{ "secrets": [ { "kind": "wp_db_credential", "host": "afd.de", "path": "afd.de/htdocs/wp-config.php", "db_name": "afd_de", "db_user": "sql_afd_de", "db_password": "WzLd4Gu6zGo5XWkwJw8TzzlqXjKGMO", "db_host": "10.12.51.254:3306", "table_prefix": "m7p4b7f_", "salts": { "AUTH_KEY": ";N5)W_8~5Z)787#]C+#:9Yikl8TDsa5;0*(@x!es4]([i52~L2[H(5N[_&u2T10*", "SECURE_AUTH_KEY": "5TCs(G0sXU-454!@#w)P36c1v3|F4X66~541ocgds9KD+-E8-TUR0db(G47mvY17", "LOGGED_IN_KEY": "qBKcN6)&R%Cu!84i0Ka0%+:-B~4!_Zua47@Si1Z-m*30Q%lx9]tc4Wu@a*N/57pu", "NONCE_KEY": "|z4(b*6:AaLHEryi&XrQw6Q4X3FE3vg@#s@13:F9C#%MN]WKl65oEu@0a_z;zcy7", "AUTH_SALT": "2+!g*273@N5Q[F6|+8!BAI@E6n(t3#~O13oNoX42L]7T;y];X8YkD0V91;UTO/zl", "SECURE_AUTH_SALT": "yILH]9(811Im04J0A01~;+Yx9:mu4(-/(#hTUOi]s|0ENo9OM0;x5lD2%3[Mic]e", "LOGGED_IN_SALT": "o5WiJ27y//nEL-JYuwkYz06RJq68S3]WT71S)swTx9n-P)k!~[hWaP9v;OjR:(ev", "NONCE_SALT": "49Ft8|9YAx)H@C1YR-6B2bFp;[Z~e0Yd9g7|R68236&w3iC@|4gOwYxWS&n7xyQu", "WP_CACHE_KEY_SALT": "d0130d9c58ded8d98b288eb1e62e84e7" }, "wp_home": null, "wp_siteurl": null, "duplicator_key": "4Q|$c0u*xpVE:rwwjK>^Q.#L3fylrdd /)r`ndj+OTRt]c#lz-:Xl,u`(Al.GI&P", "wp_cache_key_salt": "d0130d9c58ded8d98b288eb1e62e84e7" }, { "kind": "wp_db_credential", "host": "afd.de", "path": "afd.de/migration/wp-config.php", "db_name": "afd_de", "db_user": "sql_afd_de", "db_password": "YXVA7b1fP5KOHpS3hhO7MNX4C", "db_host": "10.12.51.254:3306", "table_prefix": "m7p4b7f_", "salts": { "AUTH_KEY": ";N5)W_8~5Z)787#]C+#:9Yikl8TDsa5;0*(@x!es4]([i52~L2[H(5N[_&u2T10*", "SECURE_AUTH_KEY": "5TCs(G0sXU-454!@#w)P36c1v3|F4X66~541ocgds9KD+-E8-TUR0db(G47mvY17", "LOGGED_IN_KEY": "qBKcN6)&R%Cu!84i0Ka0%+:-B~4!_Zua47@Si1Z-m*30Q%lx9]tc4Wu@a*N/57pu", "NONCE_KEY": "|z4(b*6:AaLHEryi&XrQw6Q4X3FE3vg@#s@13:F9C#%MN]WKl65oEu@0a_z;zcy7", "AUTH_SALT": "2+!g*273@N5Q[F6|+8!BAI@E6n(t3#~O13oNoX42L]7T;y];X8YkD0V91;UTO/zl", "SECURE_AUTH_SALT": "yILH]9(811Im04J0A01~;+Yx9:mu4(-/(#hTUOi]s|0ENo9OM0;x5lD2%3[Mic]e", "LOGGED_IN_SALT": "o5WiJ27y//nEL-JYuwkYz06RJq68S3]WT71S)swTx9n-P)k!~[hWaP9v;OjR:(ev", "NONCE_SALT": "49Ft8|9YAx)H@C1YR-6B2bFp;[Z~e0Yd9g7|R68236&w3iC@|4gOwYxWS&n7xyQu", "WP_CACHE_KEY_SALT": "d0130d9c58ded8d98b288eb1e62e84e7" }, "wp_home": null, "wp_siteurl": null, "duplicator_key": null, "wp_cache_key_salt": "d0130d9c58ded8d98b288eb1e62e84e7" }, { "kind": "wp_db_credential", "host": "afdkompakt.de", "path": "afdkompakt.de/backup_20230603/wp-config.php", "db_name": "afdkompakt_de", "db_user": "sql_afdkompakt_de", "db_password": "HIbV2mKJgHAKtNQEFfcvHcSDV", "db_host": "10.12.51.254", "table_prefix": "zokPq_", "salts": { "AUTH_KEY": "P_-1%|_Z1+9Q04*1pU8[+2r8vZ4jp4O3%RtckF[hI0*1|t0BYJrX*[4&9|rx*1pL", "SECURE_AUTH_KEY": "T15A20|Y#:9ZXt5O3/_~6w2:%c)3n@&Snq:lSq;z0)|)F2;z2~g]!s7N93E9QnPQ", "LOGGED_IN_KEY": "yy@#8W5I|%75xU+]925E9&+5+02cNWjW_*il3R0f39bS7*nmCS*l38R]5f&B79y/", "NONCE_KEY": ":AkvwM(H7wNY0&-!:+A0&2:df4TJG|86ruG|3fwZ7f|;EO)G]sqQ|3@~3raF7-n7", "AUTH_SALT": "tq5hI+Xdgt2mtB#%u@0+L)A94]l#lsFFd5t]+~w:|57cqW&S#7IP~4VPmR3bMQ17", "SECURE_AUTH_SALT": "XziH4GfT]Z78_BmL&6(6;!q95au_@|RD)8Z7ZT]#l25)#b77LIhzKK!24)cki1e@", "LOGGED_IN_SALT": "f9~#6Z++@JLl7M4Z9d:FU;cSJ279b+6P_03OrrJ9*!&10D~%W62vbD9_6hg*RM|#", "NONCE_SALT": "b8&y*S3WjcQ;4!H(4+J~nfsh!*O0)rOB5)t9kG8+VwJ/IQ&9F~lBnS%a+0CV;@J:", "WP_CACHE_KEY_SALT": "c493bb02d84b11f16ca94e8ea88adb4f" }, "wp_home": null, "wp_siteurl": null, "duplicator_key": null, "wp_cache_key_salt": "c493bb02d84b11f16ca94e8ea88adb4f" }, { "kind": "wp_db_credential", "host": "linksrutsch.com", "path": "linksrutsch.com/htdocs.bak/wp-config.php", "db_name": "linksrutsch_com", "db_user": "sql_linksrutsch_com", "db_password": "xzWDLnefk2oheylLVJ3pVbEUr", "db_host": "10.12.51.254", "table_prefix": "6kPHNw_", "salts": { "AUTH_KEY": "4cF%#NcGe-W&Y9Q#_W/*byv)Nw-nj:KJbMC-~9@b4A(_jpZO-d6MI9Ptt84QpR#8", "SECURE_AUTH_KEY": "cw/6shSTo0L)5fjo9X#Pt*wF98qW3~b1s5C-~@_25]|1di[nt4qPrn1pQqXRi8i0", "LOGGED_IN_KEY": "W27o|50Z9D[DV&tQ)~36r+)A65uWp#7~ROXrHzE+Hr6ptI4/M3[5Nl5JHMo2d+8d", "NONCE_KEY": "lBBGyvp%D|-37@00~*97m70RI|pzQV5/13H%;RU@qr0uxy]2*[2kDI!!@if5FrGV", "AUTH_SALT": "C9h/tJ8F!3u~i_#DHoE9qHi5|dR53*)q]T68;Yjis5e#9)L%P[zli7]ve2*2BO7B", "SECURE_AUTH_SALT": "x!b/o3%|#vr63@M|OK]!Ba2Hy8]szE0~iU2fR(#5m6RY83;fsjMcV@miVJ+2]IS1", "LOGGED_IN_SALT": "ZFrIfqF_1jL!S&M@RD2[D4(g(3#]K4!3h6X+J|9K3fv;H)W)J![hA93x0V+8h&et", "NONCE_SALT": "B:;xm|&~cHzrEL74;(@8&!4j-S:8;Ec7Zx~i)9/M:yAO]C@ngm4we&7329vi/Lhe" }, "wp_home": "https://linksrutsch.com", "wp_siteurl": "https://linksrutsch.com", "duplicator_key": null, "wp_cache_key_salt": null }, { "kind": "wp_db_credential", "host": "mitmachen.afd.de", "path": "mitmachen.afd.de/htdocs.bak/wp-config.php", "db_name": "mitmachen_afd_de", "db_user": "sql_mitmachen_afd_de", "db_password": "e7grsygTaZd9piUenIFxp8S1U", "db_host": "10.12.51.254", "table_prefix": "V2nqyVI_", "salts": { "AUTH_KEY": "4v;s8Z8-J-%7;|&U!Hg+xl+b%T;1%7+4AfHy-GNprX8*dtb)&DN)[4706TFWM13W", "SECURE_AUTH_KEY": "pZvke2*(i2%t890B&;w::Lb!IoQE0s-]R8]!C74326GV#L|O48wQ%!3WCpe11&8A", "LOGGED_IN_KEY": "#1g%~/Z!&Raa4721myv6f#XV|a1ybgzb~p6Kra)7h_9VuhhF&4849-_x3N4SCrt@", "NONCE_KEY": "E#t/W3J1z1166K23Qc~2GF9ENMLFo%Rc69QiQ%677NxS!m[A2||5IigX_-:8B@*k", "AUTH_SALT": "2/0*Q6T7skD:y5mf~R6#N#XSK|J+U57ok3M45w7H8B3LDe+20j1W;uflK#]-Ac9]", "SECURE_AUTH_SALT": "(MXcQ7pMk3#s5g~8[0|jf85kD-x(&xo00uqt/z0fk3q@j/4qlYr/YGAN9eI7bP1-", "LOGGED_IN_SALT": ":DpbsOh309xVBQQM;60RYD+Jc]4Ku8b3p@N[#7]Sg4T7Hi5@Lz&-2HuaNP!d@S7p", "NONCE_SALT": ")@!-s_v&+m!T(#;8+zf-r~6fbNh34uNPJ61B(Z2X0/#iRS5J82!OWW!eA*Pgm4Z1" }, "wp_home": null, "wp_siteurl": null, "duplicator_key": null, "wp_cache_key_salt": null }, { "kind": "wp_db_credential", "host": "spenden.afd.de", "path": "spenden.afd.de/wp-config.php", "db_name": "spenden_afd_de", "db_user": "sql_spenden_afd_de", "db_password": "5FOr9AvkyHT8aHLUIBk8te74U", "db_host": "10.12.51.254", "table_prefix": "axhcA8_", "salts": { "AUTH_KEY": "/xvLi007]%:42Q1|%544h+9aRy5+2tV+&z#7!PD9H%5VgS/ahd16b(9iuU&34GF:", "SECURE_AUTH_KEY": "7P7v53;B5xjd~D26_Sc6|8)Zf8g(z&yVRy5|9db4!