Linux server.kiran-academy.com 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
: 194.233.91.196 | : 216.73.216.247
Cant Read [ /etc/named.conf ]
7.4.32
finalho
www.github.com/MadExploits
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
README
+ Create Folder
+ Create File
/
usr /
local /
maldetect.bk28240 /
[ HOME SHELL ]
Name
Size
Permission
Action
clean
[ DIR ]
drwxr-xr-x
cron
[ DIR ]
drwxr-xr-x
internals
[ DIR ]
drwxr-xr-x
logs
[ DIR ]
drwxr-xr-x
maldetect.bk6107
[ DIR ]
drwxr-xr-x
pub
[ DIR ]
drwxr-xr-x
quarantine
[ DIR ]
drwxr-x---
service
[ DIR ]
drwxr-xr-x
sess
[ DIR ]
drwxr-x---
sigs
[ DIR ]
drwxr-xr-x
sigs.old
[ DIR ]
drwxr-xr-x
tmp
[ DIR ]
drwxr-xr-x
CHANGELOG
47.91
KB
-rw-r--r--
COPYING.GPL
17.67
KB
-rw-r--r--
README
23.87
KB
-rw-r--r--
VERSION
6
B
-rw-r--r--
VERSION.hash
64
B
-rw-r--r--
conf.maldet
15.19
KB
-rw-r--r--
conf.maldet.cron
155
B
-rw-r--r--
event_log
137.72
KB
-rw-r--r--
hookscan.sh
702
B
-rwxr-xr-x
ignore_file_ext
0
B
-rw-r--r--
ignore_inotify
201
B
-rw-r--r--
ignore_paths
44
B
-rw-r--r--
ignore_sigs
0
B
-rw-r--r--
maldet
7.47
KB
-rwxr-xr-x
maldet.1.gz
3.94
KB
-rw-r--r--
modsec.sh
702
B
-rwxr-xr-x
monitor_paths
0
B
-rw-r--r--
uninstall.sh
1.54
KB
-rwxr-xr-x
Delete
Unzip
Zip
${this.title}
Close
Code Editor : event_log
May 14 2026 03:51:09 server maldet(6656): {sigup} performing signature update check... May 14 2026 03:51:09 server maldet(6656): {sigup} could not determine signature version May 14 2026 03:51:10 server maldet(6656): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 14 2026 03:51:10 server maldet(6656): {sigup} signature files missing or corrupted, forcing update... May 14 2026 03:51:10 server maldet(6656): {sigup} new signature set 2026051290484 available May 14 2026 03:51:10 server maldet(6656): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 14 2026 03:51:12 server maldet(6656): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 14 2026 03:51:13 server maldet(6656): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 14 2026 03:51:13 server maldet(6656): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 14 2026 03:51:13 server maldet(6656): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 14 2026 03:51:14 server maldet(6656): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 14 2026 03:51:14 server maldet(6656): {sigup} verified md5sum of maldet-sigpack.tgz May 14 2026 03:51:14 server maldet(6656): {sigup} unpacked and installed maldet-sigpack.tgz May 14 2026 03:51:15 server maldet(6656): {sigup} verified md5sum of maldet-clean.tgz May 14 2026 03:51:15 server maldet(6656): {sigup} unpacked and installed maldet-clean.tgz May 14 2026 03:51:15 server maldet(6656): {sigup} signature set update completed May 14 2026 03:51:15 server maldet(6656): {sigup} 51468 signatures (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 14 2026 03:51:15 server maldet(5609): {update} completed update v1.6.6 3a1792 => v1.6.6 e54dca, running signature updates... May 14 2026 03:51:16 server maldet(7240): {sigup} performing signature update check... May 14 2026 03:51:16 server maldet(7240): {sigup} local signature set is version 2026051290484 May 14 2026 03:51:17 server maldet(7240): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 14 2026 03:51:17 server maldet(7240): {sigup} latest signature set already installed May 14 2026 03:51:17 server maldet(5609): {update} update and config import completed May 14 2026 03:51:18 server maldet(7706): {sigup} performing signature update check... May 14 2026 03:51:18 server maldet(7706): {sigup} local signature set is version 2026051290484 May 14 2026 03:51:19 server maldet(7706): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 14 2026 03:51:19 server maldet(7706): {sigup} latest signature set already installed May 14 2026 03:51:20 server maldet(8163): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 14 2026 03:51:21 server maldet(8163): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 14 2026 03:51:21 server maldet(8163): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 14 2026 03:51:21 server maldet(8163): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 14 2026 03:51:22 server maldet(8163): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 14 2026 03:51:36 server maldet(8163): {scan} file list completed in 15s, found 626 files... May 14 2026 03:51:36 server maldet(8163): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 14 2026 03:51:36 server maldet(8163): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (626 files) in progress... May 14 2026 04:03:27 server maldet(8163): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 626, malware hits 0, cleaned hits 0, time 726s May 14 2026 04:03:27 server maldet(8163): {scan} scan report saved, to view run: maldet --report 260514-0351.8163 May 15 2026 03:16:54 server maldet(28548): {update} checking for available updates... May 15 2026 03:16:55 server maldet(28548): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 15 2026 03:16:55 server maldet(28548): {update} hashing install files and checking against server... May 15 2026 03:16:55 server maldet(28548): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 15 2026 03:16:55 server maldet(28548): {update} latest version already installed. May 15 2026 03:16:56 server maldet(29016): {sigup} performing signature update check... May 15 2026 03:16:57 server maldet(29016): {sigup} local signature set is version 2026051290484 May 15 2026 03:16:58 server maldet(29016): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 15 2026 03:16:58 server maldet(29016): {sigup} latest signature set already installed May 15 2026 03:16:58 server maldet(29471): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 15 2026 03:16:59 server maldet(29471): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 15 2026 03:16:59 server maldet(29471): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 15 2026 03:16:59 server maldet(29471): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 15 2026 03:16:59 server maldet(29471): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 15 2026 03:17:11 server maldet(29471): {scan} file list completed in 12s, found 952 files... May 15 2026 03:17:11 server maldet(29471): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 15 2026 03:17:11 server maldet(29471): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (952 files) in progress... May 15 2026 03:29:03 server maldet(29471): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 952, malware hits 0, cleaned hits 0, time 725s May 15 2026 03:29:03 server maldet(29471): {scan} scan report saved, to view run: maldet --report 260515-0316.29471 May 16 2026 03:55:49 server maldet(24029): {update} checking for available updates... May 16 2026 