Leaseweb Managed Hosting Hardening Script Version: 12 CentOS 9 Version Logging in file /root/managed/harden-2026-05-12-20-22-48.log Check for duplicate almalinux.repo in AlmaLinux 9 + Checking almalinux.repo ...  Install Perl FindBin + Checking for FindBin ...  installed Install Kernel Headers + Checking for kernel headers ...  installed Install Kernel Devel + Checking for kernel devel ...  installed Leaseweb Support Key + Checking Leaseweb Support SSH Key ...  exists Preliminary fixes + Import new MySQL GPG Key ...  done + Fix sudoers line in /etc/nsswitch.conf ...  done Checking cPanel Status + Checking for cPanel ...  installed Set Shared IP + Setting to main IP if set to 127.0.0.1 ...  done Checking if Server is up-to-date + Checking if updated ...  yes AlmaLinux Installation + Checking for AlmaLinux ...  installed Check for Acronis Agent + Checking for agent ...  installed cPanel Tweak Settings + Turning off Restrict outgoing SMTP to root, exim, and mailman (FKA SMTP Tweak) ...  --- metadata: command: set_tweaksetting reason: OK result: 1 version: 1 done + Setting nightly Kernel Updates ...  --- metadata: command: set_tweaksetting reason: OK result: 1 version: 1 done Install IPSet + Checking for IPSet ...  installed CSF Firewall + Checking for CSF Firewall ...  installed ...  csf.service loaded active exited ConfigServer Firewall & Security - csf running + Installing cPanel CSF Updates ...  Last metadata expiration check: 0:00:50 ago on Tue 12 May 2026 08:22:00 PM UTC. Package cpanel-csf-16.18-1.1.1.cpanel.noarch is already installed. Dependencies resolved. Nothing to do. Complete! done PHP-FPM Pool Settings + Checking for system_pool_defaults.yaml ...  found ...  php_value_error_reporting: E_ALL & ~E_NOTICE & ~E_DEPRECATED correct Tune Apache Settings + Checking for jq ...  installed + Checking for libonig ...  linked + Tuning Apache ...  correct ModSecurity + Checking for ModSecurity ...  installed + Checking Icinga Ignore Ruleset ...  SecRule REMOTE_ADDR "@contains 108.62.0.214" "id:1,phase:1,nolog,allow,ctl:ruleEngine=Off" installed + Checking OWASP3 Ruleset ...  installed Install SMNP + Installing net-snmp net-snmp-util ...  installed + Checking SNMP Configuration ...  group incremental usm LWSNMPUser rouser LWSNMPUser installed Checking Pure-FTP and TLS Encryption + Checking Pure-FTP ...  Current FTP server type: pure-ftpd enabled + Setting Passive Port Range to 49152 65534 ...  PassivePortRange: 49152 65534 exists + Set TLS Encryption Support ...  TLS: 3 exists cPHulk Service + Checking status ...  is_enabled: 1 enabled ClamAV Service + Enabling ClamAV Plugin...  --- data: log_entry: 2026-05-12T20:22:51Z_cpanel-clamav pid: 18335 metadata: command: install_rpm_plugin reason: OK result: 1 version: 1 done Greylisting Service + Checking greylisting ...  disabled cPanel Analytics + Disabling analytics ...  --- metadata: command: participate_in_analytics reason: OK result: 1 version: 1 done Contact Manager + Changing to high setting ...  done Install elinks + Checking for elinks ...  package elinks is not installed not found + Installing elinks ...  Last metadata expiration check: 0:00:51 ago on Tue 12 May 2026 08:22:00 PM UTC. Dependencies resolved. ================================================================================ Package Architecture Version Repository Size ================================================================================ Installing: elinks x86_64 0.19.1-1.el9 epel 1.0 M Transaction Summary ================================================================================ Install 1 Package Total size: 1.0 M Installed size: 3.3 M Downloading Packages: [SKIPPED] elinks-0.19.1-1.el9.x86_64.rpm: Already downloaded Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Installing : elinks-0.19.1-1.el9.x86_64 1/1 Running scriptlet: elinks-0.19.1-1.el9.x86_64 1/1 Verifying : elinks-0.19.1-1.el9.x86_64 1/1 Installed: elinks-0.19.1-1.el9.x86_64 Complete! done SSH Config + Checking SSH ...  Match Address 108.62.0.214 enabled Console Debugging + Setting console debugging ...  done Acronis Backup Plugin + Checking for Acronis Agent ...  found + Checking for Acronis Backup Plugin ...  package acronis-backup-cpanel is not installed not installed + Installing temp Directory ...  done + Changing to temp Directory ...  done + Downloading ...  --2026-05-12 20:22:53-- https://download.acronis.com/ci/cpanel/stable/install_acronis_cpanel.sh Resolving download.acronis.com (download.acronis.com)... 91.198.51.132, 91.198.51.131 Connecting to download.acronis.com (download.acronis.com)|91.198.51.132|:443... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: https://dl.acronis.com/u/ci/cpanel/stable/install_acronis_cpanel.sh [following] --2026-05-12 20:22:53-- https://dl.acronis.com/u/ci/cpanel/stable/install_acronis_cpanel.sh Resolving dl.acronis.com (dl.acronis.com)... 23.221.212.215, 23.221.212.200 Connecting to dl.acronis.com (dl.acronis.com)|23.221.212.215|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 5957 (5.8K) [application/x-sh] Saving to: ‘install_acronis_cpanel.sh’ 0K ..... 100% 139M=0s 2026-05-12 20:22:53 (139 MB/s) - ‘install_acronis_cpanel.sh’ saved [5957/5957] done + Installing ...  Acronis Plugin installation started. Detecting OS type and version ... Installing GPG ... Acronis Repository for cPanel plugin - stable 126 kB/s | 2.9 kB 00:00 Package gnupg2-2.3.3-5.el9_7.x86_64 is already installed. Dependencies resolved. Nothing to do. Complete! 152 files removed EA4 ( EasyApache 4 - c9 ) 1.2 MB/s | 1.6 MB 00:01 cPanel Addons Production Feed 13 kB/s | 9.3 kB 00:00 cPanel Plugins project 145 kB/s | 147 kB 00:01 Acronis Repository for cPanel plugin - stable 429 kB/s | 32 kB 00:00 AlmaLinux 9 - AppStream 49 MB/s | 22 MB 00:00 AlmaLinux 9 - BaseOS 61 MB/s | 28 MB 00:00 AlmaLinux 9 - CRB 27 MB/s | 4.9 MB 00:00 AlmaLinux 9 - Extras 192 kB/s | 23 kB 00:00 alt common Extended Lifecycle Support by TuxCar 937 kB/s | 832 kB 00:00 Extra Packages for Enterprise Linux 9 - x86_64 16 MB/s | 21 MB 00:01 Extra Packages for Enterprise Linux 9 openh264 4.5 kB/s | 2.5 kB 00:00 Imunify360 - Gradual Rollout Slot 5 487 B/s | 258 B 00:00 Imunify360 - Gradual Rollout Slot 487 B/s | 258 B 00:00 Imunify360 - Gradual Rollout Slot 7 473 B/s | 258 B 00:00 Imunify360 - Gradual Rollout Slot 8 497 B/s | 258 B 00:00 Imunify360 - Gradual Rollout Slot 1 476 B/s | 258 B 00:00 Imunify360 - Gradual Rollout Slot 2 456 B/s | 258 B 00:00 Imunify360 - Gradual Rollout Slot 3 461 B/s | 258 B 00:00 Imunify360 - Gradual Rollout Slot 4 470 B/s | 258 B 00:00 EL-9 - Imunify360 1.6 MB/s | 3.0 MB 00:01 MySQL 8.0 Community Server 58 MB/s | 3.3 MB 00:00 MySQL Connectors Community 7.3 MB/s | 114 kB 00:00 MySQL Tools Community 36 MB/s | 1.6 MB 00:00 WP Toolkit for cPanel 2.4 MB/s | 114 kB 00:00 WP Toolkit third parties 220 kB/s | 8.5 kB 00:00 Metadata cache created. Installing Acronis Backup ... Last metadata expiration check: 0:00:04 ago on Tue 12 May 2026 08:23:25 PM UTC. Dependencies resolved. ================================================================================ Package Arch Version Repository Size ================================================================================ Installing: acronis-backup-cpanel x86_64 1.9.3-998.el7 acronis-cpanel-stable 21 M Transaction Summary ================================================================================ Install 1 Package Total download size: 21 M Installed size: 78 M Downloading Packages: acronis-backup-cpanel-1.9.3-998.el7.x86_64.rpm 11 MB/s | 21 MB 00:01 -------------------------------------------------------------------------------- Total 11 MB/s | 21 MB 00:01 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Running scriptlet: acronis-backup-cpanel-1.9.3-998.el7.x86_64 1/1 Installing : acronis-backup-cpanel-1.9.3-998.el7.x86_64 1/1 Running scriptlet: acronis-backup-cpanel-1.9.3-998.el7.x86_64 1/1 Detecting OS type and version ... Registering plugin... Registering plugin in WHM... acronisbackup registered Plugin has been registered in WHM Installing plugin for cPanel... Plugin installed ok Plugin has been installed for cPanel Adding reseller feature to WHM. INFO [alembic.runtime.migration] Context impl SQLiteImpl. INFO [alembic.runtime.migration] Will assume non-transactional DDL. INFO [alembic.runtime.migration] Running upgrade -> 3ccffa8bd0cc, Create mms_tasks table INFO [alembic.runtime.migration] Running upgrade 3ccffa8bd0cc -> cf957fde958d, Create recovery_points table INFO [alembic.runtime.migration] Running upgrade cf957fde958d -> e0f15d6d3ecf, Create async_tasks table INFO [alembic.runtime.migration] Running upgrade e0f15d6d3ecf -> d065d70f986b, Add socket uid and gid in async_tasks table INFO [alembic.runtime.migration] Running upgrade