@(|)L3XS8GpTkQ9mN8/xY3)", "LOGGED_IN_KEY": "@*E@]P2aC5pz+dX0(T9&eGpi69T6Q!83nbz:BPA1[DZk:6p5c7@__k|589U_-[Jx", "NONCE_KEY": "Jh-6kvB:84x1@&W%V*n0w1_6xl:y3/pJ*4C#b|o_L0Q6nYMn(*f3*639R6Se@XXv", "AUTH_SALT": "i!5gN1J_[*&P;iFRzS[V(h1v[9H550-_1[%zhlT0+pBYYeJ9B54RdLl(AMAYA@)4", "SECURE_AUTH_SALT": "4m4qF@jAw81A7@4Wu)1uK12[*VdC/tT_k7T2c0@4t6jA8F)5]k#QE&+A[[/ocqsU", "LOGGED_IN_SALT": "/O3U@bz1JkHLi&9a*7ien;1pg58Y6[J!:4+6zV%0lx;;A_0)tmm+)qGpN9Gi)90N", "NONCE_SALT": "PVA;86LtyEd8W26[K0#QXG3L:d*J3F991U]76yS|ML0G_wS*3F:n@cR8U0|j*|51" }, "wp_home": null, "wp_siteurl": null, "duplicator_key": null, "wp_cache_key_salt": null }, { "kind": "ssh_private_key", "host": "afd.de", "path": "vhosts/afd.de/.ssh/id_rsa", "key_type": "OpenSSH", "bytes": 2622, "pub": "ssh-rsa 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 afdkompakt.de@2280104-www0401", "known_hosts": [ "|1|nnuDfTF7s5IueLXF3NuM9232HwQ=|+oZrNe8esG5ZXVtI95kK+CMXRHc= ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBBWtQObLqq7X2+is+tKdcNtP8eM9jdJPF89urxIQcgUkpu6xMgA7keJ51QW2E+/lfqbqy6nEC/Y1zR8+Az+ScAA=", "|1|hfwsjTAS5Tf0KyKsgHTtq6tZQL8=|In9H+YSNMX8pOkId/BnLd8EczGc= ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBHk9m1Puz4Qo4Gr4GKtLchgOD0K8NUnP427+PM0jfm1EVGY6MF3oJhE7tJ6rYTfS+SHvlQjg1yWOxErvFAPLakk=", "|1|hit6kzuJYAAm0RjUrBoSKXtUJbY=|/oV5Q8H1YgA1uUh2R1SJhAyM4k0= ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBHk9m1Puz4Qo4Gr4GKtLchgOD0K8NUnP427+PM0jfm1EVGY6MF3oJhE7tJ6rYTfS+SHvlQjg1yWOxErvFAPLakk=" ], "value": "-----BEGIN OPENSSH PRIVATE KEY-----\nb3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAABlwAAAAdzc2gtcn\nNhAAAAAwEAAQAAAYEA0oUM6OuIJoKwbE4JtwpQyvKr5WQcfPBrOp9ocd+4BvBP4dzKqpyl\nh/KdN09A/u27/2brH8bcmsH57oGklugQNJPV+huieolh/mtnpvFozXx+8S/F0NNTxetJ/i\nAhLHNYDvDK9ONK4lp6VAeNQZ1JQ7qoUz49L3fk3xiyVNqC7L1j38w4gjzrCLTpQfaIHOvs\n4/HO9z/05YPe7HAvCqg5GfC83yFQjVdNxnLR3sH6O/AsoeDWzfFEl8P2PN1WfoeztJlhfz\nqy6xtcSbKf2Y5oeX9/3qgBgfh42foJgLtpAxCnc3tDyZFAXlQ8vsz8CqkUX0Di8tv1e1tl\n77p932QLbF4GwozUJ0nhv3r0A1gq7frE1PpSRUByiaJ/hN/Zm3N/GJc9ct5JIhH4RUCvud\nc9HD5heLyObR6EM8394Jy3pxe8O/zFM7S9a93+lRnoXnEZx78QNYRtCKbqTitqfirTh4a3\nCgRECFlXqEdmeLl0Bw7+2se+XGxVc40ZUxWTyJzxAAAFmGM8G5hjPBuYAAAAB3NzaC1yc2\nEAAAGBANKFDOjriCaCsGxOCbcKUMryq+VkHHzwazqfaHHfuAbwT+HcyqqcpYfynTdPQP7t\nu/9m6x/G3JrB+e6BpJboEDST1fobonqJYf5rZ6bxaM18fvEvxdDTU8XrSf4gISxzWA7wyv\nTjSuJaelQHjUGdSUO6qFM+PS935N8YslTaguy9Y9/MOII86wi06UH2iBzr7OPxzvc/9OWD\n3uxwLwqoORnwvN8hUI1XTcZy0d7B+jvwLKHg1s3xRJfD9jzdVn6Hs7SZYX86susbXEmyn9\nmOaHl/f96oAYH4eNn6CYC7aQMQp3N7Q8mRQF5UPL7M/AqpFF9A4vLb9XtbZe+6fd9kC2xe\nBsKM1CdJ4b969ANYKu36xNT6UkVAcomif4Tf2ZtzfxiXPXLeSSIR+EVAr7nXPRw+YXi8jm\n0ehDPN/eCct6cXvDv8xTO0vWvd/pUZ6F5xGce/EDWEbQim6k4ran4q04eGtwoERAhZV6hH\nZni5dAcO/trHvlxsVXONGVMVk8ic8QAAAAMBAAEAAAGBAJKuD6uuiGPExWYBDbXSYy603N\n5s3YiT/zKOZTiKl2+GOzJ1I2Sy1ocdnTsvZmr5e/bdX8/5QDY4F4t+Gw7mTHxF0V59qLzW\nQkgBz+u64rniF5S3I4534DPT1+9Pta2CBIYMcm0kfUWvovIvfNWN4MFnKecuQ3VyhS6Ix6\nBly7ll0FPbuDfOeDjNzISgYIA+RgUgs4MEtf7A3i9BjxVO1tJjMUYKsVR50wAFeoNKBq+C\njaaQwTom9BMGf+gylBR/OYxFyc66KPdij7GxI4F4x50T6dvbKk8fAIevioWeZWBanaf0p5\n1YPejInFiAscoknisDaEyh735OL8CGuQW4UcI9cCLIDUrVOx4HRZqR2OHm7MIIBDCA+uUt\nQc2Vh7/o1JFyS4g2CMXxn0GmXCFqMwEUrxPmaVPS2sR+2NXulXCjS6YGf76P987XrKoEhZ\nEvudOF8C4lNk4C+1bgITdmUJvVLjwRcnS++NOLpjivlUrbDE26R2Dc1lScbRCEk8o3nQAA\nAMEAuMrGSTq+onIx10WxvwzfLJM2zQIbWbz2Mk38wuRcNk4Yb5ndAMdDjjNq1IRqUSdzhE\nVkAQO58D01F8pGTL+ph6J8Pmp9+yJi/WhQEgA0P4SFHtItrozVWdv9c0zTfDn639zEohAq\n+0hxSyrtiyBfXqj7/CMV+rv4dm+sSMaIZ5qg+L/fyXZ1kWC6XGQ7MNAm0u9oTLkMJlyQCi\nQ3cOu3E3sTzRYXOOwG+Fa6k3VqtSpuN1JzVg/MrIaAzELnej4OAAAAwQDxm+Xp+1jL/H3G\nxUDQYNPTVj408qVtDiQ0a58hS7EyH0ENFj1Lgoo1zBhu5956YxLJEo7L3ZhJzrmA135mn9\nToE1LOdQmPn6qmQhFv+cKgKBfGbTTrScgowVNxs+lP8ltiZVuNe+GZdSP5o72KrL7YZgHS\n2wC4bijOkTPEtDfl/0OyUoPuXQiz3HSEBymhW1P9g78LnOqiIqNndEkIT7xgzjSRAmldBD\nkVe11GxJcsT6Koj5BJzHFpH022fq2kls8AAADBAN8PGOXwYMGgjD5KVWgLy/NHQCDKn5i9\naj5vDvHM3dblmrQVuKBswXGSv4tD7tpV+30zpEhlAkZmre6AAS3ewB1JTgv2pYY4hos2dD\njrg+TaFAWu76hBIbOqs5orUfFc/6llfnikQYjKMEsFXUm+WeU8NxPczcGgj49dgvSJ2gDK\nRdDbxs/1sGiZ90SJtQ7lX5pMm8b++BveCvtk8pVN21NhsiWtWP6lKa6kCr2X6/jhIDz4E7\npegOhma1c93SCAPwAAAB1hZmRrb21wYWt0LmRlQDIyODAxMDQtd3d3MDQwMQECAwQ=\n-----END OPENSSH PRIVATE KEY-----\n" }, { "kind": "bash_history_migration", "host": "afd.de", "path": "vhosts/afd.de/.bash_history", "origins": [ "ganzrund@3.123.137.134" ], "kas_accounts": [ "ssh-w020d36d@w020d36d.kasserver.com:/www/htdocs/w020d36d/dev.blunitas.com" ], "blunitas_paths": [ "dev.blunitas.com" ], "db_backup_pattern": "wp db export - | gzip > /var/www/vhosts/afd.de/files/backups/afd-wordpress-db-$(date +%F).sql.gz", "history_bytes": 33865, "value": "#1682344578\nexit\n#1683795332\nssh ganzrund@3.123.137.134\n#1683804427\nscp ganzrund@3.123.137.134:~/20230511_afd_de.tar.gz .\n#1683807330\nmkdir migration\n#1683807340\nmv 20230511_afd_de.tar.gz migration/\n#1683807341\ncd migration/\n#1683807345\nls -lah\n#1683807345\ndf -h\n#1683807354\ntar xvfz 20230511_afd_de.tar.gz \n#1683812748\ndu -h\n#1683812819\ndf -h\n#1683812827\nls -lah\n#1683812836\nrm 20230511_afd_de.tar.gz \n#1683812842\ncd ..\n#1683812844\ncd htdocs/\n#1683812845\nls\n#1683812847\ncd ..\n#1683812851\nexit\n#1683815007\nssh ganzrund@3.123.137.134\n#1683817641\ncd migration/\n#1683817644\nls -lah\n#1683817651\nmv var/www/vhosts/afd.de .\n#1683817652\nls\n#1683817655\nrmdir var\n#1683817658\nrm -Rf var\n#1683817661\nls -lah\n#1683817697\ncd afd.de/\n#1683817697\nls\n#1683817726\npwd\n#1683817825\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links\n#1683817998\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1683818019\nexit\n#1683814063\nssh ganzrund@3.123.137.134\n#1683817928\nhtop\n#1683875271\nscreen -x\n#1683875314\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1683875545\nssh ganzrund@3.123.137.134\n#1683875855\ncd migration/\n#1683875856\nls\n#1683875858\ncd afd.de/\n#1683875860\ndu -h\n#1683875866\ndu -h |wc -l\n#1683881751\ncd ..\n#1683881753\nls -lah\n#1683881756\ncd logs\n#1683881759\nls -lah\n#1683881772\ncat 2280104-www0401-apache-afd.de-access.log\n#1683881777\ncd ..\n#1683881778\ncd htdocs/\n#1683881779\nls\n#1683881782\ncd ..\n#1683881790\ncd migration/\n#1683881792\ncd ..