[*] Logging output to /var/log/session-audit_20260501_005044.log [*] Backing up sessions directory... Source : /var/cpanel/sessions Dest : /var/cpanel/sessions_backup_20260501_005044 [+] Backup complete. [*] Verifying backup integrity... Live sessions : 134 Backup sessions : 134 [+] Backup verified (134 files match). [*] Checking cPanel version... Version : 11.110.0.97 Last updated : 2026-04-28 18:44:08 Patch status : PATCHED [*] Scanning for CRITICAL exploitation artifacts... (token_denied + injected cp_security_token + badpass origin) [!] CRITICAL: /var/cpanel/sessions/raw/:0FYvZKBcpWriYq4Z User : root cp_security_token: /cpsess9017380639 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 05:03:47 Session modified : 2026-04-30 05:03:47 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:0GnVpPMjukMJ08K4 User : root cp_security_token: /cpsess6528737045 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 03:06:23 Session modified : 2026-04-30 03:06:23 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:0b27wLEbToXokbNt User : root cp_security_token: /cpsess7287176031 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 03:35:50 Session modified : 2026-04-30 03:35:50 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:0hdEOHgkEEItiACM User : root cp_security_token: /cpsess7180668436 token_denied : 1 Origin : address=157.245.36.108,app=whostmgrd,method=badpass Session created : 2026-04-30 02:21:21 Session modified : 2026-04-30 02:21:21 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:32fNzWOCHY4z1mwh User : root cp_security_token: /cpsess8202681464 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 01:54:26 Session modified : 2026-04-30 01:54:26 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:3dSDqMbRuCY72FhO User : root cp_security_token: /cpsess9905270782 token_denied : 1 Origin : address=5.83.150.16,app=whostmgrd,method=badpass Session created : 2026-04-30 11:08:01 Session modified : 2026-04-30 11:08:01 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:5BHVzknplxXZpKmt User : root cp_security_token: /cpsess2569424503 token_denied : 1 Origin : address=165.154.199.52,app=whostmgrd,method=badpass Session created : 2026-04-30 05:35:16 Session modified : 2026-04-30 05:35:16 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:5tK2aTOpLCKc9Fg5 User : root cp_security_token: /cpsess9694345735 token_denied : 1 Origin : address=165.154.199.52,app=whostmgrd,method=badpass Session created : 2026-04-30 05:35:24 Session modified : 2026-04-30 05:35:24 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:5vvrNl5CheHdE4nL User : root cp_security_token: /cpsess9643964813 token_denied : 1 Origin : address=42.96.61.68,app=whostmgrd,method=badpass Session created : 2026-04-30 17:59:56 Session modified : 2026-04-30 17:59:56 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:7uSVntZKYqDnZPUq User : root cp_security_token: /cpsess1366952569 token_denied : 1 Origin : address=136.244.66.225,app=whostmgrd,method=badpass Session created : 2026-04-30 11:14:06 Session modified : 2026-04-30 11:14:06 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:8BgUlCCMUOBu3jgI User : root cp_security_token: /cpsess7755830860 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 03:06:23 Session modified : 2026-04-30 03:06:23 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:AjR8EQIKUuaNI4db User : root cp_security_token: /cpsess1966950642 token_denied : 1 Origin : address=65.20.67.134,app=whostmgrd,method=badpass Session created : 2026-04-30 05:41:12 Session modified : 2026-04-30 05:41:12 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:Aqw9xmZb2GMzI0YR User : root cp_security_token: /cpsess6010999827 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 07:32:05 Session modified : 2026-04-30 07:32:05 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:Av1dgL6ly9LHuh2w User : root cp_security_token: /cpsess2448082365 token_denied : 1 Origin : address=165.154.255.14,app=whostmgrd,method=badpass Session created : 2026-04-30 20:49:44 Session modified : 2026-04-30 20:49:44 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:B6vWZipnqRovQqsW User : root cp_security_token: /cpsess4597913916 token_denied : 1 Origin : address=217.60.241.18,app=whostmgrd,method=badpass