cd /bkmnt/home/tdmfgi5/mail
ls
pwd
ls -alh /bkmnt/home/tdmfgi5/mail/nporcellini@tdmfginc.com
ls -alh /bkmnt/home/tdmfgi5/mail/
ls -alh /bkmnt/home/tdmfgi5/mail/tdmfginc.com
ls -alh /bkmnt/home/tdmfgi5/mail/tdmfginc.com/nporcellini
ls -alh /bkmnt/home/tdmfgi5/mail/tdmfginc.com/nporcellini/sent
ls -alh /bkmnt/home/tdmfgi5/mail/tdmfginc.com/nporcellini/.Sent
ls -alh /bkmnt/home/tdmfgi5/mail/tdmfginc.com/nporcellini/.Sent/cur
ls -alh /home/tdmfgi5/mail/tdmfginc.com/nporcellini/ 
ls -alh /home/tdmfgi5/mail/tdmfginc.com/nporcellini/.Sent/
ls -alh /home/tdmfgi5/mail/tdmfginc.com/nporcellini/.Sent/cur/
mv /home/tdmfgi5/mail/tdmfginc.com/nporcellini/ /home/tdmfgi5/mail/tdmfginc.com/nporcellini.old
cp -rfp /bkmnt/home/tdmfgi5/mail/tdmfginc.com/nporcellini/ /home/tdmfgi5/mail/tdmfginc.com/nporcellini/
ls -alh /home/tdmfgi5/mail/tdmfginc.com/nporcellini/.Sent/cur/
cat /opt/backup/logs/users/tdmfgi5
unalias cp
ls -lah /bkmnt/home/tdmfgi5/mail
ls -lah /bkmnt/home/tdmfgi5/mail/tdmfginc.com/nporcellini@tdmfginc.com
ls -lah /bkmnt/home/tdmfgi5/mail/tdmfginc.com
ls -lah /bkmnt/home/tdmfgi5/mail/tdmfginc.com/nporcellini
ls -lah /bkmnt/home/tdmfgi5/mail/tdmfginc.com/nporcellini/cur
cp -rfpv /bkmnt/home/tdmfgi5/mail/tdmfginc.com/nporcellini /home/tdmfgi5/mail/tdmfginc.com
exit
for i in $(cat /home/tdmfgi5/etc/*/passwd|sed 's/ //g');do u=`echo -n "$i"|cut -d: -f1`;d=`echo -n "$i"|cut -d/ -f5`;echo $u@$d;done
exit
cd mail/
dir2restore=`pwd`;cd ~;mv $dir2restore $dir2restore.old;cp -Rfpv /bkmnt$dir2restore $dir2restore;cd $dir2restore;cd $dir2restore;cd ..;ls -lah
ls -lah
cd mail
ls -lah
pwd
cd tdmfginc.com/cmeehan
ls -lah
cd .Trash
ls -lah
cd cur
ls -lah
ls -hal
cd ..
ls
ls -hal
cd ..
ls -hal
cd ..
ls -hal
mv cmeehan
mv cmeehan cmeehan.safe
pwd
cp -Rpf /bkmnt/home/tdmfgi5/mail/tdmfginc.com/cmeehan/ .
ll /bkmnt/home/tdmfgi5/mail/tdmfginc.com/zcooper/cur
cp -rfpv /bkmnt/home/tdmfgi5/mail/tdmfginc.com/zcooper/cur /home/tdmfgi5/mail/tdmfginc.com/zcooper
cd mail
ll
cd tdmfginc.com
ll
cd zcooper/
ll
cd cur
ll
exit
ls -lah
cd mail
ls -lahj
ls -lah
cd mail
ls -lah
cd .stinari\@tdmfginc_com/
ls -lah
cat .Sent
ls -lah .Sent
ls -lah .Sent\ Messages/
cd ..