\n#1683881796\ncd logs/\n#1683881797\nls -lah\n#1683881809\ntail -1000 php-fpm-afd.de-access.log.1\n#1683881824\nexit\n#1683857576\nls\n#1683857579\ncd htdocs/\n#1683857580\nls\n#1683857581\ndf -h\n#1683857596\nnano wp-config.php \n#1683857623\ndu -sh\n#1683857627\nrm -rf *\n#1683857632\ncd \n#1683857634\ncd migration/\n#1683857634\nls\n#1683857642\ncd afd.de/httpdocs/\n#1683857642\nls\n#1683857655\ncp -r * /var/www/vhosts/afd.de/htdocs/\n#1683865656\ndf -h\n#1683865663\nfind . -type d -exec chmod 755 {} \\; \n#1683865796\nfind . -type f -exec chmod 644 {} \\;\n#1683867135\nnano wp-config.php \n#1683867297\ncd\n#1683867327\ncd migration/afd.de/httpdocs/\n#1683867327\nls\n#1683867341\ncp .htaccess /var/www/vhosts/afd.de/htdocs/\n#1683867343\ncd \n#1683867346\ncd htdocs/\n#1683867346\nls\n#1683867350\nnano wp-config.php \n#1683867425\nnano .htaccess \n#1683867441\nnano wp-config.php \n#1683867812\nnano index.php \n#1683867853\ncd ..\n#1683867853\nl\n#1683867855\nls\n#1683867857\ncd logs/\n#1683867858\nls\n#1683867872\ntail -f 2280104-www0401-apache-afd.de-access.log\n#1683867879\ntail -f 2280104-www0401-apache-afd.de-error.log\n#1683867898\ntail -f 2280104-www0401-apache-afd.de-access.log\n#1683867906\nls\n#1683867917\nls -lsa\n#1683867926\ntail -f 2280104-www0402-apache-afd.de-access.log\n#1683867932\ntail -f 2280104-www0402-apache-afd.de-error.log\n#1683867947\nls -lsa\n#1683867949\ncd ..\n#1683867951\ncd htdocs/\n#1683867951\nls\n#1683868052\nnano .htaccess \n#1684145594\nssh ganzrund@3.123.137.134\n#1684145601\ncd migration/\n#1684145609\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1684145871\nssh ganzrund@3.123.137.134\n#1684145925\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1684146046\nssh ganzrund@3.123.137.134\n#1684146110\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1684146229\nssh ganzrund@3.123.137.134\n#1684147746\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1684148158\nssh ganzrund@3.123.137.134\n#1684151541\ndf -h\n#1684151549\nexit\n#1684315040\nssh ganzrund@3.123.137.134\n#1684315190\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1684495560\nexit\n#1685002030\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1685002090\nssh ganzrund@3.123.137.134\n#1685372405\nexit\n#1685372323\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1685373420\nexit\n#1684107395\nls\n#1684107396\ncd htdocs/\n#1684107397\nls\n#1684107399\nnano .htaccess \n#1684107490\nls -lsa\n#1684107493\nnano auth0.html \n#1684107943\nnano wordfence-waf.php \n#1684107979\ncd ..\n#1684107981\ncd migration/\n#1684107981\nls\n#1684107983\ncd afd.de/\n#1684107983\nls\n#1684107986\ncd httpdocs/\n#1684107986\nls\n#1684107991\nnano .user.ini \n#1684108522\ncp .user.ini /var/www/vhosts/afd.de/\n#1684108546\ncd\n#1684108549\ncd ht\n#1684108551\ncd htdocs/\n#1684108553\nls\n#1684108561\nmv wordfence-waf.php _wordfence-waf.php \n#1684108583\ncd wp-content/\n#1684108583\nls\n#1684108586\ncd plugins/\n#1684108586\nls\n#1684108604\nmv wordfence/ _wordfence/\n#1684108606\ncd ..\n#1684108612\nnano wp-config.php \n#1684108749\nnano wp-login.php \n#1684108770\ncd ..\n#1684108773\ncd logs/\n#1684108773\nls\n#1684108789\ntail -f 2280104-www0402-apache-afd.de-error.log\n#1684108794\ntail -f 2280104-www0401-apache-afd.de-error.log\n#1684108866\ntail -f 2280104-www0402-apache-afd.de-error.log\n#1684108882\ntail -f php-fpm-afd.de-error.log\n#1684109010\ncd ..\n#1684109011\ncd htdocs/\n#1684109011\nls\n#1684109025\nmv _wordfence-waf.php wordfence-waf.php \n#1684109034\ncd wp-content/\n#1684109034\nls\n#1684109038\ncd plugins/\n#1684109038\nls\n#1684109052\nmv _wordfence/ wordfence/\n#1684109061\ncd wordfence/\n#1684109063\nls\n#1684109070\ncd ..\n#1684109072\ncd \n#1684109074\ncd htdocs/\n#1684109074\nls\n#1684109078\nnano .us\n#1684109087\nl -lsa\n#1684109090\nls -lsa\n#1684109096\ncd ..\n#1684109104\ncd migration/afd.de/\n#1684109105\nls\n#1684109107\ncd httpdocs/\n#1684109107\nls\n#1684109126\ncp .user.ini /var/www/vhosts/afd.de/htdocs/\n#1684109126\nls\n#1684109128\ncd /\n#1684109129\nls\n#1684109131\ncd\n#1684109132\nls\n#1684109135\ncd htdocs/\n#1684109135\nls\n#1684109141\nnano .user.ini \n#1684109164\nnano /var/www/vhosts/afd.de/htdocs/wordfence-waf.php\n#1684109252\nnano .htaccess \n#1685604684\nexit\n#1686061106\ncd htdocs/\n#1686061109\nwp --help\n#1686061129\nwp plugin --help\n#1686061145\nwp plugin list\n#1687518736\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1687518751\nssh ganzrund@3.123.137.134\n#1687518803\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1687518998\nls -lah\n#1687519004\ncd migration/\n#1687519004\nls\n#1687519007\ncd ..\n#1687519009\ncd htdocs/\n#1687519010\nls\n#1687519017\ncd ..\n#1687521356\nssh ganzrund@3.123.137.134\n#1687643332\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1687643424\nssh ganzrund@3.123.137.134\n#1687643434\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1687643671\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2^\n#1687643674\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1687644566\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2^\n#1687644568\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1687644809\nls -lah\n#1687644904\ncp -R -a migration/afd.de/httpdocs/* htdocs/\n#1687645428\nmv migration/afd.de/httpdocs/* htdocs/\n#1687645467\nmv -f migration/afd.de/httpdocs/* htdocs/\n#1687645479\nmv migration/afd.de/httpdocs/* htdocs/ -f\n#1687645587\ncp -R -a migration/afd.de/httpdocs/* htdocs/\n#1687645613\nrm -Rf htdocs/*\n#1687645793\nmv migration/afd.de/httpdocs/* htdocs/\n#1687645798\npwd\n#1687645800\ncd htdocs/\n#1687645800\nls\n#1687645802\nls -lah\n#1687645816\ncd ../migration/afd.de/\n#1687645817\nls -lah\n#1687645823\ncd httpdocs/\n#1687645824\nls\n#1687645825\nls -lah\n#1687645833\ncd ..\n#1687645839\nw\n#1687645858\ncd htdocs/\n#1687645859\nls\n#1687645860\nls -lah\n#1687645895\ndu -h\n#1687645957\nls -lah\n#1687645986\nls -lah |wc -l\n#1687646817\ncd ..\n#1687646818\ncd migration/\n#1687646820\ncd afd.de/\n#1687646821\ndu -h\n#1687646945\ncd ..\n#1687646949\ncd htdocs/\n#1687646950\nls -lah\n#1687646955\ncd wp-\n#1687646958\ncd wp-content/\n#1687646959\nls -lah\n#1687646977\ncd ..\n#1687646981\ncd logs/\n#1687646982\nls\n#1687646989\ntail -f 2280104-www0401-apache-afd.de-*\n#1687647003\ncd ..\n#1687647004\ncd htdocs/\n#1687647005\nls -lah\n#1687647053\nchmod 644 .htaccess \n#1687647056\nls -lah\n#1687647075\nchmod 750 .htaccess \n#1687647077\nls -lah\n#1687647092\ntail -f ../logs/2280104-www0401-apache-afd.de-*\n#1687647139\nls -lah\n#1687647151\ncd ..