '/usr/local/csf/lib/ConfigServer/KillSSH.pm' 'ConfigServer/Logger.pm' -> '/usr/local/csf/lib/ConfigServer/Logger.pm' 'ConfigServer/LookUpIP.pm' -> '/usr/local/csf/lib/ConfigServer/LookUpIP.pm' 'ConfigServer/Messenger.pm' -> '/usr/local/csf/lib/ConfigServer/Messenger.pm' 'ConfigServer/Ports.pm' -> '/usr/local/csf/lib/ConfigServer/Ports.pm' 'ConfigServer/RBLCheck.pm' -> '/usr/local/csf/lib/ConfigServer/RBLCheck.pm' 'ConfigServer/RBLLookup.pm' -> '/usr/local/csf/lib/ConfigServer/RBLLookup.pm' 'ConfigServer/RegexMain.pm' -> '/usr/local/csf/lib/ConfigServer/RegexMain.pm' 'ConfigServer/Sanity.pm' -> '/usr/local/csf/lib/ConfigServer/Sanity.pm' 'ConfigServer/Sendmail.pm' -> '/usr/local/csf/lib/ConfigServer/Sendmail.pm' 'ConfigServer/ServerCheck.pm' -> '/usr/local/csf/lib/ConfigServer/ServerCheck.pm' 'ConfigServer/ServerStats.pm' -> '/usr/local/csf/lib/ConfigServer/ServerStats.pm' 'ConfigServer/Service.pm' -> '/usr/local/csf/lib/ConfigServer/Service.pm' 'ConfigServer/Slurp.pm' -> '/usr/local/csf/lib/ConfigServer/Slurp.pm' 'ConfigServer/URLGet.pm' -> '/usr/local/csf/lib/ConfigServer/URLGet.pm' 'Net' -> '/usr/local/csf/lib/Net' 'Net/CIDR' -> '/usr/local/csf/lib/Net/CIDR' 'Net/CIDR/Lite.pm' -> '/usr/local/csf/lib/Net/CIDR/Lite.pm' 'Net/IP.pm' -> '/usr/local/csf/lib/Net/IP.pm' cp: cannot stat 'Geo': No such file or directory 'Crypt' -> '/usr/local/csf/lib/Crypt' 'Crypt/Blowfish_PP.pm' -> '/usr/local/csf/lib/Crypt/Blowfish_PP.pm' 'Crypt/CBC.pm' -> '/usr/local/csf/lib/Crypt/CBC.pm' 'HTTP' -> '/usr/local/csf/lib/HTTP' 'HTTP/Tiny.pm' -> '/usr/local/csf/lib/HTTP/Tiny.pm' 'JSON' -> '/usr/local/csf/lib/JSON' 'JSON/Tiny.pm' -> '/usr/local/csf/lib/JSON/Tiny.pm' 'version/version' -> '/usr/local/csf/lib/version' 'version/version/regex.pm' -> '/usr/local/csf/lib/version/regex.pm' 'version/version/vpp.pm' -> '/usr/local/csf/lib/version/vpp.pm' 'version/version.pm' -> '/usr/local/csf/lib/version.pm' 'csf.div' -> '/usr/local/csf/lib/csf.div' 'csfajaxtail.js' -> '/usr/local/csf/lib/csfajaxtail.js' 'ui/images/admin_icon.svg' -> '/etc/csf/ui/./images/admin_icon.svg' 'ui/images/bootstrap/css/bootstrap.min.css' -> '/etc/csf/ui/./images/bootstrap/css/bootstrap.min.css' 'ui/images/bootstrap/css/bootstrap.min.css.map' -> '/etc/csf/ui/./images/bootstrap/css/bootstrap.min.css.map' 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.eot' -> '/etc/csf/ui/./images/bootstrap/fonts/glyphicons-halflings-regular.eot' 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.svg' -> '/etc/csf/ui/./images/bootstrap/fonts/glyphicons-halflings-regular.svg' 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.ttf' -> '/etc/csf/ui/./images/bootstrap/fonts/glyphicons-halflings-regular.ttf' 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff' -> '/etc/csf/ui/./images/bootstrap/fonts/glyphicons-halflings-regular.woff' 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff2' -> '/etc/csf/ui/./images/bootstrap/fonts/glyphicons-halflings-regular.woff2' 'ui/images/bootstrap/js/bootstrap.min.js' -> '/etc/csf/ui/./images/bootstrap/js/bootstrap.min.js' 'ui/images/bootstrap-chosen.css' -> '/etc/csf/ui/./images/bootstrap-chosen.css' 'ui/images/chosen.min.css' -> '/etc/csf/ui/./images/chosen.min.css' 'ui/images/chosen.min.js' -> '/etc/csf/ui/./images/chosen.min.js' 'ui/images/chosen-sprite@2x.png' -> '/etc/csf/ui/./images/chosen-sprite@2x.png' 'ui/images/chosen-sprite.png' -> '/etc/csf/ui/./images/chosen-sprite.png' 'ui/images/configserver.css' -> '/etc/csf/ui/./images/configserver.css' 'ui/images/csf-loader.gif' -> '/etc/csf/ui/./images/csf-loader.gif' 'ui/images/csf_small.png' -> '/etc/csf/ui/./images/csf_small.png' 'ui/images/csf.svg' -> '/etc/csf/ui/./images/csf.svg' 'ui/images/jquery.min.js' -> '/etc/csf/ui/./images/jquery.min.js' 'ui/images/LICENSE.txt' -> '/etc/csf/ui/./images/LICENSE.txt' 'ui/images/loader.gif' -> '/etc/csf/ui/./images/loader.gif' 'ui/images/reseller_icon.svg' -> '/etc/csf/ui/./images/reseller_icon.svg' 'profiles' -> '/usr/local/csf/profiles' 'profiles/block_all_perm.conf' -> '/usr/local/csf/profiles/block_all_perm.conf' 'profiles/block_all_temp.conf' -> '/usr/local/csf/profiles/block_all_temp.conf' 'profiles/disable_alerts.conf' -> '/usr/local/csf/profiles/disable_alerts.conf' 'profiles/protection_high.conf' -> '/usr/local/csf/profiles/protection_high.conf' 'profiles/protection_low.conf' -> '/usr/local/csf/profiles/protection_low.conf' 'profiles/protection_medium.conf' -> '/usr/local/csf/profiles/protection_medium.conf' 'csf.conf' -> '/usr/local/csf/profiles/reset_to_defaults.conf' 'cpanel.comodo.ignore' -> '/etc/csf/cpanel.comodo.ignore' 'cpanel.comodo.allow' -> '/etc/csf/cpanel.comodo.allow' 'cpanel.ignore' -> '/etc/csf/cpanel.ignore' 'cpanel.allow' -> '/etc/csf/cpanel.allow' 'messenger/en.php' -> '/etc/csf/messenger/./en.php' 'messenger/index.php' -> '/etc/csf/messenger/./index.php' 'messenger/index.recaptcha.php' -> '/etc/csf/messenger/./index.recaptcha.php' 'lfd.logrotate' -> '/etc/logrotate.d/lfd' 'csf.1.txt' -> '/usr/local/man/man1/csf.1' 'csf.help' -> '/usr/local/csf/lib/csf.help' chmod: cannot access '/var/log/lfd.log*': No such file or directory mode of '/usr/local/csf/bin/csftest.pl' changed from 0600 (rw-------) to 0700 (rwx------) mode of '/usr/local/csf/bin/pt_deleted_action.pl' changed from 0600 (rw-------) to 0700 (rwx------) mode of '/usr/local/csf/bin/remove_apf_bfd.sh' changed from 0600 (rw-------) to 0700 (rwx------) mode of '/usr/local/csf/bin/uninstall.sh' changed from 0600 (rw-------) to 0700 (rwx------) mode of '/usr/local/csf/bin/regex.custom.pm' changed from 0600 (rw-------) to 0700 (rwx------) mode of '/etc/csf/csf.pl' retained as 0700 (rwx------) mode of '/etc/csf/csftest.pl' retained as 0700 (rwx------) mode of '/etc/csf/lfd.pl' retained as 0700 (rwx------) mode of '/etc/csf/pt_deleted_action.pl' retained as 0700 (rwx------) chmod: cannot access '/etc/csf/*.cgi': No such file or directory failed to change mode of '/etc/csf/*.cgi' from 0000 (---------) to 0000 (---------) mode of '/etc/csf/remove_apf_bfd.sh' retained as 0700 (rwx------) mode of '/etc/csf/uninstall.sh' retained as 0700 (rwx------) chmod: cannot access '/etc/csf/*.php': No such file or directory failed to change mode of '/etc/csf/*.php' from 0000 (---------) to 0000 (---------) chmod: cannot access '/etc/csf/*.py': No such file or directory failed to change mode of '/etc/csf/*.py' from 0000 (---------) to 0000 (---------) mode of '/etc/csf/webmin/csf/index.cgi' changed from 0600 (rw-------) to 0700 (rwx------) mode of '/etc/cron.d/lfd-cron' changed from 0755 (rwxr-xr-x) to 0644 (rw-r--r--) mode of '/etc/cron.d/csf-cron' changed from 0755 (rwxr-xr-x) to 0644 (rw-r--r--) 'csget.pl' -> '/etc/cron.daily/csget' mode of 'auto.pl' changed from 0755 (rwxr-xr-x) to 0700 (rwx------) '/etc/csf/csf.conf' -> '/var/lib/csf/backup/1778617242_pre_v15_00_upgrade' *** IPV6 Enabled *** IPV6_SPI set to 1 TCP ports currently listening for incoming connections: 22,25,53,80,110,111,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2091,2095,2096,4190,18018 UDP ports currently listening for incoming connections: 53,111 Note: The port details above are for information only, csf hasn't been auto-configured. Don't forget to: 1. Configure the following options in the csf configuration to suite your server: TCP_*, UDP_* 2. Restart csf and lfd 3. Set TESTING to 0 once you're happy with the firewall, lfd will not run until you do so 'cpanel/csf.cgi' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf.cgi' mode of '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf.cgi' changed from 0644 (rw-r--r--) to 0700 (rwx------) 'csf/admin_icon.svg' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/admin_icon.svg' 'csf/bootstrap' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap' 'csf/bootstrap/css' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/css' 'csf/bootstrap/css/bootstrap.min.css' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/css/bootstrap.min.css' 'csf/bootstrap/css/bootstrap.min.css.map' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/css/bootstrap.min.css.map' 'csf/bootstrap/fonts' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/fonts' 'csf/bootstrap/fonts/glyphicons-halflings-regular.eot' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/fonts/glyphicons-halflings-regular.eot' 'csf/bootstrap/fonts/glyphicons-halflings-regular.svg' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/fonts/glyphicons-halflings-regular.svg' 'csf/bootstrap/fonts/glyphicons-halflings-regular.ttf' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/fonts/glyphicons-halflings-regular.ttf' 'csf/bootstrap/fonts/glyphicons-halflings-regular.woff' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/fonts/glyphicons-halflings-regular.woff' 'csf/bootstrap/fonts/glyphicons-halflings-regular.woff2' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/fonts/glyphicons-halflings-regular.woff2' 'csf/bootstrap/js' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/js' 'csf/bootstrap/js/bootstrap.min.js' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/js/bootstrap.min.js' 'csf/bootstrap-chosen.css' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap-chosen.css' 'csf/chosen-sprite.png' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/chosen-sprite.png' 'csf/chosen-sprite@2x.png' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/chosen-sprite@2x.png' 'csf/chosen.min.css' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/chosen.min.css' 'csf/chosen.min.js' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/chosen.min.js' 'csf/configserver.css' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/configserver.css' 'csf/csf-loader.gif' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/csf-loader.gif' 'csf/csf.svg' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/csf.svg' 'csf/csf_small.png' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/csf_small.png' 'csf/jquery.min.js' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/jquery.min.js' 'csf/LICENSE.txt' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/LICENSE.txt' 'csf/loader.gif' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/loader.gif' 'csf/reseller_icon.svg' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/reseller_icon.svg' 'cpanel/Driver' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/Driver' 'cpanel/Driver/ConfigServercsf' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/Driver/ConfigServercsf' 'cpanel/Driver/ConfigServercsf/META.pm' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/Driver/ConfigServercsf/META.pm' 'cpanel/Driver/ConfigServercsf.pm' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/Driver/ConfigServercsf.pm' cp: cannot stat 'ui/images/icon.gif': No such file or directory 'cpanel/csf.tmpl' -> '/usr/local/cpanel/whostmgr/docroot/templates/csf.tmpl' cPanel v134, target set to _self 'cpanel/csf.conf' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/csf.conf' 'cpanel/upgrade.sh' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/upgrade.sh' csf registered 'lfd.service' -> '/usr/lib/systemd/system/lfd.service' 'csf.service' -> '/usr/lib/systemd/system/csf.service' Created symlink /etc/systemd/system/multi-user.target.wants/csf.service → /usr/lib/systemd/system/csf.service. Created symlink /etc/systemd/system/multi-user.target.wants/lfd.service → /usr/lib/systemd/system/lfd.service. Created symlink /etc/systemd/system/firewalld.service → /dev/null. '/etc/csf/csfwebmin.tgz' -> '/usr/local/csf/csfwebmin.tgz' Installation Completed done + Modifying csf.blocklist ...  