03:55:50 server maldet(24029): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 16 2026 03:55:50 server maldet(24029): {update} hashing install files and checking against server... May 16 2026 03:55:51 server maldet(24029): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 16 2026 03:55:51 server maldet(24029): {update} latest version already installed. May 16 2026 03:55:51 server maldet(24501): {sigup} performing signature update check... May 16 2026 03:55:51 server maldet(24501): {sigup} local signature set is version 2026051290484 May 16 2026 03:55:52 server maldet(24501): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 16 2026 03:55:52 server maldet(24501): {sigup} latest signature set already installed May 16 2026 03:55:53 server maldet(24951): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 16 2026 03:55:55 server maldet(24951): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 16 2026 03:55:55 server maldet(24951): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 16 2026 03:55:55 server maldet(24951): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 16 2026 03:55:55 server maldet(24951): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 16 2026 03:56:23 server maldet(24951): {scan} file list completed in 28s, found 931 files... May 16 2026 03:56:23 server maldet(24951): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 16 2026 03:56:23 server maldet(24951): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (931 files) in progress... May 16 2026 04:01:36 server maldet(24951): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 931, malware hits 0, cleaned hits 0, time 343s May 16 2026 04:01:36 server maldet(24951): {scan} scan report saved, to view run: maldet --report 260516-0355.24951 May 17 2026 03:19:53 server maldet(27688): {update} checking for available updates... May 17 2026 03:19:54 server maldet(27688): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 17 2026 03:19:54 server maldet(27688): {update} hashing install files and checking against server... May 17 2026 03:19:56 server maldet(27688): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 17 2026 03:19:56 server maldet(27688): {update} latest version already installed. May 17 2026 03:19:59 server maldet(28149): {sigup} performing signature update check... May 17 2026 03:19:59 server maldet(28149): {sigup} local signature set is version 2026051290484 May 17 2026 03:20:00 server maldet(28149): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 17 2026 03:20:01 server maldet(28149): {sigup} latest signature set already installed May 17 2026 03:20:07 server maldet(28596): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 17 2026 03:20:13 server maldet(28596): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 17 2026 03:20:13 server maldet(28596): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 17 2026 03:20:13 server maldet(28596): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 17 2026 03:20:13 server maldet(28596): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 17 2026 03:20:39 server maldet(28596): {scan} file list completed in 26s, found 996 files... May 17 2026 03:20:39 server maldet(28596): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 17 2026 03:20:40 server maldet(28596): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (996 files) in progress... May 17 2026 03:27:11 server maldet(28596): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 996, malware hits 0, cleaned hits 0, time 423s May 17 2026 03:27:11 server maldet(28596): {scan} scan report saved, to view run: maldet --report 260517-0320.28596 May 18 2026 04:01:19 server maldet(1936): {update} checking for available updates... May 18 2026 04:01:20 server maldet(1936): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 18 2026 04:01:20 server maldet(1936): {update} hashing install files and checking against server... May 18 2026 04:01:20 server maldet(1936): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 18 2026 04:01:20 server maldet(1936): {update} latest version already installed. May 18 2026 04:01:21 server maldet(2405): {sigup} performing signature update check... May 18 2026 04:01:21 server maldet(2405): {sigup} local signature set is version 2026051290484 May 18 2026 04:01:21 server maldet(2405): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 18 2026 04:01:21 server maldet(2405): {sigup} latest signature set already installed May 18 2026 04:01:22 server maldet(2845): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 18 2026 04:01:23 server maldet(2845): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 18 2026 04:01:23 server maldet(2845): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 18 2026 04:01:23 server maldet(2845): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 18 2026 04:01:23 server maldet(2845): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 18 2026 04:01:35 server maldet(2845): {scan} file list completed in 12s, found 1342 files... May 18 2026 04:01:35 server maldet(2845): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 18 2026 04:01:35 server maldet(2845): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1342 files) in progress... May 18 2026 04:07:46 server maldet(2845): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1342, malware hits 0, cleaned hits 0, time 384s May 18 2026 04:07:46 server maldet(2845): {scan} scan report saved, to view run: maldet --report 260518-0401.2845 May 19 2026 03:28:35 server maldet(25157): {update} checking for available updates... May 19 2026 03:28:37 server maldet(25157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 19 2026 03:28:37 server maldet(25157): {update} hashing install files and checking against server... May 19 2026 03:28:39 server maldet(25157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 19 2026 03:28:39 server maldet(25157): {update} latest version already installed. May 19 2026 03:28:41 server maldet(25632): {sigup} performing signature update check... May 19 2026 03:28:41 server maldet(25632): {sigup} local signature set is version 2026051290484 May 19 2026 03:28:42 server maldet(25632): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 19 2026 03:28:42 server maldet(25632): {sigup} latest signature set already installed May 19 2026 03:28:44 server maldet(26082): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 19 2026 03:28:47 server maldet(26082): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 19 2026 03:28:47 server maldet(26082): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 19 2026 03:28:47 server maldet(26082): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 19 2026 03:28:47 server maldet(26082): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 19 