\n#1687647152\nls -lah\n#1687647164\ntail -f ../logs/2280104-www0401-apache-afd.de-*\n#1687647170\ntail -f logs/2280104-www0401-apache-afd.de-*\n#1687647184\nexit\n#1687647214\ntail -f logs/2280104-www0401-apache-afd.de-*\n#1687647323\nls -lah\n#1687647331\ncd htdocs/\n#1687647332\nls -lah\n#1687647338\nchmod 755 .htaccess \n#1687647341\ncd ..\n#1687647343\ntail -f logs/2280104-www0401-apache-afd.de-*\n#1687647499\nexit\n#1687644975\ncd htdocs/\n#1687644977\nls -lah\n#1687644991\nls -lah ../migration/afd.de/httpdocs/\n#1687645006\nls -lah\n#1687645095\nhtop\n#1687645109\nw\n#1687645115\nls -lah\n#1687645643\nls\n#1687645645\nls -lah\n#1687645646\ndu -h\n#1687645739\ndf -h\n#1687645906\ncd ..\n#1687645970\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/httpdocs/*php /var/www/vhosts/afd.de/htdocs/ --copy-links --info=progress2\n#1687646020\ncd htdocs/\n#1687646021\nls -lah\n#1687646714\ncd ..\n#1687646727\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1687650085\ncd htdocs/\n#1687650087\ndu -h\n#1687648130\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/.htaccess /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1687648155\nscp ganzrund@3.123.137.134:/var/www/vhosts/afd.de/.htaccess /var/www/vhosts/afd.de/migr\n#1687648155\nation/afd.de/\n#1687648173\nscp ganzrund@3.123.137.134:/var/www/vhosts/afd.de/httpdocs/.htaccess /var/www/vhosts/afd.de/migration/afd.de/httpdocs/\n#1687648187\ncp migration/afd.de/httpdocs/.htaccess htdocs/\n#1687648192\nls -lah htdocs/\n#1687648373\ncd htdocs/\n#1687648374\nls\n#1687648377\numask .htaccess \n#1687648380\numask -h\n#1687648415\numask\n#1687648451\nls -lah\n#1687648453\ncd ..\n#1687648454\numask\n#1687648495\nls -lah\n#1687648501\ncd htdocs/\n#1687648503\nls -lah\n#1687648944\ncd wp-admin/\n#1687648945\nls -lah\n#1687648984\ncd ..\n#1687648991\nchmod -R 755 wp-admin\n#1687648997\ncd wp-admin/\n#1687648998\nls -lah\n#1687649113\ncd ..\n#1687649129\nfind . -type d -exec chmod 755 {} \\;\n#1687693160\ntail -f logs/2280104-www0401-apache-afd.de-*\n#1687695106\nhtop\n#1687695858\nexit\n#1687718343\nls\n#1687718344\ncd htdocs/\n#1687718345\nls\n#1687718348\nphp index.php \n#1687718485\ncd htdocs/\n#1687718485\nls\n#1687718487\nphp index.php\n#1687718526\nls -lhtra\n#1687645685\ncd htdocs/\n#1687645685\nls\n#1687645688\nls -lsa\n#1687645692\nnano .htaccess \n#1687645697\nnano wp-config.\n#1687645708\nnano .user.ini \n#1687645725\ncd ..\n#1687645725\nls\n#1687645726\ncd migration/\n#1687645727\nls\n#1687645728\ncd afd.de/\n#1687645729\nls\n#1687645730\ncd httpdocs/\n#1687645730\nls\n#1687645733\nls -lsa\n#1687645755\ncd \n#1687645756\nls\n#1687645757\ncd htdocs/\n#1687645757\nls\n#1687645760\nls -lsa\n#1687645813\ncd wp-includes/\n#1687645814\nls\n#1687645818\ncd ..\n#1687645818\nls\n#1687645827\nls -lsa\n#1687645832\nls\n#1687645837\nls -lsa\n#1687645841\ncd\n#1687645842\nls\n#1687645844\ncd htdocs/\n#1687645844\nl\n#1687645846\nls\n#1687645847\nls -lsa\n#1687646003\nnano wp-config.php \n#1687646238\nls -lsa\n#1687646242\nnano wp-config.php \n#1687648132\ncd ..\n#1687648132\nls\n#1687648134\ncd logs/\n#1687648134\nl\n#1687648135\nls\n#1687648146\ntail -f \n#1687648149\ntail -f 2280104-www0401-apache-afd.de-access.log\n#1687648210\ncd ..\n#1687648211\ncd htdocs/\n#1687648212\nls\n#1687648215\ncd wp-content/\n#1687648216\nls\n#1687648225\nnano uploads/2021/01/vs_fb_vererben_6s_460h_218b.jpg\n#1687648297\nls -lsa\n#1687648308\ncd ..\n#1687648309\nls -lsa\n#1687648333\nfind . -type d -exec chmod 755 {} \\; \n#1687648405\nfind . -type f -exec chmod 644 {} \\;\n#1687648788\n\t\n#1687648847\nls -lsa\n#1687648852\nnano .htaccess \n#1687648893\nnano .user.ini \n#1687693062\ncd ..\n#1687693062\nl\n#1687693064\nls\n#1687693065\ncd logs/\n#1687693065\nls\n#1687693075\ntail -f 2280104-www0401-apache-afd.de-access.log\n#1687693122\nhtop\n#1687693134\ntail -f 2280104-www0401-apache-afd.de-access.log\n#1687693341\ncat 2280104-www0401-apache-afd.de-access.log | grep 504\n#1687693358\ncat 2280104-www0402-apache-afd.de-access.log | grep 504\n#1687693489\nls -lsa\n#1687693502\ntail -f 2280104-www0402-apache-afd.de-error.log\n#1687693524\ntail -f 2280104-www0401-apache-afd.de-error.log\n#1687693549\ntail -f php-fpm-afd.de-slow.log\n#1687693561\nls -lsa\n#1687693590\ntail -f php-fpm-afd.de-error.log\n#1687693623\ntail -f 2280104-www0401-apache-afd.de-access.log\n#1687693636\ncat 2280104-www0401-apache-afd.de-access.log\n#1687693715\nls\n#1687693717\ncd\n#1687693718\nls\n#1687693719\ncd htdocs/\n#1687693719\nls\n#1687693724\nnano .htaccess \n#1687694488\nhtop\n#1687694566\nbmon\n#1687694568\nhtop\n#1687718476\nls\n#1687718481\nnano .htaccess \n#1687718822\nhtop\n#1687718873\ncd\n#1687719238\ncd htdocs/\n#1687719239\nls\n#1687719247\nnano wp-config.php \n#1687719468\nhtop\n#1683818033\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/ /var/www/vhosts/afd.de/migration/afd.de/ --copy-links --info=progress2\n#1687861399\nw\n#1687863933\nhtop\n#1687859924\ncd htdocs/\n#1687859925\nls -lah\n#1687859936\nphp index.php \n#1687860103\ntime php index.php \n#1687861078\ndig afdkompakt.de\n#1687861380\nw\n#1687863926\nhtop\n#1687865855\ncd wp-content/\n#1687865856\nls\n#1687865861\ncd cache/\n#1687865861\nls\n#1687865867\ncd wp-rocket/\n#1687865868\nls\n#1687865870\nls -lah\n#1687865874\ncd www.afd.de/\n#1687865875\nls -lah\n#1687866151\nhtop\n#1687892881\ncd htdocs/\n#1687892881\nls\n#1687892889\nvi wp-config.php \n#1687893011\nvi index.php \n#1687893030\nvi wp-blog-header.php \n#1687893051\nvi wp-load.php \n#1687893076\nvi wp-settings.php \n#1688562112\nssh ganzrund@3.123.137.134\n#1689078521\ntail -f logs/2280104-www0401-apache-afd.de-*\n#1689078647\ntail -f logs/2280104-www0401-apache-afd.de-access.log\n#1689169919\nssh ganzrund@3.123.137.134\n#1689847081\ncd htdocs/\n#1689847081\nls\n#1689847087\ncat image.types \n#1689849044\nuniq image.types \n#1689849097\nuniq -u image.types \n#1689849131\nuniq -d image.types \n#1689849137\nuniq -c image.types \n#1689849155\nsort image.types | uniq\n#1689845421\ncd htdocs/\n#1689845423\nls -lah\n#1689845430\ncd wp-content/\n#1689845431\nls -lah\n#1689845452\ncd ..\n#1689845491\nfind . -name '*' -exec file {} \\; | grep -o -P '^.+: \\w+ image'\n#1689845662\nfind . -name '*' -exec file {} \\; | grep -o -P '^.