ls -lah
cd tdmfginc.com/
ls -lah
pwd
cp -Rfp /bkmnt/home/tdmfgi5/mail/tdmfginc.com/stinari/ stinari.bak
ls -lah
ls -lah stinari
ls -lah stinari.bak/
ls -lah
cd stinari
ls -lah
ls -lah Sent
ls -lah .Sent
ls -lah .Sent/cur
ls -lah .Sent\ Messages/cur
ls -lah
cd ..
ls -lah
cp -Rfp stinari stinari.backup
ls -lah
cd stinari.ba
cd stinari.bak
ls -lah
cd ..
cp -Rfp stinari.bak/.Sent stinari/
ls -lah
mv stinari{,.old}
mv stinari.bak stinari
ls -lah
cd mail
ls -lah
cd t
cd tdmfginc.com/
ls -lah
mv stinari{,.bakup}
ls -lah
mv stinari.old/ stinari
ls -lah
cd public_html/
ls -lah
cd ..
cd mail
ls -lah
cd tdmfginc.com/
ls -lah
ls
cd public_html/
ls
cd pur-tungsten.com/
ls
ls -lah
shellscan.py -s deep
host faustinaacademy.com
host 192.249.123.43
host 7.74.94.16
host 97.74.94.16
host ashortinc.com
host 23.235.221.236
host youmustlovedogs.com
host 209.15.13.134
host youmustlovedogsdating.com
host 92.119.122.226
host elhsolutions.com
exit
cd mail/tdmfginc.com/
ls
shellscan.py -s tdmfgi5
shellscan.py -s
shellscan.py -s tdmfgi5
shellscan.py -s deep
cd public_html/
ls
ll
pwd
vim wp-settings.php 
cd ..
ls
cd public_html/
cd pur-tungsten.com/
ls
cd public_html/pur-tungsten.com/
ls
df -h
cd /bkmnt/home/tdmfgi5/public_html/pur-tungsten.com/
ls
vim index.html 
cd public_html/
ls
cd pur-tungsten.com/
ls
#1446151735
cd public_html/
#1446151736
ll
#1446151823
cat .htaccess
#1446151923
grep suPHP .htaccess
#1446151945
grep home .htaccess
#1446152232
logout
#1446209312
yes | mv public_html/php.ini public_html/php.ini.bak && cp /usr/local/lib/php.ini public_html/php.ini
#1446209323
cp /usr/local/lib/php.ini php.ini
#1446209329
cd public_html/
#1446209329
ls
#1446209333
cd pur
#1446209337
nano .htaccess 
#1446209709
cd ..
#1446209710
l
#1446209711
sls
#1446209712
ls
#1446209813
cp /usr/local/lib/php.ini php.ini
#1446209815
ls
#1446211083
exit
#1446219288
sudo tail -10000 /usr/local/apache/logs/error_log | grep  216.54.31.82 
#1446219292
exit
#1446219319
yes | mv public_html/php.ini public_html/php.ini.bak && cp /usr/local/lib/php.ini public_html/php.ini
#1446219383
cd public_html/h
#1446219385
cd public_html/
#1446219390
nano .htaccess 
#1446219450
exit
#1446220074
cd public_html/
#1446220077
nano php.ini
#1446220088
nano .htaccess 
#1446220300
nano php.ini
#1446220354
cat error_log
#1446220358
nano error_log
#1446220368
touch error_log
#1446220385
cat error_log
#1446220436
nano php.ini
#1446224249
exit
#1448315261
cd public_html/
#1448315262
ls
#1448315263
cd
#1448315264
cd mail
#1448315265
ls
#1448315267
du -a -h --max-depth=1 | sort -hr
#1448315284
du -a -h --max-depth=1 | sort -r
#1448315289
cd .stinari\@tdmfginc_com/
#1448315289
ls
#1448315299
ls -lah --sort=time
#1453995093
ls
#1453995095
cd public_html/
#1453995095
ls
#1453995116
cat wp-config.php
#1453995502
ls
#1453995505
nano .htaccess
#1453995734
exit
#1473355077
cd mail/tdmfginc.com/mgalie/
#1473355079
cd cur/
#1473355082
ls|wc -l
#1473355085
ls
#1473355092
cd ..