Session created : 2026-04-30 23:52:32 Session modified : 2026-04-30 23:52:32 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:BIpv9FvdiL9O_iMh User : root cp_security_token: /cpsess1200857978 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 03:00:36 Session modified : 2026-04-30 03:00:36 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:CDQXlyyyu21LLn5d User : root cp_security_token: /cpsess5768362890 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 02:48:39 Session modified : 2026-04-30 02:48:39 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:C_wG8f8PQ786FAO1 User : root cp_security_token: /cpsess5709810326 token_denied : 1 Origin : address=38.146.25.154,app=whostmgrd,method=badpass Session created : 2026-04-30 04:16:22 Session modified : 2026-04-30 04:16:22 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:CcsVWZeJMyB5i2Ou User : root cp_security_token: /cpsess5323938817 token_denied : 1 Origin : address=5.230.90.38,app=whostmgrd,method=badpass Session created : 2026-04-30 22:25:45 Session modified : 2026-04-30 22:25:45 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:CwNwjyYAAq81n9nT User : root cp_security_token: /cpsess5920815636 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 06:54:13 Session modified : 2026-04-30 06:54:13 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:Cxv_ssG0gvdSjspC User : root cp_security_token: /cpsess8178881041 token_denied : 1 Origin : address=178.237.58.228,app=whostmgrd,method=badpass Session created : 2026-04-30 20:48:18 Session modified : 2026-04-30 20:48:18 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:DCUReD_7lYH9nYtv User : root cp_security_token: /cpsess5663872425 token_denied : 1 Origin : address=165.154.255.14,app=whostmgrd,method=badpass Session created : 2026-04-30 22:54:49 Session modified : 2026-04-30 22:54:49 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:DRrXFzwdKEPVqzoq User : root cp_security_token: /cpsess7717522126 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 08:49:34 Session modified : 2026-04-30 08:49:34 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:DvWAVSD9KjioEAKv User : root cp_security_token: /cpsess6859048154 token_denied : 1 Origin : address=206.189.190.243,app=whostmgrd,method=badpass Session created : 2026-04-30 03:48:34 Session modified : 2026-04-30 03:48:34 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:Dvfdio0kUmtyj9Cx User : root cp_security_token: /cpsess7423908139 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 02:49:19 Session modified : 2026-04-30 02:49:19 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:Dxjs_VQ6p529JeWI User : root cp_security_token: /cpsess3048095669 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 07:31:51 Session modified : 2026-04-30 07:31:51 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:DzsXW_y44R6kkZs3 User : root cp_security_token: /cpsess4948041429 token_denied : 1 Origin : address=221.218.142.17,app=whostmgrd,method=badpass Session created : 2026-04-30 18:21:13 Session modified : 2026-04-30 18:21:13 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:EH0uP_a9Grw9CfPD User : root cp_security_token: /cpsess2286358595 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 01:54:25 Session modified : 2026-04-30 01:54:25 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:FeQRiM2gOkDtGs9S User : root cp_security_token: /cpsess2062679813 token_denied : 1 Origin : address=77.90.185.28,app=whostmgrd,method=badpass Session created : 2026-04-30 19:00:40 Session modified : 2026-04-30 19:00:40 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:H9fm_UhYrLvfSqqp User : root cp_security_token: /cpsess8324482803 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 01:50:11 Session modified : 2026-04-30 01:50:11 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:HY3ECzpbcex8udlY User : root cp_security_token: /cpsess2292559839 token_denied : 1 Origin : address=217.60.241.18,app=whostmgrd,method=badpass Session created : 2026-04-30 23:52:32 Session modified : 2026-04-30 23:52:32 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:HtV08YqpLHZM9v5d User : root cp_security_token: /cpsess6831977860 token_denied : 1 Origin : address=209.99.191.199,app=whostmgrd,method=badpass Session created : 2026-04-30 09:50:45 Session modified : 2026-04-30 09:50:45 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:I4tWSBwaclqEb6Gw User : root cp_security_token: /cpsess3037921223 token_denied : 1 Origin : address=93.123.109.79,app=whostmgrd,method=badpass Session created : 2026-04-30 12:28:36 Session modified : 2026-04-30 12:28:36 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:I6I9gZSdSfrNI4AS User : root cp_security_token: /cpsess6639566514 token_denied : 1 Origin : address=45.143.167.96,app=whostmgrd,method=badpass Session created : 2026-04-30 23:34:40 Session modified : 2026-04-30 23:34:40 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:JAw0_YLJyki6Xqa6 User : root cp_security_token: /cpsess1504280014 token_denied : 1 Origin : address=185.177.238.46,app=whostmgrd,method=badpass Session created : 2026-04-30 22:14:08 Session modified : 2026-04-30 22:14:08 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:JFLGR3Kga_1wXT0j User : root cp_security_token: /cpsess0430532966 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 02:18:08 Session modified : 2026-04-30 02:18:08 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:JHHn5gz1Z4wfgEsi User : root cp_security_token: /cpsess7681322030 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 06:55:30 Session modified : 2026-04-30 06:55:30 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:Jq5ZdPxXlwxOI9O9 User : root cp_security_token: /cpsess7948700877 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 07:06:21 Session modified : 2026-04-30 07:06:21 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:Jwd0el64LYiETiQ1 User : root cp_security_token: /cpsess1657362279 token_denied : 1 Origin : address=185.177.238.46,app=whostmgrd,method=badpass Session created : 2026-04-30 07:52:26 Session modified : 2026-04-30 07:52:26 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:K1MkNgdMD5BNJOO0 User : root cp_security_token: /cpsess2902209265 token_denied : 1 Origin : address=5.252.179.116,app=whostmgrd,method=badpass Session created : 2026-04-30 16:19:04 Session modified : 2026-04-30 16:19:04 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:KTFSwbVQPDyr6BDA User : root cp_security_token: /cpsess4767550612 token_denied : 1 Origin : address=209.99.191.199,app=whostmgrd,method=badpass Session created : 2026-04-30 11:53:32 Session modified : 2026-04-30 11:53:32 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:KhvoL3Zf_cjiWbYO User : root cp_security_token: /cpsess6764254930 token_denied : 1 Origin : address=209.99.191.199,app=whostmgrd,method=badpass Session created : 2026-04-30 10:51:47 Session modified : 2026-04-30 10:51:47 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:L2hnVC85vlI5A7z4 User : root cp_security_token: /cpsess1861984023 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 06:56:48 Session modified : 2026-04-30 06:56:48 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:LmMTd0KLg5demCFH User : root cp_security_token: /cpsess5989344402 token_denied : 1 Origin : address=51.89.19.199,app=whostmgrd,method=badpass Session created : 2026-04-30 23:28:58 Session modified : 2026-04-30 23:28:58 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:M1eZXG7aAGn0HWnr User : root cp_security_token: /cpsess0032762159 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 02:37:33 Session modified : 2026-04-30 02:37:33 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:MEsAYp3mg_26ksQV User : root cp_security_token: /cpsess7210812280 token_denied : 1 Origin : address=217.60.241.18,app=whostmgrd,method=badpass Session created : 2026-04-30 23:52:32 Session modified : 2026-04-30 23:52:32 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:MOMYTNvd3ieTvceM User : root cp_security_token: /cpsess2497294004 token_denied : 1 Origin : address=167.88.180.94,app=whostmgrd,method=badpass Session created : 2026-04-30 09:37:54 Session modified : 2026-04-30 09:37:54 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:MovAM5nDdC_PbkKU User : root cp_security_token: /cpsess3532562304 token_denied : 1 Origin : address=45.205.1.2,app=whostmgrd,method=badpass Session created : 2026-04-30 22:50:29 Session modified : 2026-04-30 