+: \\w+ image' | awk '{print $2}'\n#1689845714\nfind . -name '*' -exec file {} \\; | grep -o -P '^.+: \\w+ image' | awk '{print $2}' > image.types\n#1689847968\nfind . -type f | grep -E \"\\.webm$|\\.flv$|\\.vob$|\\.ogg$|\\.ogv$|\\.drc$|\\.gifv$|\\.mng$|\\.avi$|\\.mov$|\\.qt$|\\.wmv$|\\.yuv$|\\.rm$|\\.rmvb$|/.asf$|\\.amv$|\\.mp4$|\\.m4v$|\\.mp*$|\\.m?v$|\\.svi$|\\.3gp$|\\.flv$|\\.f4v$\" > video.types\n#1689848019\ncat video.types \n#1689848056\ncat video.types | grep -v mp4\n#1689848079\ncat video.types | grep -v mp4 | grep -v avi | grep -v webm | grep -v mov \n#1689848086\ncat video.types | grep -v mp4 | grep -v avi | grep -v webm \n#1689848094\ncat video.types | grep -v mp4 | grep -v avi \n#1689848121\ncat video.types | grep -v avi \n#1689848130\ncat video.types | grep -v mov\n#1689848134\ncat video.types | grep mov\n#1689848139\ncat video.types | grep avi\n#1689848151\ncat video.types | grep -v mp4\n#1689850847\ncat video.types \n#1689851060\nawk -F'[.]' video.types \n#1689851151\nawk -F'[/.]' video.types \n#1689851180\ncat video.types | awk -F'[.]'\n#1689851200\ncat video.types | awk -F'.'\n#1689851661\ngrep -v mp4 video.types \n#1689924335\nssh ganzrund@3.123.137.134\n#1690041828\ncd htdocs/\n#1690041829\nls\n#1690041835\nls -lah\n#1690041771\ncd htdocs/\n#1690041772\nls\n#1690041806\nscreen\n#1690058553\nscreen -x\n#1690096048\ntail -f logs/2280104-www0401-apache-afd.de-access.log\n#1690096329\nexit\n#1690097305\ntail -f logs/2280104-www0401-apache-afd.de-access.log\n#1690097314\ntail -f logs/2280104-www0401-apache-afd.de-error.log\n#1690097332\ntail -f logs/php-fpm-afd.de-error.log\n#1690097526\nvi htdocs/wp-config.php \n#1690097595\ncd htdocs/wp-content/plugins/\n#1690097595\nls\n#1690097622\nmv query-monitor ../../../migration/\n#1690097686\nexit\n#1690097807\ntail -f logs/php-fpm-afd.de-error.log\n#1690097955\ncd htdocs/\n#1690098072\ncd wp-content/plugins/\n#1690098073\nls -lah\n#1690098105\nmv wp-rocket ../../../migration/\n#1690098192\ncd ..\n#1690098195\nls\n#1690098202\ncd ..\n#1690098203\nls\n#1690098207\ncd wp-content/\n#1690098208\nls -lah\n#1690098212\nrm db.php \n#1690098215\ncd ..\n#1690098218\nls -lah\n#1690098221\ncd wp-admin/\n#1690098222\nls -lah\n#1690098560\ncd ..\n#1690098561\nls -lah\n#1690098568\nvi .htaccess \n#1690098585\ntail -f logs/php-fpm-afd.de-error.log\n#1690098587\ncd ..\n#1690098589\ntail -f logs/php-fpm-afd.de-error.log\n#1690098604\ntail -f logs/php-fpm-afd.de-access.log\n#1690098615\ntail -f logs/php-fpm-afd.de-access.log.1\n#1690098629\nls -lah logs/\n#1690098653\ntail -f logs/2280104-www0401-apache-afd.de-error.log\n#1690098659\ntail -f logs/2280104-www0401-apache-afd.de-access.log\n#1690098666\ntail -f logs/2280104-www0401-apache-afd.de-access.log |grep admin\n#1690098792\nvi htdocs/.htaccess \n#1690099031\nls -lah\n#1690099034\ncd htdocs/\n#1690099035\nls -lah\n#1690099049\nvi wp-config.php \n#1690099074\nexit\n#1690098692\ntail -f logs/2280104-www0402-apache-afd.de-error.log\n#1690098696\ntail -f logs/2280104-www0402-apache-afd.de-access.log\n#1690099082\nexit\n#1690099216\ncd htdocs/\n#1690099217\nls -lah\n#1690099224\nmv .htaccess .htaccess_old\n#1690099265\nvi .user.ini \n#1690099312\ncd wp-content/\n#1690099313\nls\n#1690099314\ncd plugins/\n#1690099315\nls\n#1690099337\nmv wordfence ../../../migration/\n#1690099376\ncd ..\n#1690099378\nls\n#1690099384\nmv .htaccess_old .htaccess\n#1690099434\nexit\n#1690099478\ncd htdocs/wp-content/plugins/\n#1690099478\nls\n#1690099485\nrm -Rf *\n#1690099647\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/httpdocs/wp-content/plugins/ /var/www/vhosts/afd.de/htdocs/wp-content/plugins/ --copy-links --info=progress2\n#1690099969\ncd ..\n#1690099994\nvi wp-config.php \n#1690100019\nvi .htaccess \n#1690100041\nvi wordfence-waf.php \n#1690100105\nfind . -name wordfence-waf.php\n#1690100167\npwd\n#1690100170\nvi wordfence-waf.php \n#1690100197\ncd wp-content/plugins/\n#1690100198\nls\n#1690100206\nls -lah\n#1690100217\ncd wordfence/\n#1690100218\nls -lah\n#1690100223\ncd ..\n#1690100227\nls\n#1690100235\nvi wordfence-waf.php \n#1690100251\nvi .user.ini \n#1690100336\nls\n#1690100339\nvi wordfence-waf.php \n#1690100362\nvi .htaccess \n#1690100395\nexit\n#1690100506\nvi htdocs/wp-config.php \n#1690100601\ntail -f logs/*\n#1690100660\ncd htdocs/wp-content/plugins/\n#1690100661\nls -lah\n#1690100731\ncd ..\n#1690100743\nls -lah htdocs/wp-content/plugins/.htaccess\n#1690100747\nls -lah htdocs/wp-content/plugins/\n#1690100754\ncd htdocs/\n#1690100756\nvi .htaccess \n#1690100775\nexit\n#1690100871\ncd htdocs/\n#1690100873\ncd wp-content/\n#1690100874\nls -lah\n#1690100897\nchmod 644 plugins\n#1690100904\nchmod -R 644 plugins\n#1690100916\ncd plugins/\n#1690100923\nexit\n#1690100446\ntail -f logs/2280104-www0402-apache-afd.de-access.log\n#1690100469\ntail -f logs/2280104-www0402-apache-afd.de-error.log\n#1690100477\ntail -f logs/php-fpm-afd.de-error.log\n#1690101169\nexit\n#1690101443\ntail -f logs/php-fpm-afd.de-error.log\n#1690101453\ntail -f logs/php-fpm-afd.de-access.log\n#1690101456\nexit\n#1690100304\nssh ganzrund@3.123.137.134\n#1690101527\ntail -f logs/2280104-www0401-apache-afd.de-access.log\n#1690101541\ntail -f logs/2280104-www0401-apache-afd.de-error.log\n#1690101587\ntail -f logs/2280104-www0401-apache-afd.de-access.log\n#1690101756\ncd htdocs/wp-content/cache/\n#1690101848\nscp ganzrund@3.123.137.134:/var/www/vhosts/afd.de/httpdocs/wp-content/cache/* /var/www/vhosts/afd.de/htdocs/wp-content/cache/\n#1690101856\nscp -R ganzrund@3.123.137.134:/var/www/vhosts/afd.de/httpdocs/wp-content/cache/* /var/www/vhosts/afd.de/htdocs/wp-content/cache/\n#1690101860\nscp -r ganzrund@3.123.137.134:/var/www/vhosts/afd.de/httpdocs/wp-content/cache/* /var/www/vhosts/afd.de/htdocs/wp-content/cache/\n#1690102183\nls -lah\n#1690102297\nscp -r ganzrund@3.123.137.134:/var/www/vhosts/afd.de/httpdocs/.htaccess /var/www/vhosts/afd.de/htdocs/\n#1690102304\ncd ..\n#1690102305\nls -lah\n#1690102307\ncd ..\n#1690102310\nls -lah\n#1690102360\ncd ..\n#1690102364\nexit\n#1690102510\nls\n#1690102513\ncd migration/\n#1690102513\nls\n#1690102515\nls -lah\n#1690102523\nrm -Rf *\n#1690103129\ncd ..