done + Added Monitoring Server SNMP to csf.allow ...  done + Ignore Acronis Files in csf.fignore ...  done + Modifying csf.conf ...  done + Modifying csf.pignore ...  done + Starting CSF ...  done + Starting LFD ...  done + Whitelist Leaseweb and Acronis addresses ...  Adding 108.62.0.214 to csf.allow and iptables ACCEPT... csf: IPSET adding [108.62.0.214] to set [chain_ALLOW] Adding 108.59.15.87 to csf.allow and iptables ACCEPT... csf: IPSET adding [108.59.15.87] to set [chain_ALLOW] Adding 23.105.179.98 to csf.allow and iptables ACCEPT... csf: IPSET adding [23.105.179.98] to set [chain_ALLOW] Adding 85.17.130.250 to csf.allow and iptables ACCEPT... csf: IPSET adding [85.17.130.250] to set [chain_ALLOW] Adding 23.83.131.226 to csf.allow and iptables ACCEPT... csf: IPSET adding [23.83.131.226] to set [chain_ALLOW] Adding 185.151.160.0/24 to csf.allow and iptables ACCEPT... csf: IPSET adding [185.151.160.0/24] to set [chain_ALLOW] Adding 185.151.161.0/24 to csf.allow and iptables ACCEPT... csf: IPSET adding [185.151.161.0/24] to set [chain_ALLOW] Adding 62.138.210.0/24 to csf.allow and iptables ACCEPT... csf: IPSET adding [62.138.210.0/24] to set [chain_ALLOW] Adding 162.244.6.0/24 to csf.allow and iptables ACCEPT... csf: IPSET adding [162.244.6.0/24] to set [chain_ALLOW] Adding 162.244.7.0/24 to csf.allow and iptables ACCEPT... csf: IPSET adding [162.244.7.0/24] to set [chain_ALLOW] Adding 45.11.129.61 to csf.allow and iptables ACCEPT... csf: IPSET adding [45.11.129.61] to set [chain_ALLOW] Adding 45.11.129.62 to csf.allow and iptables ACCEPT... csf: IPSET adding [45.11.129.62] to set [chain_ALLOW] done + Removing temp dir ...  done + Installing cPanel CSF Updates ...  EA4 ( EasyApache 4 - c9 ) 1.2 MB/s | 1.6 MB 00:01 cPanel Addons Production Feed 14 kB/s | 9.3 kB 00:00 cPanel Plugins project 150 kB/s | 147 kB 00:00 AlmaLinux 9 - AppStream 58 MB/s | 22 MB 00:00 AlmaLinux 9 - BaseOS 62 MB/s | 28 MB 00:00 AlmaLinux 9 - CRB 30 MB/s | 4.9 MB 00:00 AlmaLinux 9 - Extras 183 kB/s | 23 kB 00:00 alt common Extended Lifecycle Support by TuxCar 851 kB/s | 832 kB 00:00 Extra Packages for Enterprise Linux 9 - x86_64 16 MB/s | 21 MB 00:01 Extra Packages for Enterprise Linux 9 openh264 4.5 kB/s | 2.5 kB 00:00 Imunify360 - Gradual Rollout Slot 5 450 B/s | 258 B 00:00 Imunify360 - Gradual Rollout Slot 478 B/s | 258 B 00:00 Imunify360 - Gradual Rollout Slot 7 475 B/s | 258 B 00:00 Imunify360 - Gradual Rollout Slot 8 499 B/s | 258 B 00:00 Imunify360 - Gradual Rollout Slot 1 477 B/s | 258 B 00:00 Imunify360 - Gradual Rollout Slot 2 448 B/s | 258 B 00:00 Imunify360 - Gradual Rollout Slot 3 479 B/s | 258 B 00:00 Imunify360 - Gradual Rollout Slot 4 481 B/s | 258 B 00:00 EL-9 - Imunify360 1.5 MB/s | 3.0 MB 00:02 MySQL 8.0 Community Server 19 MB/s | 3.3 MB 00:00 MySQL Connectors Community 7.6 MB/s | 114 kB 00:00 MySQL Tools Community 36 MB/s | 1.6 MB 00:00 WP Toolkit for cPanel 1.3 MB/s | 114 kB 00:00 WP Toolkit third parties 218 kB/s | 8.5 kB 00:00 Dependencies resolved. ================================================================================ Package Arch Version Repository Size ================================================================================ Installing: cpanel-csf noarch 16.18-1.1.1.cpanel cpanel-plugins 399 k Transaction Summary ================================================================================ Install 1 Package Total download size: 399 k Installed size: 2.4 M Downloading Packages: cpanel-csf-16.18-1.1.1.cpanel.noarch.rpm 640 kB/s | 399 kB 00:00 -------------------------------------------------------------------------------- Total 454 kB/s | 399 kB 00:00 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Running scriptlet: cpanel-csf-16.18-1.1.1.cpanel.noarch 1/1 Installing : cpanel-csf-16.18-1.1.1.cpanel.noarch 1/1 warning: /etc/csf/csf.allow created as /etc/csf/csf.allow.rpmnew warning: /etc/csf/csf.blocklists created as /etc/csf/csf.blocklists.rpmnew warning: /etc/csf/csf.conf created as /etc/csf/csf.conf.rpmnew warning: /etc/csf/csf.fignore created as /etc/csf/csf.fignore.rpmnew warning: /etc/csf/csf.logfiles created as /etc/csf/csf.logfiles.rpmnew warning: /etc/csf/csf.pignore created as /etc/csf/csf.pignore.rpmnew warning: /etc/csf/csf.syslogs created as /etc/csf/csf.syslogs.rpmnew warning: /etc/csf/csf.syslogusers created as /etc/csf/csf.syslogusers.rpmnew warning: /usr/local/csf/bin/pt_deleted_action.pl created as /usr/local/csf/bin/pt_deleted_action.pl.rpmnew warning: /usr/local/csf/bin/regex.custom.pm created as /usr/local/csf/bin/regex.custom.pm.rpmnew warning: /usr/local/csf/tpl/x-arf.txt saved as /usr/local/csf/tpl/x-arf.txt.rpmorig Running scriptlet: cpanel-csf-16.18-1.1.1.cpanel.noarch 1/1 csf registered '/etc/csf/csf.conf' -> '/var/lib/csf/backup/1778617286_pre_v16_18_upgrade' Validating and reloading firewall rules to ensure clean state... OK: Current firewall state backed up successfully OK: Saved rules passed syntax validation WARNING: Firewall restart and reload failed, skipping firewall reload for safety CSF error output: Error: csf is being restarted, try again in a moment: Resource temporarily unavailable at /usr/sbin/csf line 217. WARNING: Firewall reload failed, attempting automatic rollback ERROR: Rollback failed - firewall may be in unsafe state Backup preserved at /var/lib/csf/backup/pre-upgrade-20260512-202129.rules for manual recovery CSF installation completed with warnings - check firewall reload status above Verifying : cpanel-csf-16.18-1.1.1.cpanel.noarch 1/1 Installed: cpanel-csf-16.18-1.1.1.cpanel.noarch Complete! done PHP-FPM Pool Settings + Checking for system_pool_defaults.yaml ...  not found ...  installing ...  