22:50:29 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:NJTHHCqYVlU73h6h User : root cp_security_token: /cpsess4873553131 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 06:56:28 Session modified : 2026-04-30 06:56:28 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:NTVro1caZFVhvxln User : root cp_security_token: /cpsess3536069804 token_denied : 1 Origin : address=164.90.228.79,app=whostmgrd,method=badpass Session created : 2026-04-30 02:20:33 Session modified : 2026-04-30 02:20:33 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:Njk_PqTs6YGz9IKF User : root cp_security_token: /cpsess6377772376 token_denied : 1 Origin : address=167.88.180.94,app=whostmgrd,method=badpass Session created : 2026-04-30 10:03:55 Session modified : 2026-04-30 10:03:55 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:PsKHFffS_a9ubbJl User : root cp_security_token: /cpsess8972295327 token_denied : 1 Origin : address=8.219.84.171,app=whostmgrd,method=badpass Session created : 2026-04-30 06:03:25 Session modified : 2026-04-30 06:03:25 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:QDzl8xFxzWqTtxlu User : root cp_security_token: /cpsess5975982281 token_denied : 1 Origin : address=178.237.58.228,app=whostmgrd,method=badpass Session created : 2026-04-30 20:48:18 Session modified : 2026-04-30 20:48:18 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:QwH1Xjxsx3q3o9qS User : root cp_security_token: /cpsess6914821052 token_denied : 1 Origin : address=45.205.1.2,app=whostmgrd,method=badpass Session created : 2026-04-30 22:49:47 Session modified : 2026-04-30 22:49:47 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:RF1CuUt5R1NqHJvV User : root cp_security_token: /cpsess7661408624 token_denied : 1 Origin : address=51.161.117.166,app=whostmgrd,method=badpass Session created : 2026-04-30 18:28:36 Session modified : 2026-04-30 18:28:36 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:RekIe8z9EP3yD_EY User : root cp_security_token: /cpsess2141964916 token_denied : 1 Origin : address=107.172.1.62,app=whostmgrd,method=badpass Session created : 2026-04-30 14:51:57 Session modified : 2026-04-30 14:51:57 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:RmHhol3dFQzA_dO4 User : root cp_security_token: /cpsess8500171364 token_denied : 1 Origin : address=185.177.238.46,app=whostmgrd,method=badpass Session created : 2026-04-30 21:42:03 Session modified : 2026-04-30 21:42:03 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:S4K0pYdywde0ifXs User : root cp_security_token: /cpsess8131211457 token_denied : 1 Origin : address=209.99.191.199,app=whostmgrd,method=badpass Session created : 2026-04-30 10:50:31 Session modified : 2026-04-30 10:50:31 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:SNsJXZueNqg0WVMA User : root cp_security_token: /cpsess3710378193 token_denied : 1 Origin : address=107.173.210.100,app=whostmgrd,method=badpass Session created : 2026-04-30 13:42:10 Session modified : 2026-04-30 13:42:10 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:SRx1aSjm_n2QQX8v User : root cp_security_token: /cpsess5390789708 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 02:35:48 Session modified : 2026-04-30 02:35:48 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:SrndIOpATNhjJ8pS User : root cp_security_token: /cpsess6766219018 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 03:34:54 Session modified : 2026-04-30 03:34:54 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:TSP3FR5tqIsGNt1_ User : root cp_security_token: /cpsess9490609799 token_denied : 1 Origin : address=217.60.241.18,app=whostmgrd,method=badpass Session created : 2026-04-30 23:52:32 Session modified : 2026-04-30 23:52:32 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:TW7NP6gy7r_kl_8C User : root cp_security_token: /cpsess9560486912 token_denied : 1 Origin : address=142.93.43.26,app=whostmgrd,method=badpass Session created : 2026-04-30 22:38:33 Session modified : 2026-04-30 22:38:33 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:UuflS7bVD2CVzEMt User : root cp_security_token: /cpsess2602650523 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 03:00:23 Session modified : 2026-04-30 03:00:23 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:WCKdt5Oy5_lhCVoC