\n#1690103132\ncd htdocs/\n#1690103150\nmv wp-content/plugins/wp-rocket ../migration/\n#1690103197\nmv ../migration/wp-rocket wp-content/plugins/\n#1690103206\ncd wp-content/\n#1690103208\nls -lah\n#1690103222\nvi wp-rocket-config/migration20221115.afd.de.php \n#1690103256\ncd ..\n#1690103298\ncp wp-config.php ../migration/\n#1690103397\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/httpdocs/ /var/www/vhosts/afd.de/htdocs/ --copy-links --delete\n#1690103436\nls -lah wp-content/cache/wp-rocket/www.afd.de/alice-weidel-konformitaetsdruck-auf-gesunde-buerger-einstellen/pm_weidel_a_4575064_cc0-pixabay/\n#1690103488\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/httpdocs/ /var/www/vhosts/afd.de/htdocs/ --copy-links --delete\n#1690103618\nexit\n#1690102703\nls\n#1690102704\ncd htdocs/\n#1690102713\nvi .htaccess \n#1690102955\nvi wp-config.php \n#1690103625\nexit\n#1690103649\nvi htdocs/wp-config.php \n#1690103664\ncp migration/wp-config.php htdocs/wp-config.php \n#1690103666\nvi htdocs/wp-config.php \n#1690103703\ncd htdocs/\n#1690103704\nls -lah\n#1690103713\nexit\n#1690104321\nssh ganzrund@3.123.137.134\n#1690104718\nexit\n#1690103967\nvi htdocs/wp-config.php \n#1690104294\ncd htdocs/wp-admin/\n#1690104295\nls -lah\n#1690104470\nfind . -type f -exec chmod 755 {} \\;\n#1690104474\nls -lah\n#1690104505\ncd ..\n#1690104507\nls -lah\n#1690104625\ncd wp-admin/\n#1690104626\nls -lah\n#1690104678\ncd ..\n#1690104680\nls -lah\n#1690105015\nvi .htaccess \n#1690105241\nexit\n#1690105367\ncd htdocs/wp-admin/\n#1690105368\nls -lah\n#1690105400\ncd ..\n#1690105404\nvi wp-config.php \n#1690105439\nvi wp-settings.php \n#1690105498\nvi wp-config.php \n#1690105601\nls -lah\n#1690105644\nvi wp-config.php \n#1690105721\nvi .htaccess \n#1690106002\ncd wp-content/\n#1690106004\nls -lah\n#1690106006\ncd themes/\n#1690106007\nls -lah\n#1690106016\ncd AfD\n#1690106018\nls -lah\n#1690106024\ncd ..\n#1690106039\nmv plugins plugins.old\n#1690106096\nmv plugins.old plugins\n#1690106098\ncd plugins/\n#1690106099\nls -lah\n#1690106113\nmv seo-redirection-premium seo-redirection-premium.disabled\n#1690106152\nmv redirection redirection.disabled\n#1690106186\nls -lah\n#1690106196\nmv wp-rocket wp-rocket.disabled\n#1690106242\nmv wordfence wordfence.disabled\n#1690106299\nmv honeypot honeypot.disabled\n#1690106336\nmv wps-hide-login wps-hide-login.disabled\n#1690106404\nls -lah\n#1690106414\nmv redirection.disabled redirection\n#1690106424\nmv wp-rocket.disabled wp-rocket\n#1690106426\nls -lah\n#1690106439\nmv seo-redirection-premium.disabled seo-redirection-premium\n#1690106442\nls -lah\n#1690106445\nls\n#1690106482\nls -lah |grep disabled\n#1690106490\nmv wordfence.disabled wordfence\n#1690106495\nmv honeypot.disabled honeypot\n#1690106620\nexit\n#1690110635\nssh ganzrund@3.123.137.134\n#1690112533\nexit\n#1690113309\nssh ganzrund@3.123.137.134\n#1690117452\nvi htdocs/wp-config.php \n#1690117745\nvi htdocs/.htaccess \n#1690124686\nexit\n#1690309999\ncd htdocs/\n#1690310012\nfind . -name Wir.-An-Deiner-Seite*\n#1690310096\nls -lah ./wp-content/uploads/2022/10/Wir.-An-Deiner-Seite..mp4\n#1690310243\nfile ./wp-content/uploads/2022/10/Wir.-An-Deiner-Seite..mp4\n#1690310278\ncd ..\n#1690310318\ngrep mp4 logs/2280104-www040*-apache-afd.de-access.log\n#1690310689\ngrep mp4 logs/2280104-www040*-apache-afd.de-access.log | grep 200\n#1690311133\ngrep mp4 logs/2280104-www040*-apache-afd.de-access.log | grep Wir\n#1690311163\ntail -f logs/2280104-www040*-apache-afd.de-access.log | grep Wir\n#1690311565\ngrep mp4 logs/2280104-www040*-apache-afd.de-access.log | grep Wir |grep 304\n#1690311596\ngrep mp4 logs/2280104-www040*-apache-afd.de-access.log | grep Wir \n#1690311604\ngrep mp4 logs/2280104-www040*-apache-afd.de-access.log | grep Seite\n#1690311619\ngrep mp4 logs/2280104-www040*-apache-afd.de-access.log | grep Seite | wc -l\n#1690311630\ngrep mp4 logs/2280104-www040*-apache-afd.de-access.log | grep Seite | grep 200 |wc -l\n#1690311641\ngrep mp4 logs/2280104-www040*-apache-afd.de-access.log | grep Seite | grep 304|wc -l\n#1690313084\ngrep mp4 logs/2280104-www040*-apache-afd.de-access.log | grep Seite\n#1690313137\ngrep mp4 logs/2280104-www040*-apache-afd.de-access.log | grep Seite | grep 304\n#1692253654\ntail 100 logs/2280104-www0402-apache-afd.de-access.log\n#1692253663\nhtop\n#1692253694\ntail -100 logs/2280104-www0402-apache-afd.de-access.log\n#1692253698\ntail -100 logs/2280104-www0402-apache-afd.de-error.log\n#1692253705\nexit\n#1692253727\ntail -100 logs/2280104-www0402-apache-afd.de-access.log\n#1692271402\nexit\n#1692253588\ntail -100 logs/2280104-www040*-apache-afd.de-access.log\n#1692253599\ntail 100 logs/2280104-www040*-apache-afd.de-access.log\n#1692272600\nexit\n#1695040169\nls -lah\n#1695040172\ncd htdocs/\n#1695040174\nls -lah\n#1695040184\ncd wp-content/\n#1695040190\ncd ..\n#1695040196\nfind . -name robots.txt\n#1695042423\nexit\n#1708432860\ncrontab -l\n#1708433032\ncrontab -e\n#1708433681\nwget -q -O - https://afd.de/wp-cron.php?doing_wp_cron >/dev/null 2>&1\n#1708433812\ncrontab -e\n#1708433837\ncrontab -l\n#1708613761\napachectl -M\n#1708613788\napache2ctl -M\n#1690041810\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/httpdocs/* /var/www/vhosts/afd.de/htdocs/ --copy-links --info=progress2\n#1690058557\nls -lah\n#1690058571\nrm image.types \n#1690058573\nrm video.types \n#1690058578\nrsync -avz ganzrund@3.123.137.134:/var/www/vhosts/afd.de/httpdocs/* /var/www/vhosts/afd.de/htdocs/ --copy-links --info=progress2\n#1690092546\nls -lah\n#1690092581\ncd wp-content/cache/\n#1690092582\ndu -h\n#1690092591\ncd wp-rocket/\n#1690092592\ndu -h\n#1690092596\nls\n#1690092609\nrm -Rf www.afd.de/*\n#1690092618\ncd ..\n#1690092694\nls -lah\n#1690092705\nvi wp-config.php \n#1690093407\nfind . -type d -exec chmod 755 {} \\; \n#1690093531\nfind . -type f -exec chmod 644 {} \\;\n#1717401944\nvi htdocs/wp-config.php \n#1734009031\ncd htdocs/\n#1734009034\ncrontab -e\n#1737384375\nwhich wp \n#1737384382\nwp\n#1737384392\nls -l /usr/local/bin/wp\n#1737384544\nexit\n#1737386046\nls -l /usr/local/bin/wp \n#1737389853\nexit\n#1743545949\nmysql -usql_afd_de -h10.12.51.254 -p\n#1743546100\nmysql -usql_linksrutsch_com -h10.12.51.254 -p\n#1743546124\nexit\n#1746689769\ncrontab -l\n#1747048938\ncrontab -e\n#1747048964\ncd ..