done + Restarting PHP-FPM ...  Service Status Found 0 versions of PHP-FPM: apache_php_fpm restarted successfully. done Tune Apache Settings + Checking for jq ...  installed + Checking for libonig ...  linking ...  done + Tuning Apache ...  setting ...  done + Rebuilding Apache ...  Built /etc/apache2/conf/httpd.conf OK done + Restarting Apache ...  Waiting for “httpd” to restart ………waiting for “httpd” to initialize ………finished. Service Status httpd (/usr/sbin/httpd -k start) is running as root with PID 16436 (systemd+/proc check method). Startup Log May 12 20:21:32 11637815.leaseweb.com systemd[1]: Starting Apache web server managed by cPanel EasyApache... May 12 20:21:33 11637815.leaseweb.com systemd[1]: httpd.service: Can't open PID file /run/apache2/httpd.pid (yet?) after start: Operation not permitted May 12 20:21:33 11637815.leaseweb.com systemd[1]: Started Apache web server managed by cPanel EasyApache. Log Messages May 12 20:21:32 11637815 systemd[1]: Starting Apache web server managed by cPanel EasyApache... May 12 20:21:32 11637815 systemd[1]: Stopped Apache web server managed by cPanel EasyApache. May 12 20:21:32 11637815 systemd[1]: Stopping Apache web server managed by cPanel EasyApache... [Tue May 12 20:21:33.026954 2026] [mpm_prefork:notice] [pid 16436:tid 16436] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:21:32.998305 2026] [security2:notice] [pid 16432:tid 16432] ModSecurity for Apache/2.9.13 (http://www.modsecurity.org/) configured. [Tue May 12 20:13:59.459607 2026] [mpm_prefork:notice] [pid 2779:tid 2779] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:13:59.430753 2026] [security2:notice] [pid 2729:tid 2729] ModSecurity for Apache/2.9.13 (http://www.modsecurity.org/) configured. [Tue May 12 20:06:56.492235 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:04:46.547894 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:03:59.769910 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:02:19.766576 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:01:22.551519 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:01:17.291389 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:01:17.264373 2026] [security2:notice] [pid 69742:tid 69742] ModSecurity for Apache/2.9.13 (http://www.modsecurity.org/) configured. [Tue May 12 20:01:07.105622 2026] [mpm_prefork:notice] [pid 69239:tid 69239] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:01:07.076391 2026] [security2:notice] [pid 69234:tid 69234] ModSecurity for Apache/2.9.13 (http://www.modsecurity.org/) configured. (2)No such file or directory: AH00104: unable to start piped log program '/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=23-108-55-77.cprapid.com --suffix=-bytes_log' (2)No such file or directory: AH00104: unable to start piped log program '/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=23-108-55-77.cprapid.com --suffix=-bytes_log' (2)No such file or directory: AH00104: unable to start piped log program '/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=23-108-55-77.cprapid.com --suffix=-bytes_log' (2)No such file or directory: AH00104: unable to start piped log program '/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=23-108-55-77.cprapid.com --suffix=-bytes_log' (2)No such file or directory: AH00104: unable to start piped log program '/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=23-108-55-77.cprapid.com --suffix=-bytes_log' httpd restarted successfully. done ModSecurity + Checking for ModSecurity ...  installed + Checking Icinga Ignore Ruleset ...  installing ...  done + Checking OWASP3 Ruleset ...  package ea-modsec2-rules-owasp-crs is not installed installing ...  Last metadata expiration check: 0:00:12 ago on Tue 12 May 2026 08:21:21 PM UTC. Dependencies resolved. ================================================================================ Package Arch Version Repo Size ================================================================================ Installing: ea-modsec2-rules-owasp-crs x86_64 3.3.9-1.2.1.cpanel EA4-c9 300 k Transaction Summary ================================================================================ Install 1 Package Total download size: 300 k Installed size: 2.6 M Downloading Packages: ea-modsec2-rules-owasp-crs-3.3.9-1.2.1.cpanel.x 479 kB/s | 300 kB 00:00 -------------------------------------------------------------------------------- Total 339 kB/s | 300 kB 00:00 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. usermod: no changes Running transaction Preparing : 1/1 Running scriptlet: ea-modsec2-rules-owasp-crs-3.3.9-1.2.1.cpanel.x86_64 1/1 Installing : ea-modsec2-rules-owasp-crs-3.3.9-1.2.1.cpanel.x86_64 1/1 Running scriptlet: ea-modsec2-rules-owasp-crs-3.3.9-1.2.1.cpanel.x86_64 1/1 checkyum version 22.3 excludes: bind-chroot dovecot* exim* filesystem p0f php* proftpd* pure-ftpd* POSTRANS Verifying : ea-modsec2-rules-owasp-crs-3.3.9-1.2.1.cpanel.x86_64 1/1usermod: no changes Purging all relevant cached command results Removing: /root/.cpanel/datastore/_usr_sbin_httpd_-v Removing: /root/.cpanel/datastore/_usr_sbin_httpd_-l Removing: /root/.cpanel/datastore/_usr_sbin_httpd_-V Removing: /root/.cpanel/datastore/_usr_sbin_httpd_-L Rebuilding global cache Building global cache for cpanel...Done Nothing to do (/etc/suphp.conf does not exist) Built /etc/apache2/conf/httpd.conf OK Nothing to do under ea4 (this script has been deprecated under ea4). Fix mailman package directories … … PID 16571 Fix mailing list perms … … PID 16573 Aligning modsec config to Whostmgr - Whostmgr version 11.134.0.25 - Whostmgr supports conf.d/modsec location - No change necessary Waiting for “httpd” to restart gracefully …waiting for “httpd” to initialize ………finished. Service Status httpd (/usr/sbin/httpd -k start) is running as root with PID 16436 (systemd+/proc check method). Startup Log May 12 20:21:32 11637815.leaseweb.com systemd[1]: Starting Apache web server managed by cPanel EasyApache... May 12 20:21:33 11637815.leaseweb.com systemd[1]: httpd.service: Can't open PID file /run/apache2/httpd.pid (yet?) after start: Operation not permitted May 12 20:21:33 11637815.leaseweb.com systemd[1]: Started Apache web server managed by cPanel EasyApache. Log Messages [Tue May 12 20:21:33.026954 2026] [mpm_prefork:notice] [pid 16436:tid 16436] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:21:32.998305 2026] [security2:notice] [pid 16432:tid 16432] ModSecurity for Apache/2.9.13 (http://www.modsecurity.org/) configured. [Tue May 12 20:13:59.459607 2026] [mpm_prefork:notice] [pid 2779:tid 2779] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:13:59.430753 2026] [security2:notice] [pid 2729:tid 2729] ModSecurity for Apache/2.9.13 (http://www.modsecurity.org/) configured. [Tue May 12 20:06:56.492235 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:04:46.547894 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:03:59.769910 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:02:19.766576 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:01:22.551519 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:01:17.291389 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:01:17.264373 2026] [security2:notice] [pid 69742:tid 69742] ModSecurity for Apache/2.9.13 (http://www.modsecurity.org/) configured. [Tue May 12 20:01:07.105622 2026] [mpm_prefork:notice] [pid 69239:tid 69239] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:01:07.076391 2026] [security2:notice] [pid 69234:tid 69234] ModSecurity for Apache/2.9.13 (http://www.modsecurity.org/) configured. (2)No such file or directory: AH00104: unable to start piped log program '/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=23-108-55-77.cprapid.com --suffix=-bytes_log' (2)No such file or directory: AH00104: unable to start piped log program '/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=23-108-55-77.cprapid.com --suffix=-bytes_log' (2)No such file or directory: AH00104: unable to start piped log program '/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=23-108-55-77.cprapid.com --suffix=-bytes_log' (2)No such file or directory: AH00104: unable to start piped log program '/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=23-108-55-77.cprapid.com --suffix=-bytes_log' (2)No such file or directory: AH00104: unable to start piped log program '/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=23-108-55-77.cprapid.com --suffix=-bytes_log' May 12 20:21:33 11637815 systemd[1]: Started Apache web server managed by cPanel EasyApache. May 12 20:21:33 11637815 systemd[1]: httpd.service: Can't open PID file /run/apache2/httpd.pid (yet?) after start: Operation not permitted May 12 20:21:32 11637815 systemd[1]: Starting Apache web server managed by cPanel EasyApache... May 12 20:21:32 11637815 systemd[1]: Stopped Apache web server managed by cPanel EasyApache. httpd restarted successfully. Setting /home permissions to 0711 … Setting permissions for users … … Done Installed: ea-modsec2-rules-owasp-crs-3.3.9-1.2.1.cpanel.x86_64 Complete! done + Restarting httpd service ...  Waiting for “httpd” to restart gracefully …waiting for “httpd” to initialize ………finished. Service Status httpd (/usr/sbin/httpd -k start) is running as root with PID 16436 (systemd+/proc check method). Startup Log May 12 20:21:32 11637815.leaseweb.com systemd[1]: Starting Apache web server managed by cPanel EasyApache... May 12 20:21:33 11637815.leaseweb.com systemd[1]: httpd.service: Can't open PID file /run/apache2/httpd.pid (yet?) after start: Operation not permitted May 12 20:21:33 11637815.leaseweb.com systemd[1]: Started Apache web server managed by cPanel EasyApache. Log Messages [Tue May 12 20:21:42.069751 2026] [mpm_prefork:notice] [pid 16436:tid 16436] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:21:41.347046 2026] [mpm_prefork:notice] [pid 16436:tid 16436] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:21:33.026954 2026] [mpm_prefork:notice] [pid 16436:tid 16436] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:21:32.998305 2026] [security2:notice] [pid 16432:tid 16432] ModSecurity for Apache/2.9.13 (http://www.modsecurity.org/) configured. [Tue May 12 20:13:59.459607 2026] [mpm_prefork:notice] [pid 2779:tid 2779] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:13:59.430753 2026] [security2:notice] [pid 2729:tid 2729] ModSecurity for Apache/2.9.13 (http://www.modsecurity.org/) configured. [Tue May 12 20:06:56.492235 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:04:46.547894 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:03:59.769910 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:02:19.766576 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:01:22.551519 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:01:17.291389 2026] [mpm_prefork:notice] [pid 69761:tid 69761] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:01:17.264373 2026] [security2:notice] [pid 69742:tid 69742] ModSecurity for Apache/2.9.13 (http://www.modsecurity.org/) configured. [Tue May 12 20:01:07.105622 2026] [mpm_prefork:notice] [pid 69239:tid 69239] AH00163: Apache/2.4.67 (cPanel) OpenSSL/3.5.1 mod_bwlimited/1.4 configured -- resuming normal operations [Tue May 12 20:01:07.076391 2026] [security2:notice] [pid 69234:tid 69234] ModSecurity for Apache/2.9.13 (http://www.modsecurity.org/) configured. (2)No such file or directory: AH00104: unable to start piped log program '/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=23-108-55-77.cprapid.com --suffix=-bytes_log' (2)No such file or directory: AH00104: unable to start piped log program '/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=23-108-55-77.cprapid.com --suffix=-bytes_log' (2)No such file or directory: AH00104: unable to start piped log program '/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=23-108-55-77.cprapid.com --suffix=-bytes_log' (2)No such file or directory: AH00104: unable to start piped log program '/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=23-108-55-77.cprapid.com --suffix=-bytes_log' (2)No such file or directory: AH00104: unable to start piped log program '/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=23-108-55-77.cprapid.com --suffix=-bytes_log' httpd restarted successfully. done Install SMNP + Installing net-snmp net-snmp-util ...  