User : root cp_security_token: /cpsess0751333902 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 01:50:11 Session modified : 2026-04-30 01:50:11 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:WJ7plr5l6VW_3ZqM User : root cp_security_token: /cpsess4907350218 token_denied : 1 Origin : address=209.99.191.199,app=whostmgrd,method=badpass Session created : 2026-04-30 09:50:45 Session modified : 2026-04-30 09:50:45 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:WNjoGXVeafPwGPcT User : root cp_security_token: /cpsess1718371250 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 02:18:07 Session modified : 2026-04-30 02:18:07 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:XwRAxEtVYps5Ak_B User : root cp_security_token: /cpsess8080980840 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 07:00:35 Session modified : 2026-04-30 07:00:35 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:Y4H_BH5PNXEeV8Ab User : root cp_security_token: /cpsess7606046646 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 06:54:27 Session modified : 2026-04-30 06:54:27 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:YEB7e91nODQifIF6 User : root cp_security_token: /cpsess1394563474 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 03:34:50 Session modified : 2026-04-30 03:34:50 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:ZE4gULpd5bPfizEj User : root cp_security_token: /cpsess9855776876 token_denied : 1 Origin : address=107.174.35.41,app=whostmgrd,method=badpass Session created : 2026-04-30 09:49:08 Session modified : 2026-04-30 09:49:08 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:ZsHQKKedPGU3Qfns User : root cp_security_token: /cpsess5150945627 token_denied : 1 Origin : address=107.172.1.62,app=whostmgrd,method=badpass Session created : 2026-04-30 15:48:11 Session modified : 2026-04-30 15:48:11 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:_2YHtD39ejtv6zqN User : root cp_security_token: /cpsess8051533496 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 01:47:03 Session modified : 2026-04-30 01:47:03 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:a5KvDCpSJpni4Ufh User : root cp_security_token: /cpsess6608087386 token_denied : 1 Origin : address=5.252.179.116,app=whostmgrd,method=badpass Session created : 2026-04-30 16:20:40 Session modified : 2026-04-30 16:20:40 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:a5RC9PuMRHVlTiWm User : root cp_security_token: /cpsess6147171370 token_denied : 1 Origin : address=45.205.1.2,app=whostmgrd,method=badpass Session created : 2026-04-30 22:53:52 Session modified : 2026-04-30 22:53:52 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:aK7Q4KW2PIJgF2vK User : root cp_security_token: /cpsess3941176460 token_denied : 1 Origin : address=221.218.142.17,app=whostmgrd,method=badpass Session created : 2026-04-30 13:42:59 Session modified : 2026-04-30 13:42:59 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:b0j0sAp4st_owUiP User : root cp_security_token: /cpsess9928135001 token_denied : 1 Origin : address=45.205.1.2,app=whostmgrd,method=badpass Session created : 2026-04-30 22:43:53 Session modified : 2026-04-30 22:43:53 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:bBQwyyh_XdJGAxlN User : root cp_security_token: /cpsess0900105876 token_denied : 1 Origin : address=202.61.130.107,app=whostmgrd,method=badpass Session created : 2026-04-30 13:48:49 Session modified : 2026-04-30 13:48:49 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:bMb8EEk9X8r4s8hJ User : root cp_security_token: /cpsess8166773886 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 02:35:49 Session modified : 2026-04-30 02:35:49 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:bdvoLhDoqqLjLiSx User : root cp_security_token: /cpsess3359221829 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 04:50:56 Session modified : 2026-04-30 04:50:56 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:c4ngBiUBk6nYAa9k User : root cp_security_token: /cpsess1738372025 token_denied : 1 Origin : address=108.61.200.241,app=whostmgrd,method=badpass Session created : 2026-04-30 07:45:49 Session modified : 2026-04-30 07:45:49 