#1473355092
ls
#1473355102
cd .Archive/
#1473355102
ls
#1473355105
cd cur/
#1473355109
ls|wc -l
#1473355117
cd ..
#1473355120
cd new/
#1473355124
ls|wc -l
#1473355125
cd ..
#1473355126
ls
#1473355127
cd ..
#1473355127
ls
#1473355134
cd .Trash/
#1473355134
ls
#1473355137
cd cur/
#1473355141
ls|wc -l
#1473355144
cd ..
#1473355144
ls
#1473355147
cd new
#1473355150
ls|wc -l
#1473355152
cd ..
#1473355152
ls
#1473355154
cd ..
#1473355154
ls
#1473355164
cd .spam/
#1473355164
ls
#1473355166
cd cur/
#1473355169
ls|wc -l
#1473355171
cd ..
#1473355172
ls
#1473355175
cd new/
#1473355176
ls
#1473355177
cd ..
#1473355180
cd tmp/
#1473355180
ls
#1480971388
ls -lah
#1480971398
cd The following article addresses a couple of ways in which you can login to cPanel:
#1480971398
http://www.inmotionhosting.com/support/edu/cpanel/getting-started-cpanel/how-to-log-into-cpanel
#1480971410
cd .cpanel/
#1480971411
ls
#1480971419
cd ..
#1480971427
mv .cpanel/ old.cpanel/
#1480971430
ls
#1480971433
ls -lah
#1536773031
exit
#1550519410
cd public_html
#1550519411
wp plugin list
#1550519414
wp core version
#1550519479
mail -v testremotehost@gmail.com
#1550519598
dig tdmfg.com
#1550519610
dig tdmfginc.com
#1550519616
host 144.208.76.158
#1550519717
dig precisiontoolinc.com
#1550519726
host 206.188.193.95
#1550519755
ping ecld208
#1550519758
exit
#1550521015
host ecld208
#1555423700
exit
#1555424005
ls public_html/pur-tungsten.com
#1555424036
cd public_html/ ; ls
#1555424274
ls
#1555424284
cd pur-tungsten.com ; wp plugin list
#1555424306
ls
#1555424347
wp plugin deactivate wordpress-seo
#1555424460
cd public_html/pur
#1555424463
cd ..
#1555424468
cd pur-tungsten.com
#1555424468
ls
#1555424499
nano index.php 
#1555424503
ls
#1555424502
nano .htaccess
#1555424508
nano .htaccess
#1555424515
cd wp-content
#1555424521
mv plugins/ plugins_OLD
#1555424541
mv plugins_OLD/ plugins
#1555424768
exit
#1555425263
exit
#1555433247
cd public_html/
#1555433247
ls
#1555433271
cd public_html/pur-tungsten.com
#1555433272
ls
#1555433276
nano wp-config.php
#1555433281
nano index.php
#1555433284
nano wp-config.php
#1555433317
wp plugin list
#1555433360
rsync -azvP wp-content/plugins/robin-image-optimizer wp-content/plugins/robin-image-optimizer-bak
#1555433368
wp plugin reinstall robin-image-optimizer
#1555433376
wp plugin install robin-image-optimizer --force
#1555433415
cd ..
#1555433417
cd
#1555433421
nano .htaccess
#1555433441
cd public_html/pur-tungsten.com
#1555433443
nano .htaccess
#1555433762
nano wp-config.php
#1555433770
ls
#1555440972
cd /home/tdmfgi5/public_html/pur-tungsten.com
#1555440988
echo "<?php phpinfo(); ?>" >> phpinfo.php
#1559317699
ll -tr
#1559317704
cd .cpanel
#1559317705
ls
#1559317710
vim filter.yaml 
#1559317716
cat filteri am sorry to learn that you wish to cancel your account. Are you closing the site down, or are you having any specific problems with your account that made you decide to cancel?