\n#1747048966\nls\n#1747048980\ncd afd.de/\n#1747048982\nls\n#1747048988\ncd htdocs/\n#1747048988\nls\n#1762178381\npwd\n#1762178384\nls -lAh\n#1762178385\nid\n#1762178393\ncd /var/www/backup/\n#1762178395\nls -lAh\n#1762178397\ncd ANXSUP-121978/\n#1762178399\nls -lAh\n#1762177898\ncd ..\n#1762177898\nls\n#1762177900\ncd ..\n#1762177903\ncd backup/\n#1762177903\nls\n#1762177905\ncd ANXSUP-121978/\n#1762177906\nls\n#1762177911\nclear\n#1762177913\nls\n#1762177917\ncd ANXSUP-121978/\n#1762179093\ncd ..\n#1762179097\ncd backup/\n#1762179099\ncd ANXSUP-121978/\n#1762179100\nls\n#1762179911\nrsync -avz --progress afd_de_htdocs_20251017.tar.gz ssh-w020d36d@w020d36d.kasserver.com:/www/htdocs/w020d36d/dev.blunitas.com\n#1762183188\nrsync -avz --progress afd_de_htdocs_20251017.SHA512 ssh-w020d36d@w020d36d.kasserver.com:/www/htdocs/w020d36d/dev.blunitas.com\n#1762183214\nnano upload.sh \n#1765532337\ncrontab -l\n#1765966881\ncrontab -e\n#1765966933\nphp -v\n#1765966945\nphp --ini\n#1765966967\n/usr/bin/php echo \"test\";\n#1765966975\n/usr/bin/php -v\n#1765967007\ncrontab -e\n#1765967034\ncrontab -l\n#1765967204\ncd htdocs/\n#1765967205\nls\n#1765967210\nphp wp-cron.php\n#1765967376\ncurl -vk https://afd.de/wp-cron.php?doing_wp_cron=1\n#1765967493\ncurl -vk https://www.afd.de/wp-cron.php?doing_wp_cron=1\n#1765967509\ncd ..\n#1765967517\ncrontab -l\n#1765967529\nwget -q -O - https://afd.de/wp-cron.php?doing_wp_cron\n#1765967535\nwget -q -O - https://www.afd.de/wp-cron.php?doing_wp_cron\n#1765967565\nwget -S -O - \"https://www.afd.de/wp-cron.php?doing_wp_cron=1\"\n#1765967587\nwget -S -O - https://www.afd.de/wp-cron.php?doing_wp_cron\n#1765967627\ncrontab -e\n#1765967666\ncrontab -l\n#1765967997\nwget -S -O - https://www.afd.de/wp-cron.php?doing_wp_cron\n#1765968083\nwget -S -O - https://www.afd.de/wp-cron.php?doing_wp_cron=1\n#1765968089\nwget -S -O - https://www.afd.de/wp-cron.php?doing_wp_cron\n#1765969224\ncrontab -l\n#1765969262\nwget -S -O - https://www.afd.de/wp-cron.php?doing_wp_cron\n#1766409823\n/usr/local/bin/wp cron\n#1766410003\n/usr/local/bin/wp cron schedule\n#1766410013\n/usr/local/bin/wp cron schedule list\n#1766410018\ncd htdocs/\n#1766410019\n/usr/local/bin/wp cron schedule list\n#1766410086\n/usr/local/bin/wp cron event\n#1766410092\n/usr/local/bin/wp cron event list\n#1766410117\n/usr/local/bin/wp cron event list | fgrep gravity\n#1766412349\ncrontab -l\n#1766412419\n/usr/local/bin/wp cron\n#1766412429\n/usr/local/bin/wp cron schedule\n#1766412436\n/usr/local/bin/wp cron schedule list\n#1766412679\n/usr/local/bin/wp cron event list\n#1766412691\n/usr/local/bin/wp cron event list | fgrep gravity\n#1766413086\ncrontab -l\n#1766413148\nwget -q -O - https://www.afd.de/wp-cron.php?doing_wp_cron \n#1766413158\ncurl -I https://www.afd.de/wp-cron.php?doing_wp_cron \n#1766413198\nwhile [ true ]; do curl -I https://www.afd.de/wp-cron.php?doing_wp_cron ; sleep 2 ; done\n#1766413262\ncurl https://www.afd.de/wp-cron.php?doing_wp_cron\n#1766413279\nlynx https://www.afd.de/wp-cron.php?doing_wp_cron\n#1766413280\nexit\n#1766413295\nlynx https://www.afd.de/wp-cron.php?doing_wp_cron\n#1766413306\ncurl https://www.afd.de/wp-cron.php?doing_wp_cron\n#1766413322\nlynx https://www.afd.de/wp-cron.php?doing_wp_cron\n#1766413503\ncrontab -l\n#1766414059\nless /var/www/vhosts/afd.de/htdocs/wp-cron.php\n#1766414675\ncurl ip.anexia.com\n#1766416223\nexit\n#1767947762\ncrontab -l\n#1767948242\ncd htdocs/\n#1767948242\nls\n#1767948247\nwp cron event list | grep gf_webhooks\n#1767948255\nwp cron event list\n#1767948605\nwp cron event list | grep gf_webhooks\n#1767948624\ncrontab -l\n#1767948639\ncrontab -e\n#1767948904\ncrontab -l\n#1767953669\nwp cron event list\n#1767953712\nwp cron event list | grep gf_webhooks\n#1767953773\nwp cron event run --due-now --quiet\n#1767953795\nwp cron event run --due-now\n#1767954037\nwp cron event run gf_webhooks_cron\n#1767954056\n/usr/local/bin/wp cron event list --fields=hook,next_run,recurrence | head -n 50\n#1767954059\n/usr/local/bin/wp cron event list --fields=hook,next_run,recurrence | grep -i gravity\n#1767954064\n/usr/local/bin/wp cron event list --fields=hook,next_run,recurrence | grep -i webhook\n#1767954387\nwp cron event run --due-now\n#1770110959\ncd htdocs/\n#1770110960\nls\n#1770110989\ncd ..\n#1770110990\nls\n#1770110994\ncd tmp/\n#1770110994\nls\n#1770110996\ncd ..\n#1770110999\ncd files/\n#1770111000\nls\n#1770111012\nmkdir backups\n#1770111013\nls\n#1770111014\ncd backups/\n#1770111014\nls\n#1770111021\npwd\n#1770111032\ncd ..\n#1770111033\ncd htdocs/\n#1770111034\nls\n#1770111106\nwp db export - | gzip > /var/www/vhosts/afd.de/files/backups/afd-wordpress-db-$(date +%F).sql.gz\n#1784097346\ncd ..\n#1784097352\nl\n#1784097354\nls\n#1784097356\ncd afd.de/\n#1784097357\nls\n#1784097358\ncd htdocs/\n#1784097384\nwp eval '\n$response = wp_remote_get(home_url(\"/wp-json/\"));\nvar_dump($response);\n'\n#1784097428\nwp eval '\n$response = wp_remote_get(\"https://api.wordpress.org/\");\nvar_dump($response);\n'\n#1784097584\nwp cron event list --fields=hook,next_run_relative,next_run_gmt,recurrence --format=table\n#1784097766\nwp cron event list --format=csv | grep -Ei 'gpdf|gravity|pdf|background'\n#1784097844\nwp db query \"\nSELECT option_name, LENGTH(option_value) AS bytes\nFROM $(wp db prefix)options\nWHERE option_name LIKE '%gfpdf%'\n OR option_name LIKE '%gravitypdf%'\n OR option_name LIKE '%background%'\nORDER BY option_name;\n\"\n#1784097925\nwp option list --search='*queue*' --fields=option_name,size_bytes --format=table\n#1784097945\nwp option list --search='*gfpdf*' --fields=option_name,size_bytes --format=table\n#1784098063\nwp eval '\necho \"Gravity Forms: \" . ( class_exists(\"GFAPI\") ? \"OK\" : \"FEHLT\" ) . PHP_EOL;\necho \"Gravity PDF API: \" . ( class_exists(\"GPDFAPI\") ? \"OK\" : \"FEHLT\" ) . PHP_EOL;\n'\n#1784098112\nphp -m | grep -Ei 'mbstring|gd|dom|libxml|ctype'\n#1784537162\nwp .