2026 03:30:37 server maldet(26082): {scan} file list completed in 110s, found 1282 files... May 19 2026 03:30:37 server maldet(26082): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 19 2026 03:30:37 server maldet(26082): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1282 files) in progress... May 19 2026 03:37:53 server maldet(26082): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1282, malware hits 0, cleaned hits 0, time 549s May 19 2026 03:37:53 server maldet(26082): {scan} scan report saved, to view run: maldet --report 260519-0328.26082 May 20 2026 03:47:20 server maldet(25508): {update} checking for available updates... May 20 2026 03:47:21 server maldet(25508): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 20 2026 03:47:21 server maldet(25508): {update} hashing install files and checking against server... May 20 2026 03:47:21 server maldet(25508): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 20 2026 03:47:22 server maldet(25508): {update} latest version already installed. May 20 2026 03:47:23 server maldet(25993): {sigup} performing signature update check... May 20 2026 03:47:23 server maldet(25993): {sigup} local signature set is version 2026051290484 May 20 2026 03:47:23 server maldet(25993): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 20 2026 03:47:23 server maldet(25993): {sigup} latest signature set already installed May 20 2026 03:47:25 server maldet(26450): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 20 2026 03:47:26 server maldet(26450): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 20 2026 03:47:26 server maldet(26450): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 20 2026 03:47:26 server maldet(26450): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 20 2026 03:47:26 server maldet(26450): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 20 2026 03:47:44 server maldet(26450): {scan} file list completed in 18s, found 1619 files... May 20 2026 03:47:44 server maldet(26450): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 20 2026 03:47:44 server maldet(26450): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1619 files) in progress... May 20 2026 04:10:19 server maldet(26450): {hit} malware hit {CAV}Unix.Exploit.Pkexecexploit-10034078-0 found for /tmp/.Test-unix/pwnkit May 20 2026 04:10:19 server maldet(26450): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1619, malware hits 1, cleaned hits 0, time 1374s May 20 2026 04:10:19 server maldet(26450): {scan} scan report saved, to view run: maldet --report 260520-0347.26450 May 20 2026 04:10:19 server maldet(26450): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260520-0347.26450 May 21 2026 03:49:21 server maldet(11792): {update} checking for available updates... May 21 2026 03:49:22 server maldet(11792): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 21 2026 03:49:22 server maldet(11792): {update} hashing install files and checking against server... May 21 2026 03:49:23 server maldet(11792): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 21 2026 03:49:23 server maldet(11792): {update} latest version already installed. May 21 2026 03:49:24 server maldet(12265): {sigup} performing signature update check... May 21 2026 03:49:24 server maldet(12265): {sigup} local signature set is version 2026051290484 May 21 2026 03:49:24 server maldet(12265): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 21 2026 03:49:24 server maldet(12265): {sigup} latest signature set already installed May 21 2026 03:49:26 server maldet(12736): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 21 2026 03:49:27 server maldet(12736): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 21 2026 03:49:27 server maldet(12736): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 21 2026 03:49:27 server maldet(12736): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 21 2026 03:49:27 server maldet(12736): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 21 2026 03:49:43 server maldet(12736): {scan} file list completed in 16s, found 1380 files... May 21 2026 03:49:43 server maldet(12736): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 21 2026 03:49:43 server maldet(12736): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1380 files) in progress... May 21 2026 03:54:37 server maldet(12736): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1380, malware hits 0, cleaned hits 0, time 311s May 21 2026 03:54:37 server maldet(12736): {scan} scan report saved, to view run: maldet --report 260521-0349.12736 May 22 2026 03:40:57 server maldet(2601): {update} checking for available updates... May 22 2026 03:41:01 server maldet(2601): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 22 2026 03:41:02 server maldet(2601): {update} hashing install files and checking against server... May 22 2026 03:41:05 server maldet(2601): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 22 2026 03:41:05 server maldet(2601): {update} latest version already installed. May 22 2026 03:41:11 server maldet(3151): {sigup} performing signature update check... May 22 2026 03:41:12 server maldet(3151): {sigup} local signature set is version 2026051290484 May 22 2026 03:41:15 server maldet(3151): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 22 2026 03:41:16 server maldet(3151): {sigup} latest signature set already installed May 22 2026 03:41:29 server maldet(3628): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 22 2026 03:41:32 server maldet(3628): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 22 2026 03:41:33 server maldet(3628): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 22 2026 03:41:33 server maldet(3628): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 22 2026 03:41:33 server maldet(3628): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 22 2026 03:43:34 server maldet(3628): {scan} file list completed in 121s, found 1495 files... May 22 2026 03:43:34 server maldet(3628): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 22 2026 03:43:35 server maldet(3628): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1495 files) in progress... May 22 2026 04:05:25 server maldet(3628): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1495, malware hits 0, cleaned hits 0, time 1436s May 22 2026 04:05:25 server maldet(3628): {scan} scan report saved, to view run: maldet --report 260522-0341.3628 May 23 2026 03:29:54 server maldet(10347): {update} checking for available updates... May 23 2026 03:29:55 server maldet(10347): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 23 2026 03:29:55 server maldet(10347): {update} hashing install files and checking against server... May 23 2026 03:29:56 server maldet(10347): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 