package net-snmp is not installed installing ...  Last metadata expiration check: 0:00:21 ago on Tue 12 May 2026 08:21:21 PM UTC. Dependencies resolved. ================================================================================ Package Arch Version Repository Size ================================================================================ Installing: net-snmp x86_64 1:5.9.1-17.el9_7.1 appstream 294 k net-snmp-utils x86_64 1:5.9.1-17.el9_7.1 appstream 182 k Installing dependencies: mariadb-connector-c x86_64 3.2.6-1.el9_0 appstream 194 k net-snmp-agent-libs x86_64 1:5.9.1-17.el9_7.1 appstream 692 k net-snmp-libs x86_64 1:5.9.1-17.el9_7.1 appstream 742 k Transaction Summary ================================================================================ Install 5 Packages Total download size: 2.1 M Installed size: 7.2 M Downloading Packages: (1/5): mariadb-connector-c-3.2.6-1.el9_0.x86_64 5.9 MB/s | 194 kB 00:00 (2/5): net-snmp-agent-libs-5.9.1-17.el9_7.1.x86 4.4 MB/s | 692 kB 00:00 (3/5): net-snmp-5.9.1-17.el9_7.1.x86_64.rpm 1.8 MB/s | 294 kB 00:00 (4/5): net-snmp-utils-5.9.1-17.el9_7.1.x86_64.r 10 MB/s | 182 kB 00:00 (5/5): net-snmp-libs-5.9.1-17.el9_7.1.x86_64.rp 4.4 MB/s | 742 kB 00:00 -------------------------------------------------------------------------------- Total 6.8 MB/s | 2.1 MB 00:00 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Installing : net-snmp-libs-1:5.9.1-17.el9_7.1.x86_64 1/5 Installing : mariadb-connector-c-3.2.6-1.el9_0.x86_64 2/5 Installing : net-snmp-agent-libs-1:5.9.1-17.el9_7.1.x86_64 3/5 Installing : net-snmp-1:5.9.1-17.el9_7.1.x86_64 4/5 Running scriptlet: net-snmp-1:5.9.1-17.el9_7.1.x86_64 4/5 Installing : net-snmp-utils-1:5.9.1-17.el9_7.1.x86_64 5/5 Running scriptlet: net-snmp-utils-1:5.9.1-17.el9_7.1.x86_64 5/5 Verifying : mariadb-connector-c-3.2.6-1.el9_0.x86_64 1/5 Verifying : net-snmp-1:5.9.1-17.el9_7.1.x86_64 2/5 Verifying : net-snmp-agent-libs-1:5.9.1-17.el9_7.1.x86_64 3/5 Verifying : net-snmp-libs-1:5.9.1-17.el9_7.1.x86_64 4/5 Verifying : net-snmp-utils-1:5.9.1-17.el9_7.1.x86_64 5/5 Installed: mariadb-connector-c-3.2.6-1.el9_0.x86_64 net-snmp-1:5.9.1-17.el9_7.1.x86_64 net-snmp-agent-libs-1:5.9.1-17.el9_7.1.x86_64 net-snmp-libs-1:5.9.1-17.el9_7.1.x86_64 net-snmp-utils-1:5.9.1-17.el9_7.1.x86_64 Complete! done + Checking SNMP Configuration ...  installing ...  done + Creating scripts directory ...  done + Downloading check_raid.pl ...  --2026-05-12 20:21:44-- https://leaseweb-redirect.servint.net/files/check_raid.pl Resolving leaseweb-redirect.servint.net (leaseweb-redirect.servint.net)... 162.210.199.197 Connecting to leaseweb-redirect.servint.net (leaseweb-redirect.servint.net)|162.210.199.197|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 1308958 (1.2M) [application/x-perl] Saving to: ‘/etc/snmp/scripts/check_raid.pl’ 0K .......... .......... .......... .......... .......... 3% 837K 1s 50K .......... .......... .......... .......... .......... 7% 1.63M 1s 100K .......... .......... .......... .......... .......... 11% 1.67M 1s 150K .......... .......... .......... .......... .......... 15% 81.8M 1s 200K .......... .......... .......... .......... .......... 19% 80.4M 0s 250K .......... .......... .......... .......... .......... 23% 95.4M 0s 300K .......... .......... .......... .......... .......... 27% 1.71M 0s 350K .......... .......... .......... .......... .......... 31% 86.4M 0s 400K .......... .......... .......... .......... .......... 35% 1.62M 0s 450K .......... .......... .......... .......... .......... 39% 89.2M 0s 500K .......... .......... .......... .......... .......... 43% 82.3M 0s 550K .......... .......... .......... .......... .......... 46% 84.8M 0s 600K .......... .......... .......... .......... .......... 50% 79.5M 0s 650K .......... .......... .......... .......... .......... 54% 101M 0s 700K .......... .......... .......... .......... .......... 58% 97.5M 0s 750K .......... .......... .......... .......... .......... 62% 99.7M 0s 800K .......... .......... .......... .......... .......... 66% 84.5M 0s 850K .......... .......... .......... .......... .......... 70% 98.6M 0s 900K .......... .......... .......... .......... .......... 74% 1.98M 0s 950K .......... .......... .......... .......... .......... 78% 86.3M 0s 1000K .......... .......... .......... .......... .......... 82% 81.6M 0s 1050K .......... .......... .......... .......... .......... 86% 95.9M 0s 1100K .......... .......... .......... .......... .......... 89% 96.7M 0s 1150K .......... .......... .......... .......... .......... 93% 83.0M 0s 1200K .......... .......... .......... .......... .......... 97% 1.83M 0s 1250K .......... .......... ........ 100% 94.7M=0.2s 2026-05-12 20:21:45 (5.22 MB/s) - ‘/etc/snmp/scripts/check_raid.pl’ saved [1308958/1308958] done + Set permissions for check_raid.pl ...  done + Downloading leaseweb_managed_hosting_data ...  --2026-05-12 20:21:45-- https://leaseweb-redirect.servint.net/files/leaseweb_managed_hosting_data Resolving leaseweb-redirect.servint.net (leaseweb-redirect.servint.net)... 162.210.199.197 Connecting to leaseweb-redirect.servint.net (leaseweb-redirect.servint.net)|162.210.199.197|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 16799 (16K) Saving to: ‘/etc/snmp/scripts/leaseweb_managed_hosting_data’ 0K .......... ...... 100% 550K=0.03s 2026-05-12 20:21:45 (550 KB/s) - ‘/etc/snmp/scripts/leaseweb_managed_hosting_data’ saved [16799/16799] done + Set permissions for leaseweb_managed_hosting_data ...  done + Creating snmp user ...  adding the following line to /var/lib/net-snmp/snmpd.conf: createUser LWSNMPUser SHA "ShowM3Th3StatsNow" AES "EnCr3PT3d4Us" adding the following line to /etc/snmp/snmpd.conf: rouser LWSNMPUser done + Setting snmp to enabled ...  Created symlink /etc/systemd/system/multi-user.target.wants/snmpd.service → /usr/lib/systemd/system/snmpd.service. done + Starting snmpd ...  done Checking Pure-FTP and TLS Encryption + Checking Pure-FTP ...  setting ...  Turning Anonymous FTP off Chksrvd monitoring is disabled Switching FTP server to pure-ftpd Updating FTP related packages [2026-05-12 20:21:46 +0000] [2026-05-12 20:21:46 +0000] Problems were detected with cPanel-provided files which are controlled by packages. [2026-05-12 20:21:46 +0000] If you did not make these changes intentionally, you can correct them by running: [2026-05-12 20:21:46 +0000] [2026-05-12 20:21:46 +0000] > /usr/local/cpanel/scripts/check_cpanel_pkgs --fix [2026-05-12 20:21:46 +0000] The following packages are missing from your system: [2026-05-12 20:21:46 +0000] cpanel-pure-ftpd-1.0.52-1.cp130~el9 [2026-05-12 20:21:46 +0000] Maximum sync children set to 16 based on 124801M available memory. [2026-05-12 20:21:46 +0000] Downloading http://httpupdate.cpanel.net/RPM/11.130/centos/9/x86_64/sha512 [2026-05-12 20:21:46 +0000] Successfully verified signature for cpanel (key types: release). [2026-05-12 20:21:46 +0000] Downloading http://httpupdate.cpanel.net/RPM/11.130/centos/9/x86_64/cpanel-pure-ftpd-1.0.52-1.cp130~el9.x86_64.rpm [2026-05-12 20:21:46 +0000] Disabling service monitoring. [2026-05-12 20:21:47 +0000] Hooks system enabled. [2026-05-12 20:21:47 +0000] Checking for and running RPM::Versions 'pre' hooks for any Packages about to be installed [2026-05-12 20:21:47 +0000] All required 'pre' hooks have been run [2026-05-12 20:21:47 +0000] No packages need to be uninstalled [2026-05-12 20:21:47 +0000] Installing new rpms: cpanel-pure-ftpd-1.0.52-1.cp130~el9.x86_64.rpm [2026-05-12 20:21:47 +0000] Verifying packages... [2026-05-12 20:21:47 +0000] Preparing packages... [2026-05-12 20:21:47 +0000] cpanel-pure-ftpd-1.0.52-1.cp130~el9.x86_64 [2026-05-12 20:21:48 +0000] enable was successful [2026-05-12 20:21:48 +0000] enable was successful [2026-05-12 20:21:51 +0000] Hooks system enabled. [2026-05-12 20:21:51 +0000] Checking for and running RPM::Versions 'post' hooks for any Packages about to be installed [2026-05-12 20:21:51 +0000] All required 'post' hooks have been run [2026-05-12 20:21:51 +0000] Restoring service monitoring. Enabling pure-ftpd in init system Waiting for “pureftpd” to restart ………waiting for “pureftpd” to initialize ………finished. Service Status pure-ftpd (/etc/systemd/system/pure-ftpd.service - simple) is running with PID 17515 (systemd check method). Startup Log May 12 20:21:51 11637815.leaseweb.com systemd[1]: Started Pure-FTPd. pureftpd restarted successfully. Enabling chksrvd monitoring Waiting for “tailwatchd” to restart gracefully ……………………waiting for “tailwatchd” to initialize ………finished. Service Status tailwatchd (tailwatchd) is running as root with PID 2618 (systemd+/proc check method). Startup Log May 12 20:21:26 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:26 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:27 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:30 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:44 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:45 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:47 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:47 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:48 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:50 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. tailwatchd restarted successfully. FTP server conversion complete done + Setting Passive Port Range to 49152 65534 ...  creating ...  done + Set TLS Encryption Support ...  backing up ...  setting ...  done + Restarting Pure-FTP ...  Disabling Chksrvd monitoring Waiting for “tailwatchd” to restart gracefully …………………………waiting for “tailwatchd” to initialize ………finished. Service Status tailwatchd (tailwatchd) is running as root with PID 2618 (systemd+/proc check method). Startup Log May 12 20:21:26 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:26 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:27 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:30 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:44 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:45 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:47 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:47 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:48 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:50 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. tailwatchd restarted successfully. Halting pure-ftpd Disabling pure-ftpd in init system Switching FTP server to pure-ftpd Updating FTP related packages Enabling pure-ftpd in init system Waiting for “pureftpd” to start ……waiting for “pureftpd” to initialize ………finished. Service Status pure-ftpd (/etc/systemd/system/pure-ftpd.service - simple) is running with PID 