#1559317724
cat filter.cache 
#1559317742
cd ../.spamassassin
#1559317743
ls
#1559317747
cat user_prefs 
#1559317896
exut
#1559317897
exit
#1560291144
cd etc
#1560291144
ls
#1560291150
cd tdmfginc.com/
#1560291150
ls
#1560291160
cd weihongfu
#1560291160
ls
#1560291165
cat filter
#1560291173
cat filter.yaml
#1560291520
ls
#1560291526
rm ./*
#1582729941
docroot.py pur-tungsten.com
#1582729951
cd /home/tdmfgi5/public_html/pur-tungsten.com
#1582729958
ls
#1582729999
dig pur-tungsten.com
#1582730006
wp user create imhtest imhtest@inmotionhosting.com --user_pass=yxIlfD5TPJX3192HYEuj --role=administrator
#1582730266
 /usr/local/apache/access_log  | grep pur-tungsten.com
#1588875264
cd public_html/pur-tungsten.com/
#1588875265
ll
#1588875287
wp plugin deactivate robin-image-optimizer
#1588875300
wp plugin list
#1588875451
wp core verify-checksums --skip-{plugins,themes}
#1588875569
wp core download --version=$(wp core version) --force
#1588875645
wp core verify-checksums --skip-{plugins,themes}
#1588875663
cat wp-includes/.htaccess
#1588875823
man unzip
#1588875862
cd ../
#1588875872
mkdir restore
#1588875925
ls -lah public_html/pur-tungsten.com/wordpress/
#1588875958
unzip public_html/pur-tungsten.com/wordpress-4.9.1.zip -d /home/tdmfgi5/restore/
#1588875982
ll public_html/pur-tungsten.com
#1588876006
ls -lah restore/
#1588876071
mv /home/tdmfgi5/public_html/pur-tungsten.com/wp-includes/Requests/Transport.php /home/tdmfgi5/public_html/pur-tungsten.com/wp-includes/Requests/Transport.php.bk
#1588876108
mv restore/wordpress/wp-includes/Requests/Transport.php -t /home/tdmfgi5/public_html/pur-tungsten.com/wp-includes/Requests/Transport.php
#1588876118
mv restore/wordpress/wp-includes/Requests/Transport.php -t /home/tdmfgi5/public_html/pur-tungsten.com/wp-includes/Requests/
#1588876131
ls -lah /home/tdmfgi5/public_html/pur-tungsten.com/wp-includes/Requests/
#1588957729
cd tdmfginc.com/
#1588957731
wp user list
#1588957737
wp core version
#1588957739
ls -lah
#1588957746
 cd tdmfginc/
#1588957747
ls -lah
#1588957757
cd ..
#1588957759
 cd ..
#1588957760
 ls -lah
#1588957771
 cd public_html/tdmfginc.com/
#1588957772
wp user list
#1588957776
wp plugin list
#1588957784
exit
#1588957926
 cd public_html/tdmfginc.com/
#1588957929
wp core version
#1588981189
ls
#1588981210
cd public_html/
#1588981224
ls
#1588981230
cd tdmfginc.com/
#1588981232
ls
#1588981238
wp core verify-checksums
#1588981325
vim wp-config.php
#1588981383
cd ..
#1588981384
ls
#1588981388
cd pur-tungsten.com/
#1588981388
ls
#1588981395
wp core verify-checkusms
#1588981401
wp core verify-checksums
#1588981478
vim wp-config.php 
#1588981501
ls
#1588981541
la
#1588981544
ls -la
#1588981567
vim wp-config.php
#1588981659
ls
#1588981669
cd ..
#1588981670
ls
#1588981675
cd ..