23 2026 03:29:56 server maldet(10347): {update} latest version already installed. May 23 2026 03:29:57 server maldet(10810): {sigup} performing signature update check... May 23 2026 03:29:57 server maldet(10810): {sigup} local signature set is version 2026051290484 May 23 2026 03:29:57 server maldet(10810): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 23 2026 03:29:58 server maldet(10810): {sigup} latest signature set already installed May 23 2026 03:29:58 server maldet(11251): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 23 2026 03:29:59 server maldet(11251): {scan} signatures loaded: 51468 (45387 MD5 | 2375 HEX | 3706 YARA | 0 USER) May 23 2026 03:29:59 server maldet(11251): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 23 2026 03:29:59 server maldet(11251): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 23 2026 03:29:59 server maldet(11251): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 23 2026 03:30:30 server maldet(11251): {scan} file list completed in 31s, found 1808 files... May 23 2026 03:30:30 server maldet(11251): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 23 2026 03:30:30 server maldet(11251): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1808 files) in progress... May 23 2026 03:48:42 server maldet(11251): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1808, malware hits 0, cleaned hits 0, time 1124s May 23 2026 03:48:42 server maldet(11251): {scan} scan report saved, to view run: maldet --report 260523-0329.11251 May 24 2026 03:50:50 server maldet(20156): {update} checking for available updates... May 24 2026 03:50:50 server maldet(20156): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 24 2026 03:50:50 server maldet(20156): {update} hashing install files and checking against server... May 24 2026 03:50:51 server maldet(20156): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 24 2026 03:50:51 server maldet(20156): {update} latest version already installed. May 24 2026 03:50:52 server maldet(20634): {sigup} performing signature update check... May 24 2026 03:50:52 server maldet(20634): {sigup} local signature set is version 2026051290484 May 24 2026 03:50:52 server maldet(20634): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 24 2026 03:50:52 server maldet(20634): {sigup} new signature set 2026052390483 available May 24 2026 03:50:52 server maldet(20634): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 24 2026 03:50:53 server maldet(20634): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 24 2026 03:50:54 server maldet(20634): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 24 2026 03:50:54 server maldet(20634): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 24 2026 03:50:54 server maldet(20634): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 24 2026 03:50:54 server maldet(20634): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 24 2026 03:50:55 server maldet(20634): {sigup} verified md5sum of maldet-sigpack.tgz May 24 2026 03:50:55 server maldet(20634): {sigup} unpacked and installed maldet-sigpack.tgz May 24 2026 03:50:55 server maldet(20634): {sigup} verified md5sum of maldet-clean.tgz May 24 2026 03:50:55 server maldet(20634): {sigup} unpacked and installed maldet-clean.tgz May 24 2026 03:50:55 server maldet(20634): {sigup} signature set update completed May 24 2026 03:50:55 server maldet(20634): {sigup} 51467 signatures (45387 MD5 | 2374 HEX | 3706 YARA | 0 USER) May 24 2026 03:50:56 server maldet(21212): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 24 2026 03:50:57 server maldet(21212): {scan} signatures loaded: 51467 (45387 MD5 | 2374 HEX | 3706 YARA | 0 USER) May 24 2026 03:50:57 server maldet(21212): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 24 2026 03:50:57 server maldet(21212): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 24 2026 03:50:57 server maldet(21212): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 24 2026 03:51:09 server maldet(21212): {scan} file list completed in 12s, found 1457 files... May 24 2026 03:51:09 server maldet(21212): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 24 2026 03:51:09 server maldet(21212): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1457 files) in progress... May 24 2026 03:59:59 server maldet(21212): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1457, malware hits 0, cleaned hits 0, time 543s May 24 2026 03:59:59 server maldet(21212): {scan} scan report saved, to view run: maldet --report 260524-0350.21212 May 25 2026 03:28:58 server maldet(8924): {update} checking for available updates... May 25 2026 03:28:59 server maldet(8924): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 25 2026 03:28:59 server maldet(8924): {update} hashing install files and checking against server... May 25 2026 03:29:00 server maldet(8924): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 25 2026 03:29:00 server maldet(8924): {update} latest version already installed. May 25 2026 03:29:01 server maldet(9386): {sigup} performing signature update check... May 25 2026 03:29:01 server maldet(9386): {sigup} local signature set is version 2026052390483 May 25 2026 03:29:01 server maldet(9386): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 25 2026 03:29:01 server maldet(9386): {sigup} new signature set 2026052490478 available May 25 2026 03:29:01 server maldet(9386): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 25 2026 03:29:02 server maldet(9386): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 25 2026 03:29:03 server maldet(9386): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 25 2026 03:29:03 server maldet(9386): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 25 2026 03:29:04 server maldet(9386): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 25 2026 03:29:05 server maldet(9386): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 25 2026 03:29:05 server maldet(9386): {sigup} verified md5sum of maldet-sigpack.tgz May 25 2026 03:29:05 server maldet(9386): {sigup} unpacked and installed maldet-sigpack.tgz May 25 2026 03:29:06 server maldet(9386): {sigup} verified md5sum of maldet-clean.tgz May 25 2026 03:29:06 server maldet(9386): {sigup} unpacked and installed maldet-clean.tgz May 25 2026 03:29:06 server maldet(9386): {sigup} signature set update completed May 25 2026 03:29:06 server maldet(9386): {sigup} 51464 signatures (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 25 2026 03:29:06 server maldet(9961): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 25 2026 03:29:07 server maldet(9961): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 25 2026 03:29:07 server maldet(9961): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 25 2026 03:29:07 server