17707 (systemd check method). Startup Log May 12 20:21:53 11637815.leaseweb.com systemd[1]: Started Pure-FTPd. pureftpd started successfully. Enabling chksrvd monitoring Waiting for “tailwatchd” to restart gracefully …………………waiting for “tailwatchd” to initialize ………finished. Service Status tailwatchd (tailwatchd) is running as root with PID 2618 (systemd+/proc check method). Startup Log May 12 20:21:27 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:30 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:44 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:45 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:47 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:47 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:48 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:50 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:52 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. May 12 20:21:53 11637815.leaseweb.com systemd[1]: /etc/systemd/system/tailwatchd.service:9: PIDFile= references a path below legacy directory /var/run/, updating /var/run/tailwatchd.pid → /run/tailwatchd.pid; please update the unit file accordingly. tailwatchd restarted successfully. FTP server conversion complete done cPHulk Service + Checking status ...  is_enabled: 1 enabled ClamAV Service + Enabling ClamAV Plugin...  --- data: log_entry: 2026-05-12T20:21:56Z_cpanel-clamav pid: 17818 metadata: command: install_rpm_plugin reason: OK result: 1 version: 1 done Greylisting Service + Checking greylisting ...  disabled cPanel Analytics + Disabling analytics ...  --- metadata: command: participate_in_analytics reason: OK result: 1 version: 1 done Contact Manager + Changing to high setting ...  done Install elinks + Checking for elinks ...  package elinks is not installed not found + Installing elinks ...  Last metadata expiration check: 0:00:36 ago on Tue 12 May 2026 08:21:21 PM UTC. Dependencies resolved. ================================================================================ Package Architecture Version Repository Size ================================================================================ Installing: elinks x86_64 0.19.1-1.el9 epel 1.0 M Transaction Summary ================================================================================ Install 1 Package Total download size: 1.0 M Installed size: 3.3 M Downloading Packages: elinks-0.19.1-1.el9.x86_64.rpm 2.3 MB/s | 1.0 MB 00:00 -------------------------------------------------------------------------------- Total 1.5 MB/s | 1.0 MB 00:00 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction RPM: error: can't create transaction lock on /var/lib/rpm/.rpm.lock (Resource temporarily unavailable) The downloaded packages were saved in cache until the next successful transaction. You can remove cached packages by executing 'yum clean packages'. Error: Could not run transaction. failed SSH Config + Checking SSH ...  setting rule ... done + Restarting SSH service ...  Waiting for “sshd” to restart ………waiting for “sshd” to initialize ………finished. Service Status sshd (sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups) is running as root with PID 17986 (systemd+/proc check method). Startup Log May 12 20:21:58 11637815.leaseweb.com systemd[1]: Starting OpenSSH server daemon... May 12 20:21:58 11637815.leaseweb.com sshd[17986]: Server listening on 0.0.0.0 port 22. May 12 20:21:58 11637815.leaseweb.com sshd[17986]: Server listening on :: port 22. May 12 20:21:58 11637815.leaseweb.com systemd[1]: Started OpenSSH server daemon. sshd restarted successfully. done Console Debugging + Setting console debugging ...  done Acronis Backup Plugin + Checking for Acronis Agent ...  found + Checking for Acronis Backup Plugin ...  package acronis-backup-cpanel is not installed not installed + Installing temp Directory ...  done + Changing to temp Directory ...  done + Downloading ...  --2026-05-12 20:21:58-- https://download.acronis.com/ci/cpanel/stable/install_acronis_cpanel.sh Resolving download.acronis.com (download.acronis.com)... 91.198.51.132, 91.198.51.131 Connecting to download.acronis.com (download.acronis.com)|91.198.51.132|:443... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: https://dl.acronis.com/u/ci/cpanel/stable/install_acronis_cpanel.sh [following] --2026-05-12 20:21:59-- https://dl.acronis.com/u/ci/cpanel/stable/install_acronis_cpanel.sh Resolving dl.acronis.com (dl.acronis.com)... 23.221.212.215, 23.221.212.200 Connecting to dl.acronis.com (dl.acronis.com)|23.221.212.215|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 5957 (5.8K) [application/x-sh] Saving to: ‘install_acronis_cpanel.sh’ 0K ..... 100% 166M=0s 2026-05-12 20:22:00 (166 MB/s) - ‘install_acronis_cpanel.sh’ saved [5957/5957] done + Installing ...  Acronis Plugin installation started. Detecting OS type and version ... Installing GPG ... Acronis Repository for cPanel plugin - stable 344 kB/s | 32 kB 00:00 Package gnupg2-2.3.3-5.el9_7.x86_64 is already installed. Dependencies resolved. Nothing to do. Complete! error: can't create transaction lock on /var/lib/rpm/.rpm.lock (Resource temporarily unavailable) error: https://dl.acronis.com/u/ci/cpanel/acronis-backup-pubkey.gpg: key 1 import failed. ERROR: Unable to import Acronis Backup for cPanel gpg key. failed + Removing temp dir ...  done ImunifyAV Install + Checking for ImunifyAV ...  installed Post Install Cleanup + Checking postinstall script ... not present + Removing temp dir ...  done Removing Auto-Run Script + Disabling service ...  Removed "/etc/systemd/system/default.target.wants/leaseweb_managed.service". done + Removing service ...  done + Reloading Systemctl Daemon ...  done + Resetting Failed Systemctl Services ...  done  * Hardening complete