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:cIyN07SV5S711k4n User : root cp_security_token: /cpsess8085633157 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 02:37:34 Session modified : 2026-04-30 02:37:34 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:cTlCW0rGYfufq8q1 User : root cp_security_token: /cpsess0429384850 token_denied : 1 Origin : address=103.213.248.200,app=whostmgrd,method=badpass Session created : 2026-04-30 19:47:58 Session modified : 2026-04-30 19:47:58 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:dELvLRfOWbCONXfu User : root cp_security_token: /cpsess1531327545 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 07:07:33 Session modified : 2026-04-30 07:07:33 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:dOT93ZBXGcTyKHQ5 User : root cp_security_token: /cpsess7079689432 token_denied : 1 Origin : address=42.96.61.68,app=whostmgrd,method=badpass Session created : 2026-04-30 16:40:12 Session modified : 2026-04-30 16:40:12 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:dPgcbGYCNAPrLqwQ User : root cp_security_token: /cpsess2334604801 token_denied : 1 Origin : address=104.253.175.240,app=whostmgrd,method=badpass Session created : 2026-04-30 15:42:19 Session modified : 2026-04-30 15:42:19 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:daEDalSwQCcCtB1O User : root cp_security_token: /cpsess2613525067 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 07:00:56 Session modified : 2026-04-30 07:00:56 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:drruVNB5EH6pVLmZ User : root cp_security_token: /cpsess5878606258 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 03:03:24 Session modified : 2026-04-30 03:03:24 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:eNUQQbQuUpktDjVh User : root cp_security_token: /cpsess5555146960 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 04:48:15 Session modified : 2026-04-30 04:48:15 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:hI_F_vFKkW_cJeHx User : root cp_security_token: /cpsess1581785382 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 08:29:32 Session modified : 2026-04-30 08:29:32 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:iPujFQvSYRUdURH9 User : root cp_security_token: /cpsess1856017671 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 08:29:20 Session modified : 2026-04-30 08:29:20 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:ic2vvAEvrIfSOoaK User : root cp_security_token: /cpsess2615840696 token_denied : 1 Origin : address=165.154.255.14,app=whostmgrd,method=badpass Session created : 2026-04-30 22:48:50 Session modified : 2026-04-30 22:48:50 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:iy0GJ4rjOBCNkj4o User : root cp_security_token: /cpsess8179402455 token_denied : 1 Origin : address=77.90.185.92,app=whostmgrd,method=badpass Session created : 2026-04-30 21:02:14 Session modified : 2026-04-30 21:02:14 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:j7nr5gtWeOqOqQOK User : root cp_security_token: /cpsess1184690300 token_denied : 1 Origin : address=209.99.191.199,app=whostmgrd,method=badpass Session created : 2026-04-30 11:52:10 Session modified : 2026-04-30 11:52:10 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:jK8Kh3g3i1d8_Mme User : root cp_security_token: /cpsess2107564092 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 01:44:48 Session modified : 2026-04-30 01:44:48 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:kAxPOICY5OScHh9M User : root cp_security_token: /cpsess6514393353 token_denied : 1 Origin : address=24.199.88.13,app=whostmgrd,method=badpass Session created : 2026-04-30 03:50:30 Session modified : 2026-04-30 03:50:30 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:kFlp3IFfXa4M4b7N User : root cp_security_token: /cpsess0504795554 token_denied : 1 Origin : address=139.99.53.158,app=whostmgrd,method=badpass Session created : 2026-04-30 09:13:17 Session modified : 2026-04-30 09:13:17 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:kgjChAqZRgtieBMW User : root cp_security_token: /cpsess4701982464 token_denied : 1 Origin : address=5.230.93.152,app=whostmgrd,method=badpass Session created : 2026-04-30 22:25:44 Session modified : 2026-04-30 22:25:44 