maldet(9961): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 25 2026 03:29:07 server maldet(9961): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 25 2026 03:29:29 server maldet(9961): {scan} file list completed in 22s, found 1500 files... May 25 2026 03:29:29 server maldet(9961): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 25 2026 03:29:29 server maldet(9961): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1500 files) in progress... May 25 2026 03:33:45 server maldet(9961): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1500, malware hits 0, cleaned hits 0, time 279s May 25 2026 03:33:46 server maldet(9961): {scan} scan report saved, to view run: maldet --report 260525-0329.9961 May 26 2026 03:14:10 server maldet(21957): {update} checking for available updates... May 26 2026 03:14:10 server maldet(21957): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 26 2026 03:14:10 server maldet(21957): {update} hashing install files and checking against server... May 26 2026 03:14:11 server maldet(21957): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 26 2026 03:14:11 server maldet(21957): {update} latest version already installed. May 26 2026 03:14:12 server maldet(22458): {sigup} performing signature update check... May 26 2026 03:14:12 server maldet(22458): {sigup} local signature set is version 2026052490478 May 26 2026 03:14:12 server maldet(22458): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 26 2026 03:14:12 server maldet(22458): {sigup} latest signature set already installed May 26 2026 03:14:13 server maldet(22951): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 26 2026 03:14:14 server maldet(22951): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 26 2026 03:14:14 server maldet(22951): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 26 2026 03:14:14 server maldet(22951): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 26 2026 03:14:14 server maldet(22951): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 26 2026 03:14:29 server maldet(22951): {scan} file list completed in 15s, found 1657 files... May 26 2026 03:14:29 server maldet(22951): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 26 2026 03:14:29 server maldet(22951): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1657 files) in progress... May 26 2026 03:19:54 server maldet(22951): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1657, malware hits 0, cleaned hits 0, time 341s May 26 2026 03:19:54 server maldet(22951): {scan} scan report saved, to view run: maldet --report 260526-0314.22951 May 27 2026 03:45:31 server maldet(26177): {update} checking for available updates... May 27 2026 03:45:32 server maldet(26177): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 27 2026 03:45:32 server maldet(26177): {update} hashing install files and checking against server... May 27 2026 03:45:33 server maldet(26177): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 27 2026 03:45:33 server maldet(26177): {update} latest version already installed. May 27 2026 03:45:34 server maldet(26640): {sigup} performing signature update check... May 27 2026 03:45:34 server maldet(26640): {sigup} local signature set is version 2026052490478 May 27 2026 03:45:35 server maldet(26640): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 27 2026 03:45:35 server maldet(26640): {sigup} latest signature set already installed May 27 2026 03:45:36 server maldet(27082): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 27 2026 03:45:37 server maldet(27082): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 27 2026 03:45:37 server maldet(27082): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 27 2026 03:45:37 server maldet(27082): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 27 2026 03:45:37 server maldet(27082): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 27 2026 03:45:59 server maldet(27082): {scan} file list completed in 22s, found 1727 files... May 27 2026 03:45:59 server maldet(27082): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 27 2026 03:45:59 server maldet(27082): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1727 files) in progress... May 27 2026 03:51:40 server maldet(27082): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1727, malware hits 0, cleaned hits 0, time 364s May 27 2026 03:51:40 server maldet(27082): {scan} scan report saved, to view run: maldet --report 260527-0345.27082 May 28 2026 03:40:11 server maldet(21077): {update} checking for available updates... May 28 2026 03:40:11 server maldet(21077): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 28 2026 03:40:11 server maldet(21077): {update} hashing install files and checking against server... May 28 2026 03:40:13 server maldet(21077): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 28 2026 03:40:13 server maldet(21077): {update} latest version already installed. May 28 2026 03:40:15 server maldet(21574): {sigup} performing signature update check... May 28 2026 03:40:15 server maldet(21574): {sigup} local signature set is version 2026052490478 May 28 2026 03:40:16 server maldet(21574): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 28 2026 03:40:16 server maldet(21574): {sigup} latest signature set already installed May 28 2026 03:40:19 server maldet(22040): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 28 2026 03:40:20 server maldet(22040): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 28 2026 03:40:21 server maldet(22040): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 28 2026 03:40:21 server maldet(22040): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 28 2026 03:40:21 server maldet(22040): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 28 2026 03:41:25 server maldet(22040): {scan} file list completed in 64s, found 1610 files... May 28 2026 03:41:26 server maldet(22040): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 28 2026 03:41:26 server maldet(22040): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1610 files) in progress... May 28 2026 03:49:29 server maldet(22040): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1610, malware hits 0, cleaned hits 0, time 549s May 28 2026 03:49:29 server maldet(22040): {scan} scan report saved, to view run: maldet --report 260528-0340.22040 May 29 2026 03:57:15 server maldet(2349): {update} checking for available updates... May 29 2026 03:57:16 server maldet(2349): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 29 2026 03:57:16 server maldet(2349): {update} hashing install files and checking against server... May 29 2026 03:57:17 server maldet(2349): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 29 2026 03:57:17 server maldet(2349): {update} latest version already installed. May 29 2026 03:57:21 