\n#1784537166\nwp help\n#1784537201\nwp core help\n#1784537204\nwp core --help\n#1784537212\nwp core version\n#1784537215\ncd htdocs/\n#1784537216\nwp core version\n#1784537218\nexit\n#1784613770\ncd htdocs/\n#1784613771\nls\n#1784613790\nwp core verify-checksums\n#1784613927\nfind wp-content/uploads -name \"*.php\"\n#1784614038\nwp user list --fields=ID,user_login,user_email,user_registered --orderby=user_registered --order=DESC --format=table\n#1784614089\nwp user list --fields=ID,user_login,user_email,user_registered,roles --orderby=user_registered --order=DESC --format=table\n#1784614137\nwp plugin list\n#1784614282\nwp core verify-checksums --include-root\n#1784614353\ngrep -R -E \"base64_decode|eval\\(|gzinflate|assert\\(|shell_exec|system\\(|passthru|get_routes() as $route => $handlers) { echo $route . PHP_EOL; }'\n#1789654856\ncd htdocs/\n#1789654857\nls\n#1789654862\ncd wp-content/plugins/\n#1789654862\nls\n#1789654867\nrm -rf mail2post/\n#1789654869\nls\n#1789712854\ncd htdocs/\n#1789712876\nwp core verify-checksums --include-root\n#1789712943\nrm -rf backup_pdfs/\n#1789712950\nwp core verify-checksums --include-root\n#1790853338\ncd ..\n#1790853344\ncd afd.de/\n#1790853345\ncd htdocs/\n#1790853346\nls\n#1790853356\nwp user list\n" }, { "kind": "mysql_history", "host": "afd.de", "path": "vhosts/afd.de/.mysql_history", "value": "_HiStOrY_V2_\nuse\\040afd_de;\nsohw\\040tables;\nshow\\040tables;\nALTER\\040TABLE\\040m7p4b7f_mapsvg6_objects_265219\\040ENGINE=InnoDB;\nALTER\\040TABLE\\040m7p4b7f_mapsvg6_objects\\040ENGINE=InnoDB;\nALTER\\040TABLE\\040m7p4b7f_WP_SEO_Redirection_LOG\\040ENGINE=InnoDB;\nALTER\\040TABLE\\040m7p4b7f_WP_SEO_404_links\\040ENGINE=InnoDB;\nALTER\\040TABLE\\040m7p4b7f_mapsvg6_objects_265221\\040ENGINE=InnoDB;\nALTER\\040TABLE\\040m7p4b7f_WP_SEO_Groups\\040ENGINE=InnoDB;\nALTER\\040TABLE\\040m7p4b7f_WP_SEO_Redirection\\040ENGINE=InnoDB;\nALTER\\040TABLE\\040m7p4b7f_mapsvg6_regions_265221\\040ENGINE=InnoDB;\nALTER\\040TABLE\\040m7p4b7f_mapsvg6_objects_103511\\040ENGINE=InnoDB;\nALTER\\040TABLE\\040m7p4b7f_WP_SEO_Cache\\040ENGINE=InnoDB;\nuse\\040linksrutsch_com;\nALTER\\040TABLE\\0406kPHNw_wps_statistic\\040\\040ENGINE=InnoDB;\nALTER\\040TABLE\\0406kPHNw_wps_st_options\\040ENGINE=InnoDB;\n" }, { "kind": "wordfence_auto_prepend", "host": "afd.de", "path": "vhosts/afd.de/.user.ini", "value": "; Wordfence WAF\nauto_prepend_file = '/var/www/vhosts/afd.de/httpdocs/wordfence-waf.php'\n; END Wordfence WAF" }, { "kind": "htpasswd", "host": "bestellung.alternita.de", "path": "vhosts/bestellung.alternita.de/.htpasswd", "user": "afd", "hash": "$apr1$OJxCb7ML$DiWq/aGPrirE7tOXOBiPw/", "value": "afd:$apr1$OJxCb7ML$DiWq/aGPrirE7tOXOBiPw/" }, { "kind": "mail_exfil_pipeline", "host": "wahlkampf.afd.de", "path": "vhosts/wahlkampf.afd.de/.maildump/", "mail_api_key": "ZEA4R2sEkegRafwLsLPyqnpVAz2EwNnOUb9HscWqZV6TaXejfScxXPOG5ubxzRIhfBfMTBhMWcE7HD95frJt7OXO1b4s8G59z8MqeuCxMP5CiJJpTkdCtsnrZmzsBsxj", "imap_host": "10.12.51.240", "api_base": "https://mail-management.afd.de/api/v1/users", "rekey_mailbox_password": "Rekey-AfD-2026!x9Qz", "pixeldrain_key": "4a424dd3-29b9-43ed-a507-e8fc546ce04e", "pushkey": { "mode": "0600", "readable": false, "note": "0600 owner wahlkampf.afd.de -> NOT readable as uid 1004" }, "slices_pushed": 1631, "index_lines": 21, "indexed_mailboxes": [ "archiv.lsg@afd.nrw", "bundesgeschaeftsstelle@alternativefuer.de", "bundesschiedsgericht@alternativefuer.de", "cna-test@alternita.gmbh", "fabian.jacobi@afd.nrw", "geschaeftsstelle@afd.nrw", "sascha.huemmer@afd-fanshop.de", "schiedsgericht@afd.nrw", "sebastian.lux@afd-fanshop.de" ], "push_log_ids_count": 2434, "scripts": [ "export_mailbox.py", "afd_burst.py", "hostpush.sh", "dbg_imap.py", "foldercheck.py" ], "unpushed_on_disk": "66 entries ~22GB .part (see 147_vault VAULT_ACCESS \u00a73.4)" }, { "kind": "cluster_config_allowlist", "scope": "server-status-anexia /server-status + 000-management_80.conf", "require_ip_count": 112, "require_ip": [ "188.172.206.52", "37.252.240.236", "10.100.18.247", "213.227.165.156", "10.102.4.248", "37.235.0.11", "188.172.194.29", "178.255.153.149", "10.102.8.247", "80.190.151.226", "194.112.130.154", "93.83.65.14", "188.65.75.57", "213.227.165.156", "10.102.4.247", "178.255.155.10", "94.16.100.53", "10.102.32.247", "127.0.0.1", "94.16.6.50", "10.102.77.247", "217.146.20.30", "10.102.82.249", "217.146.20.30", "10.102.82.247", "10.100.4.247", "185.2.179.28", "213.227.165.156", "10.102.4.246", "176.123.54.15", "193.33.114.246", "144.208.220.53", "10.102.19.247", "217.146.20.28", "94.16.0.97", "188.172.219.30", "178.255.156.162", "188.172.194.129", "188.172.195.41", "178.255.157.53", "10.102.1.248", "10.102.1.247", "178.255.157.54", "91.113.137.148", "37.252.248.40", "93.83.69.39", "46.38.225.200", "10.10.10.50", "194.1.206.228", "37.252.232.76", "10.102.15.247", "94.16.0.180", "80.122.196.206", "188.65.73.20", "188.65.77.77", "37.252.230.3", "37.252.229.19", "94.16.7.83", "162.250.4.53", "10.102.53.247", "162.220.221.142", "203.162.169.99", "10.102.39.247", "62.40.177.40", "139.220.243.53", "144.208.213.22", "10.152.1.247", "188.65.76.106", "10.130.4.2", "37.252.242.177", "37.252.248.110", "188.65.76.2", "144.208.215.4", "217.146.30.78", "10.100.6.247", "62.47.101.42", "213.227.165.156", "10.102.4.247", "37.252.233.60", "178.255.155.108", "10.102.7.247", "188.172.202.53", "10.102.11.247", "217.146.29.53", "10.102.13.247", "188.172.215.52", "10.102.33.247", "188.172.219.21", "10.102.63.247", "178.255.153.150", "10.102.8.248", "178.255.153.18", "217.146.23.192", "10.102.25.248", "185.2.179.28", "10.102.4.251", "185.2.179.28", "10.102.4.250", "188.172.233.19", "10.102.6.248", "10.102.25.247", "37.252.248.124", "10.152.1.248", "144.208.213.22", "10.102.77.248", "94.16.6.130", "10.61.35.8", "188.65.74.129", "188.65.77.77", "202.61.208.17", "2a00:11c0:1337:b0f4::1", "10.0.2.140" ], "note": "~120 public monitoring IPs + internal subnets (10.100/10.102/10.130/10.150/10.152/10.61/10.10) that can hit server-status" }, { "kind": "php_fpm_misconfig", "finding": "php_admin_value[allow_url_include]=On", "pools_with_it": [ "afd.berlin.conf", "afd.de.conf", "afdbayern.de.conf", "afdkompakt.de.conf", "alice-weidel.de.conf", "bestellung.alternita.de.conf", "bilddatenbank.afd.de.conf", "gemeinsam-fuer-das-grundgesetz.de.conf", "gesund-ohne-zwang.de.conf", "linksrutsch.com.conf", "mitmachen.afd.de.conf", "spenden.afd.de.conf", "stammdaten.afd.de.conf", "volkskanzler.at.conf" ], "count": 14, "note": "remote-include misconfig on every FPM pool + pm.status_path=/fpm-status" } ] }