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:khPEG4oK1tnjlcGL User : root cp_security_token: /cpsess2355015972 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 03:35:50 Session modified : 2026-04-30 03:35:50 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:kqpEWkn9sXtppOY6 User : root cp_security_token: /cpsess0822616727 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 08:49:56 Session modified : 2026-04-30 08:49:56 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:lD2OInu57CPB6PeW User : root cp_security_token: /cpsess8481764053 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 01:47:02 Session modified : 2026-04-30 01:47:02 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:lesn5mhan8CvHZb0 User : root cp_security_token: /cpsess0445586617 token_denied : 1 Origin : address=8.219.84.171,app=whostmgrd,method=badpass Session created : 2026-04-30 19:09:43 Session modified : 2026-04-30 19:09:43 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:moIpCnvnRRwnOYRh User : root cp_security_token: /cpsess6226545527 token_denied : 1 Origin : address=5.252.179.116,app=whostmgrd,method=badpass Session created : 2026-04-30 16:14:24 Session modified : 2026-04-30 16:14:24 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:nkXfRJa2rT1pqOuq User : root cp_security_token: /cpsess1719157844 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 01:44:49 Session modified : 2026-04-30 01:44:49 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:nmBOMF1mAMIPzmaf User : root cp_security_token: /cpsess8936517745 token_denied : 1 Origin : address=45.205.1.2,app=whostmgrd,method=badpass Session created : 2026-04-30 22:46:49 Session modified : 2026-04-30 22:46:49 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:nqxpOk_MbBq0ZoxR User : root cp_security_token: /cpsess0961485776 token_denied : 1 Origin : address=5.252.179.116,app=whostmgrd,method=badpass Session created : 2026-04-30 16:20:44 Session modified : 2026-04-30 16:20:44 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:oS1UIvHFumhGYJX5 User : root cp_security_token: /cpsess9947728316 token_denied : 1 Origin : address=5.83.150.16,app=whostmgrd,method=badpass Session created : 2026-04-30 13:41:35 Session modified : 2026-04-30 13:41:35 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:oz61B9IhO98APhVs User : root cp_security_token: /cpsess9447876901 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 04:48:27 Session modified : 2026-04-30 04:48:27 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:rWeZGOqfOymOQpQs User : root cp_security_token: /cpsess2317150529 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 05:04:00 Session modified : 2026-04-30 05:04:00 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:sBzXC0NLe1IM_QHy User : root cp_security_token: /cpsess0245250507 token_denied : 1 Origin : address=165.154.255.14,app=whostmgrd,method=badpass Session created : 2026-04-30 22:53:47 Session modified : 2026-04-30 22:53:47 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:sCAFoiviN_YXjToj User : root cp_security_token: /cpsess4170508907 token_denied : 1 Origin : address=65.20.67.134,app=whostmgrd,method=badpass Session created : 2026-04-30 22:58:47 Session modified : 2026-04-30 22:58:47 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:sMK2DzXeJc_02MSX User : root cp_security_token: /cpsess0889078056 token_denied : 1 Origin : address=42.96.61.68,app=whostmgrd,method=badpass Session created : 2026-04-30 10:19:42 Session modified : 2026-04-30 10:19:42 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:siciy3l2pHqz2dfT User : root cp_security_token: /cpsess2486893523 token_denied : 1 Origin : address=159.65.18.197,app=whostmgrd,method=badpass Session created : 2026-04-30 08:55:10 Session modified : 2026-04-30 08:55:10 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:sxCgR2k6_9ZIfBWZ User : root cp_security_token: /cpsess9806760955 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 07:07:40 Session modified : 2026-04-30 07:07:40 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:tKPCwqhcKAGq8O38 User : root cp_security_token: /cpsess5481503654 token_denied : 1 Origin : address=51.89.19.199,app=whostmgrd,method=badpass Session created : 2026-04-30 