d065d70f986b -> bf27ae0fd802, Add mounting_started_at and mounting_failed_at attrs in recovery_points table INFO [alembic.runtime.migration] Running upgrade bf27ae0fd802 -> 701b7c6892d5, Drop mms_tasks table INFO [alembic.runtime.migration] Running upgrade 701b7c6892d5 -> c5cdae30979d, Add creator_name attribute in async_tasks INFO [alembic.runtime.migration] Running upgrade c5cdae30979d -> c637e17d96d7, Fill customer_name by creator_id in async_tasks INFO [alembic.runtime.migration] Running upgrade c637e17d96d7 -> 0a1da5c641c5, Add async_tasks.cleanup_status INFO [alembic.runtime.migration] Running upgrade 0a1da5c641c5 -> e612a7fffe8f, Add mounting fail reason INFO [alembic.runtime.migration] Running upgrade e612a7fffe8f -> 42d80003e267, Added slice_id column INFO [alembic.runtime.migration] Running upgrade 42d80003e267 -> e8151ead2163, Add last access time INFO [alembic.runtime.migration] Running upgrade e8151ead2163 -> 83614cf11910, Add mount task_id column INFO [alembic.runtime.migration] Running upgrade 83614cf11910 -> 6fde61a8b543, Add task_id column to async_tasks INFO [alembic.runtime.migration] Running upgrade 6fde61a8b543 -> e799a40dcd7d, Create ignored_incompatible_plans table Plugin has been successfully installed Verifying : acronis-backup-cpanel-1.9.3-998.el7.x86_64 1/1 Installed: acronis-backup-cpanel-1.9.3-998.el7.x86_64 Complete! done + Checking for Acronis API Credentials ...  not found. File should be called "/root/api_credentials" + Setting Acronis Plan to start at hour 22 and minute 41 ...  done + Configuring ...  waiting 15 seconds for Plugin to start [2026-05-12T20:24:02+00:00]: 'path' parameter is not passed. Using default. [2026-05-12T20:24:02+00:00]: Starting acronis backup service configurator. Traceback (most recent call last): File "/usr/local/cpanel/base/3rdparty/acronisbackup/python/lib/python3.8/runpy.py", line 194, in _run_module_as_main return _run_code(code, main_globals, None, File "/usr/local/cpanel/base/3rdparty/acronisbackup/python/lib/python3.8/runpy.py", line 87, in _run_code exec(code, run_globals) File "/usr/local/cpanel/base/3rdparty/acronisbackup/python/lib/python3.8/site-packages/acronis_backup_srv/scripts/configurator.py", line 775, in main() File "/usr/local/cpanel/base/3rdparty/acronisbackup/python/lib/python3.8/site-packages/acronis_backup_srv/scripts/configurator.py", line 664, in main master_token = check_user_credentials(configurator) File "/usr/local/cpanel/base/3rdparty/acronisbackup/python/lib/python3.8/site-packages/acronis_backup_srv/scripts/configurator.py", line 586, in check_user_credentials url = backup_cloud.Client.resolve_server_url(url, login) File "/usr/local/cpanel/base/3rdparty/acronisbackup/python/lib/python3.8/site-packages/acronis_backup_srv/backup_cloud/client.py", line 26, in wrapped return fn(*args, **kwargs) File "/usr/local/cpanel/base/3rdparty/acronisbackup/python/lib/python3.8/site-packages/acronis_backup_srv/backup_cloud/client.py", line 121, in resolve_server_url resp_data = cls._perform_request(requests, url, 'get', params=params) File "/usr/local/cpanel/base/3rdparty/acronisbackup/python/lib/python3.8/site-packages/acronis_backup_srv/backup_cloud/client.py", line 104, in _perform_request response = getattr(request, method)(url, **kwargs) File "/usr/local/cpanel/base/3rdparty/acronisbackup/python/lib/python3.8/site-packages/requests/api.py", line 76, in get return request('get', url, params=params, **kwargs) File "/usr/local/cpanel/base/3rdparty/acronisbackup/python/lib/python3.8/site-packages/requests/api.py", line 61, in request return session.request(method=method, url=url, **kwargs) File "/usr/local/cpanel/base/3rdparty/acronisbackup/python/lib/python3.8/site-packages/requests/sessions.py", line 516, in request prep = self.prepare_request(req) File "/usr/local/cpanel/base/3rdparty/acronisbackup/python/lib/python3.8/site-packages/requests/sessions.py", line 449, in prepare_request p.prepare( File "/usr/local/cpanel/base/3rdparty/acronisbackup/python/lib/python3.8/site-packages/requests/models.py", line 314, in prepare self.prepare_url(url, params) File "/usr/local/cpanel/base/3rdparty/acronisbackup/python/lib/python3.8/site-packages/requests/models.py", line 391, in prepare_url raise InvalidURL("Invalid URL %r: No host supplied" % url) requests.exceptions.InvalidURL: Invalid URL 'https:/api/1/accounts': No host supplied