server maldet(2823): {sigup} performing signature update check... May 29 2026 03:57:21 server maldet(2823): {sigup} local signature set is version 2026052490478 May 29 2026 03:57:21 server maldet(2823): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 29 2026 03:57:21 server maldet(2823): {sigup} latest signature set already installed May 29 2026 03:57:24 server maldet(3283): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 29 2026 03:57:25 server maldet(3283): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 29 2026 03:57:25 server maldet(3283): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 29 2026 03:57:25 server maldet(3283): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 29 2026 03:57:25 server maldet(3283): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 29 2026 03:58:27 server maldet(3283): {scan} file list completed in 62s, found 1546 files... May 29 2026 03:58:27 server maldet(3283): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 29 2026 03:58:27 server maldet(3283): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1546 files) in progress... May 29 2026 04:05:49 server maldet(3283): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1546, malware hits 0, cleaned hits 0, time 505s May 29 2026 04:05:49 server maldet(3283): {scan} scan report saved, to view run: maldet --report 260529-0357.3283 May 30 2026 03:17:12 server maldet(22269): {update} checking for available updates... May 30 2026 03:17:13 server maldet(22269): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 30 2026 03:17:13 server maldet(22269): {update} hashing install files and checking against server... May 30 2026 03:17:14 server maldet(22269): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 30 2026 03:17:14 server maldet(22269): {update} latest version already installed. May 30 2026 03:17:15 server maldet(22797): {sigup} performing signature update check... May 30 2026 03:17:15 server maldet(22797): {sigup} local signature set is version 2026052490478 May 30 2026 03:17:16 server maldet(22797): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 30 2026 03:17:16 server maldet(22797): {sigup} latest signature set already installed May 30 2026 03:17:18 server maldet(23328): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 30 2026 03:17:19 server maldet(23328): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 30 2026 03:17:19 server maldet(23328): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 30 2026 03:17:19 server maldet(23328): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 30 2026 03:17:19 server maldet(23328): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 30 2026 03:17:35 server maldet(23328): {scan} file list completed in 16s, found 1641 files... May 30 2026 03:17:35 server maldet(23328): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 30 2026 03:17:35 server maldet(23328): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1641 files) in progress... May 30 2026 03:23:02 server maldet(23328): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1641, malware hits 0, cleaned hits 0, time 344s May 30 2026 03:23:02 server maldet(23328): {scan} scan report saved, to view run: maldet --report 260530-0317.23328 May 31 2026 03:24:08 server maldet(12806): {update} checking for available updates... May 31 2026 03:24:09 server maldet(12806): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 31 2026 03:24:09 server maldet(12806): {update} hashing install files and checking against server... May 31 2026 03:24:11 server maldet(12806): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 31 2026 03:24:11 server maldet(12806): {update} latest version already installed. May 31 2026 03:24:11 server maldet(13320): {sigup} performing signature update check... May 31 2026 03:24:11 server maldet(13320): {sigup} local signature set is version 2026052490478 May 31 2026 03:24:13 server maldet(13320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 31 2026 03:24:13 server maldet(13320): {sigup} latest signature set already installed May 31 2026 03:24:13 server maldet(13757): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 31 2026 03:24:14 server maldet(13757): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) May 31 2026 03:24:14 server maldet(13757): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 31 2026 03:24:14 server maldet(13757): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 31 2026 03:24:14 server maldet(13757): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 May 31 2026 03:24:25 server maldet(13757): {scan} file list completed in 11s, found 773 files... May 31 2026 03:24:25 server maldet(13757): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... May 31 2026 03:24:25 server maldet(13757): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (773 files) in progress... May 31 2026 03:25:49 server maldet(13757): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 773, malware hits 0, cleaned hits 0, time 96s May 31 2026 03:25:49 server maldet(13757): {scan} scan report saved, to view run: maldet --report 260531-0324.13757 Jun 01 2026 03:29:04 server maldet(17585): {update} checking for available updates... Jun 01 2026 03:29:04 server maldet(17585): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 01 2026 03:29:04 server maldet(17585): {update} hashing install files and checking against server... Jun 01 2026 03:29:04 server maldet(17585): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 01 2026 03:29:04 server maldet(17585): {update} latest version already installed. Jun 01 2026 03:29:05 server maldet(18032): {sigup} performing signature update check... Jun 01 2026 03:29:05 server maldet(18032): {sigup} local signature set is version 2026052490478 Jun 01 2026 03:29:06 server maldet(18032): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 01 2026 03:29:06 server maldet(18032): {sigup} latest signature set already installed Jun 01 2026 03:29:07 server maldet(18459): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 01 2026 03:29:07 server maldet(18459): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 01 2026 03:29:07 server maldet(18459): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 01 2026 03:29:07 server maldet(18459): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 01 2026 03:29:07 server maldet(18459): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 01 2026 03:29:14 server maldet(18459): {scan} file list completed in 7s, found 178 files... Jun 01 2026 03:29:14 server maldet(18459): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 01 2026 03:29:14 server maldet(18459): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (178 files) in progress... Jun 01 2026 03:30:10 server maldet(18459): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 