#1588981676
ls
#1588981895
wp core is-installed --network; if [ $(echo $?) = 0 ]; then echo -e "\t\t\t\e[5;31mWORDPRESS MULTISITE e[0m"; else echo -e "\n\t\t\t\e[38;5;39mSTANDARD WordPress\e[0m"; fi; echo -e  "VRSN : $(wp core version)\t\e[93mLatest Available:\e[0m $(wp core check-update --skip-{plugins,themes} --field=version)"; echo -e "SITE : $(wp option get siteurl --skip-{plugins,themes})"; echo -e "HOME : $(wp option get home --skip-{plugins,themes})"; echo -e "BASE : $(wp config get DB_NAME --skip-{plugins,themes})"; echo -e "USER : $(wp config get DB_USER --skip-{plugins,themes})"; echo -e "PSWD : $(wp config get DB_PASSWORD --skip-{plugins,themes})"; wp theme list --skip-{plugins,themes} | awk '!/inactive/ && /active/ {print "THEM : " $1 "nUDAT : " $3}'; echo "PLUG : $(wp plugin list --skip-{plugins,themes} | grep active | wc -l)"; echo; echo -e "\e[38;5;39mCheckinig for Add Handlers...\e[0m"; grep -r AddHandler --include ".htaccess" $(pwd) | awk '!/backup-/ && !/.trash/'; if [ $? = 0 ] ; then echo -e "No PHP Add Handlers Found\n"; echo -e "\e[38;5;39mWordPress Themes:\e[0m"; wp theme list --skip-{plugins,themes}; echo -e "\n\e[38;5;39mVerifing WordPress Installation...\e[0m"; wp core verify-checksums --skip-{plugins,themes}; echo; echo -e "\e[38;5;39mVerifing WordPress Plugins...\e[0m"; wp plugin verify-checksums --skip-{plugins,themes} --all; fi
#1588981918
ls
#1588981921
cd public_html/
#1588981921
ls
#1588981925
cd tdmfginc.com/
#1588981935
wp core is-installed --network; if [ $(echo $?) = 0 ]; then echo -e "\t\t\t\e[5;31mWORDPRESS MULTISITE e[0m"; else echo -e "\n\t\t\t\e[38;5;39mSTANDARD WordPress\e[0m"; fi; echo -e  "VRSN : $(wp core version)\t\e[93mLatest Available:\e[0m $(wp core check-update --skip-{plugins,themes} --field=version)"; echo -e "SITE : $(wp option get siteurl --skip-{plugins,themes})"; echo -e "HOME : $(wp option get home --skip-{plugins,themes})"; echo -e "BASE : $(wp config get DB_NAME --skip-{plugins,themes})"; echo -e "USER : $(wp config get DB_USER --skip-{plugins,themes})"; echo -e "PSWD : $(wp config get DB_PASSWORD --skip-{plugins,themes})"; wp theme list --skip-{plugins,themes} | awk '!/inactive/ && /active/ {print "THEM : " $1 "nUDAT : " $3}'; echo "PLUG : $(wp plugin list --skip-{plugins,themes} | grep active | wc -l)"; echo; echo -e "\e[38;5;39mCheckinig for Add Handlers...\e[0m"; grep -r AddHandler --include ".htaccess" $(pwd) | awk '!/backup-/ && !/.trash/'; if [ $? = 0 ] ; then echo -e "No PHP Add Handlers Found\n"; echo -e "\e[38;5;39mWordPress Themes:\e[0m"; wp theme list --skip-{plugins,themes}; echo -e "\n\e[38;5;39mVerifing WordPress Installation...\e[0m"; wp core verify-checksums --skip-{plugins,themes}; echo; echo -e "\e[38;5;39mVerifing WordPress Plugins...\e[0m"; wp plugin verify-checksums --skip-{plugins,themes} --all; fi
#1588981991
cat wp-admin/error_log 
#1588982025
wp db check
#1588982044