08:04:49 Session modified : 2026-04-30 08:04:49 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:tRjwYAQw1y_Qj6VA User : root cp_security_token: /cpsess4145482924 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 07:06:39 Session modified : 2026-04-30 07:06:39 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:tce1MMtSFKpJsszt User : root cp_security_token: /cpsess2910046656 token_denied : 1 Origin : address=136.244.66.225,app=whostmgrd,method=badpass Session created : 2026-04-30 11:14:04 Session modified : 2026-04-30 11:14:04 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:tifB1PXhBVycNnrS User : root cp_security_token: /cpsess2442902457 token_denied : 1 Origin : address=172.94.9.39,app=whostmgrd,method=badpass Session created : 2026-04-30 16:29:58 Session modified : 2026-04-30 16:29:58 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:tlWA0teZSsL1HS96 User : root cp_security_token: /cpsess8263147809 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 04:50:45 Session modified : 2026-04-30 04:50:45 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:v3Qa7nOyrXg7D4Lh User : root cp_security_token: /cpsess8768218858 token_denied : 1 Origin : address=104.253.175.226,app=whostmgrd,method=badpass Session created : 2026-04-30 10:08:10 Session modified : 2026-04-30 10:08:10 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:vUWS02wU6X9VZPjw User : root cp_security_token: /cpsess6247141779 token_denied : 1 Origin : address=172.94.9.168,app=whostmgrd,method=badpass Session created : 2026-04-30 12:02:31 Session modified : 2026-04-30 12:02:31 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:vksFqVolu7xRTaMA User : root cp_security_token: /cpsess8011175429 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 03:03:25 Session modified : 2026-04-30 03:03:25 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:wFTOLWidv2K6OoQ1 User : root cp_security_token: /cpsess1639532162 token_denied : 1 Origin : address=107.172.1.62,app=whostmgrd,method=badpass Session created : 2026-04-30 14:26:31 Session modified : 2026-04-30 14:26:31 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:wOBhMmU_zC_iT5Ij User : root cp_security_token: /cpsess7081098904 token_denied : 1 Origin : address=162.141.130.74,app=whostmgrd,method=badpass Session created : 2026-04-30 07:51:31 Session modified : 2026-04-30 07:51:31 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:wWO8MVe0AGJNRSaJ User : root cp_security_token: /cpsess7559811622 token_denied : 2 Origin : address=45.142.193.140,app=whostmgrd,method=badpass Session created : 2026-04-30 15:34:57 Session modified : 2026-04-30 15:34:57 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:wWWACAN_MgWoaH7m User : root cp_security_token: /cpsess0435594729 token_denied : 1 Origin : address=142.93.43.26,app=whostmgrd,method=badpass Session created : 2026-04-30 22:38:33 Session modified : 2026-04-30 22:38:33 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:yen5jxLxFN4wC72Y User : root cp_security_token: /cpsess2104237819 token_denied : 1 Origin : address=80.75.212.14,app=whostmgrd,method=badpass Session created : 2026-04-30 02:49:12 Session modified : 2026-04-30 02:49:12 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [!] CRITICAL: /var/cpanel/sessions/raw/:zwxpx4Z05SuNJCZv User : root cp_security_token: /cpsess1187289931 token_denied : 1 Origin : address=139.84.202.245,app=whostmgrd,method=badpass Session created : 2026-04-30 17:21:26 Session modified : 2026-04-30 17:21:26 cPanel updated : 2026-04-28 18:44:08 Timing : AFTER patch -- server may have already been fixed [*] Clearing all active sessions... [+] All sessions cleared. All users have been logged out. [+] cpsrvd restarted cleanly. ============================================= SUMMARY ============================================= cPanel version : 11.110.0.97 Patch status : PATCHED Last updated : 2026-04-28 18:44:08 IOCs found : 1 Backup saved : /var/cpanel/sessions_backup_20260501_005044 Log saved : /var/log/session-audit_20260501_005044.log [!] ACTION REQUIRED: 1. Force password reset for root and all WHM users 2. Review /usr/local/cpanel/logs/cpanel_audit.log for unauthorized actions 3. Check for persistence (cron, SSH keys, new accounts)