178, malware hits 0, cleaned hits 0, time 63s Jun 01 2026 03:30:10 server maldet(18459): {scan} scan report saved, to view run: maldet --report 260601-0329.18459 Jun 02 2026 03:28:24 server maldet(27976): {update} checking for available updates... Jun 02 2026 03:28:25 server maldet(27976): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 02 2026 03:28:25 server maldet(27976): {update} hashing install files and checking against server... Jun 02 2026 03:28:25 server maldet(27976): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 02 2026 03:28:25 server maldet(27976): {update} latest version already installed. Jun 02 2026 03:28:26 server maldet(28453): {sigup} performing signature update check... Jun 02 2026 03:28:26 server maldet(28453): {sigup} local signature set is version 2026052490478 Jun 02 2026 03:28:27 server maldet(28453): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 02 2026 03:28:27 server maldet(28453): {sigup} latest signature set already installed Jun 02 2026 03:28:28 server maldet(28910): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 02 2026 03:28:28 server maldet(28910): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 02 2026 03:28:28 server maldet(28910): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 02 2026 03:28:28 server maldet(28910): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 02 2026 03:28:28 server maldet(28910): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 02 2026 03:28:36 server maldet(28910): {scan} file list completed in 8s, found 1075 files... Jun 02 2026 03:28:36 server maldet(28910): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 02 2026 03:28:36 server maldet(28910): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1075 files) in progress... Jun 02 2026 03:30:08 server maldet(28910): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1075, malware hits 0, cleaned hits 0, time 100s Jun 02 2026 03:30:08 server maldet(28910): {scan} scan report saved, to view run: maldet --report 260602-0328.28910 Jun 03 2026 03:54:39 server maldet(2161): {update} checking for available updates... Jun 03 2026 03:54:39 server maldet(2161): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 03 2026 03:54:39 server maldet(2161): {update} hashing install files and checking against server... Jun 03 2026 03:54:39 server maldet(2161): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 03 2026 03:54:39 server maldet(2161): {update} latest version already installed. Jun 03 2026 03:54:40 server maldet(2638): {sigup} performing signature update check... Jun 03 2026 03:54:40 server maldet(2638): {sigup} local signature set is version 2026052490478 Jun 03 2026 03:54:41 server maldet(2638): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 03 2026 03:54:41 server maldet(2638): {sigup} latest signature set already installed Jun 03 2026 03:54:41 server maldet(3091): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 03 2026 03:54:42 server maldet(3091): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 03 2026 03:54:42 server maldet(3091): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 03 2026 03:54:42 server maldet(3091): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 03 2026 03:54:42 server maldet(3091): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 03 2026 03:54:52 server maldet(3091): {scan} file list completed in 10s, found 1483 files... Jun 03 2026 03:54:52 server maldet(3091): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 03 2026 03:54:52 server maldet(3091): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1483 files) in progress... Jun 03 2026 03:56:42 server maldet(3091): {hit} malware hit {CAV}Unix.Exploit.Pkexecexploit-10034078-0 found for /tmp/.X11-unix/pwnkit Jun 03 2026 03:56:43 server maldet(3091): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1483, malware hits 1, cleaned hits 0, time 121s Jun 03 2026 03:56:43 server maldet(3091): {scan} scan report saved, to view run: maldet --report 260603-0354.3091 Jun 03 2026 03:56:43 server maldet(3091): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260603-0354.3091 Jun 04 2026 03:54:34 server maldet(27140): {update} checking for available updates... Jun 04 2026 03:54:36 server maldet(27140): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 04 2026 03:54:36 server maldet(27140): {update} hashing install files and checking against server... Jun 04 2026 03:54:36 server maldet(27140): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 04 2026 03:54:36 server maldet(27140): {update} latest version already installed. Jun 04 2026 03:54:39 server maldet(27637): {sigup} performing signature update check... Jun 04 2026 03:54:39 server maldet(27637): {sigup} local signature set is version 2026052490478 Jun 04 2026 03:54:40 server maldet(27637): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 04 2026 03:54:40 server maldet(27637): {sigup} latest signature set already installed Jun 04 2026 03:54:42 server maldet(28111): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 04 2026 03:54:45 server maldet(28111): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 04 2026 03:54:45 server maldet(28111): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 04 2026 03:54:45 server maldet(28111): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 04 2026 03:54:45 server maldet(28111): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 04 2026 03:57:17 server maldet(28111): {scan} file list completed in 152s, found 1955 files... Jun 04 2026 03:57:17 server maldet(28111): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 04 2026 03:57:17 server maldet(28111): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1955 files) in progress... Jun 04 2026 04:01:24 server maldet(28111): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1955, malware hits 0, cleaned hits 0, time 400s Jun 04 2026 04:01:24 server maldet(28111): {scan} scan report saved, to view run: maldet --report 260604-0354.28111 Jun 05 2026 03:51:54 server maldet(13936): {update} checking for available updates... Jun 05 2026 03:51:57 server maldet(13936): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 05 2026 03:51:57 server maldet(13936): {update} hashing install files and checking against server... Jun 05 2026 03:51:59 server maldet(13936): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 05 2026 03:51:59 server maldet(13936): {update} latest version already installed. Jun 05 2026 03:52:00 server maldet(14414): {sigup} performing signature update check... Jun 05 2026 03:52:00 server maldet(14414): {sigup} local signature set is version 2026052490478 Jun 05 2026 03:52:01 server maldet(14414): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 05 2026 03:52:02 