wp core is-installed --network; if [ $(echo $?) = 0 ]; then echo -e "\e[5;31mWORDPRESS MULTISITE \e[0m"; else echo -e "\n\t\t\t\e[38;5;39mSTANDARD WordPress\e[0m"; fi; echo -e  "VRSN : $(wp core version)\t\e[93mLatest Available:\e[0m $(wp core check-update --skip-{plugins,themes} --field=version)"; echo -e "SITE : $(wp option get siteurl --skip-{plugins,themes})"; echo -e "HOME : $(wp option get home --skip-{plugins,themes})"; echo -e "BASE : $(wp config get DB_NAME --skip-{plugins,themes})"; echo -e "USER : $(wp config get DB_USER --skip-{plugins,themes})"; echo -e "PSWD : $(wp config get DB_PASSWORD --skip-{plugins,themes})"; wp theme list --skip-{plugins,themes} | awk '!/inactive/ && /active/ {print "THEM : " $1 "nUDAT : " $3}'; echo "PLUG : $(wp plugin list --skip-{plugins,themes} | grep active | wc -l)"; echo; echo -e "\n\e[38;5;39mVerifing WordPress Installation...\e[0m"; wp core verify-checksums --skip-{plugins,themes}; echo;
#1588982179
vim wp-config.php 
#1588982432
cd ../pur-tungsten.com/
#1588982433
ls
#1588982450
vim wp-config.php
#1588982480
cat wp-content/debug.log 
#1588982544
tail -100 wp-content/debug.log 
#1589917104
public_html/tdmfginc.com/
#1589917111
cd public_html/tdmfginc.com/
#1589917115
wp core version
#1589917121
wp plugin list
#1589917272
wp plugin deactivate js_composer revslider
#1589917572
wp plugin list
#1589917590
wp theme list
#1589917616
wp plugin deactivate wp-simple-301-redirects
#1589917631
wp plugin deactivate simple-301-redirects
#1589917635
wp theme list
#1589917639
wp plugin list
#1589918198
exit
#1589918472
cd public_html/tdmfginc.com/
#1589918476
wp plugin list
#1589918760
wp plugin deactivate --all
#1589920020
wp plugin list
#1589920489
exit
#1638113990
baksync files tdmfgi5 --snap e17021fd mail
#1638113996
sudo baksync files tdmfgi5 --snap e17021fd mail
#1638114475
exit
#1638115961
cd mail
#1638115962
ls
#1638115997
copt .weihongbackup .weihongfu
#1638116003
cp .weihongbackup .weihongfu
#1638116015
cp .weihongbackup/* .weihongfu/*
#1638116030
clear
#1638116030
ls
#1638116047
cd .weihongbackup\@tdmfginc_com/ .weihongfu\@tdmfginc_com/
#1638116056
cd ..
#1638116061
cp .weihongbackup\@tdmfginc_com/ .weihongfu\@tdmfginc_com/
#1638116082
cp -r .weihongbackup/ .weihongfu/
#1638116809
exit
#1668096130
cd public_html/tdmfginc.com/
#1668096133
wp db export
#1668096192
wp option get home
#1668096216
wp option get home && wp option get siteurl
#1668096235
wp plugin list
#1668099930
df -h
#1668099935
dig tdmfginc.com
#1668099937
dig tdmfginc.com ns
#1668099940
dig tdmfginc.com mx
#1668100001
cd public_html/
#1668100003
wp plugin list
#1668100013
cd tdmfginc.com/
#1668100015
wp plugin list
#1668100061
wp cache flush
#1668100144
exit
#1704291246
docroot.py pur-tungsten.com
#1704291253
cd public_html/pur-tungsten.com/
#1704291254
ls
#1704291256
wp core version
#1704291259
wp core verify-checksums 
#1704291272
wp plugin list
#1704291331
wp cache flush
#1704291593
wp core version
#1704291595
wp core verify-checksums 
#1704291599
wp plugin list
#1704291603
wp theme list
#1704293834
exit
#1710867410
ls
#1710867414
cd public_html
#1710867414
ls
#1710867419
cd ..
#1710867428
grep -rl "formatting.php"
#1710867441
cd tdradiationshielding.com/wp-includes/formatting.php
#1710867448
nano tdradiationshielding.com/wp-includes/formatting.php
#1710867504
cd tdradiationshielding.com
#1710867507
wp db export
#1710867514
mv tdmfgi5_wp_mkuhk-2024-03-19-9a41e8a.sql ~
#1710867521
wp core verify-checksums
#1736346105
cd /home/tdmfgi5/public_html/pur-tungsten.com/wp-content/updraft
#1736346107
ls