server maldet(14414): {sigup} latest signature set already installed Jun 05 2026 03:52:08 server maldet(14860): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 05 2026 03:52:11 server maldet(14860): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 05 2026 03:52:11 server maldet(14860): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 05 2026 03:52:11 server maldet(14860): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 05 2026 03:52:11 server maldet(14860): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 05 2026 03:52:53 server maldet(14860): {scan} file list completed in 42s, found 3138 files... Jun 05 2026 03:52:53 server maldet(14860): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 05 2026 03:52:53 server maldet(14860): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3138 files) in progress... Jun 05 2026 04:05:40 server maldet(14860): {hit} malware hit {CAV}Unix.Exploit.Pkexecexploit-10034078-0 found for /tmp/pwnkit Jun 05 2026 04:05:40 server maldet(14860): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3138, malware hits 1, cleaned hits 0, time 812s Jun 05 2026 04:05:40 server maldet(14860): {scan} scan report saved, to view run: maldet --report 260605-0352.14860 Jun 05 2026 04:05:40 server maldet(14860): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260605-0352.14860 Jun 06 2026 03:25:59 server maldet(9754): {update} checking for available updates... Jun 06 2026 03:26:02 server maldet(9754): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 06 2026 03:26:04 server maldet(9754): {update} hashing install files and checking against server... Jun 06 2026 03:26:09 server maldet(9754): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 06 2026 03:26:09 server maldet(9754): {update} latest version already installed. Jun 06 2026 03:26:18 server maldet(10226): {sigup} performing signature update check... Jun 06 2026 03:26:18 server maldet(10226): {sigup} local signature set is version 2026052490478 Jun 06 2026 03:26:19 server maldet(10226): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 06 2026 03:26:20 server maldet(10226): {sigup} latest signature set already installed Jun 06 2026 03:26:21 server maldet(10661): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 06 2026 03:26:22 server maldet(10661): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 06 2026 03:26:22 server maldet(10661): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 06 2026 03:26:22 server maldet(10661): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 06 2026 03:26:22 server maldet(10661): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 06 2026 03:28:33 server maldet(10661): {scan} file list completed in 131s, found 1723 files... Jun 06 2026 03:28:33 server maldet(10661): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 06 2026 03:28:33 server maldet(10661): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1723 files) in progress... Jun 06 2026 03:37:53 server maldet(10661): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1723, malware hits 0, cleaned hits 0, time 691s Jun 06 2026 03:37:53 server maldet(10661): {scan} scan report saved, to view run: maldet --report 260606-0326.10661 Jun 07 2026 03:56:03 server maldet(29156): {update} checking for available updates... Jun 07 2026 03:56:05 server maldet(29156): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 07 2026 03:56:05 server maldet(29156): {update} hashing install files and checking against server... Jun 07 2026 03:56:08 server maldet(29156): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 07 2026 03:56:08 server maldet(29156): {update} latest version already installed. Jun 07 2026 03:56:12 server maldet(29602): {sigup} performing signature update check... Jun 07 2026 03:56:12 server maldet(29602): {sigup} local signature set is version 2026052490478 Jun 07 2026 03:56:13 server maldet(29602): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 07 2026 03:56:14 server maldet(29602): {sigup} latest signature set already installed Jun 07 2026 03:56:25 server maldet(30027): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 07 2026 03:56:28 server maldet(30027): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 07 2026 03:56:28 server maldet(30027): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 07 2026 03:56:28 server maldet(30027): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 07 2026 03:56:28 server maldet(30027): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 07 2026 03:59:36 server maldet(30027): {scan} file list completed in 188s, found 1570 files... Jun 07 2026 03:59:36 server maldet(30027): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 07 2026 03:59:36 server maldet(30027): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1570 files) in progress... Jun 07 2026 04:12:20 server maldet(30027): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1570, malware hits 0, cleaned hits 0, time 955s Jun 07 2026 04:12:20 server maldet(30027): {scan} scan report saved, to view run: maldet --report 260607-0356.30027 Jun 08 2026 03:33:36 server maldet(26972): {update} checking for available updates... Jun 08 2026 03:33:38 server maldet(26972): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 08 2026 03:33:38 server maldet(26972): {update} hashing install files and checking against server... Jun 08 2026 03:33:39 server maldet(26972): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 08 2026 03:33:40 server maldet(26972): {update} latest version already installed. Jun 08 2026 03:33:41 server maldet(27919): {sigup} performing signature update check... Jun 08 2026 03:33:41 server maldet(27919): {sigup} local signature set is version 2026052490478 Jun 08 2026 03:33:42 server maldet(27919): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 08 2026 03:33:43 server maldet(27919): {sigup} latest signature set already installed Jun 08 2026 03:33:48 server maldet(28494): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 08 2026 03:33:50 server maldet(28494): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 08 2026 03:33:50 server maldet(28494): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 08 2026 03:33:50 server maldet(28494): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 08 2026 03:33:50 server maldet(28494): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 08 2026 03:35:07 server maldet(28494): {scan} file list completed in 75s, found 1622 files... Jun 08 2026 03:35:07 server maldet(28494): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 08 2026 03:35:07 server maldet(28494): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1622 files) in progress... Jun 08 2026 03:43:51 server maldet(28494): {hit} malware hit {CAV}Unix.Exploit.Pkexecexploit-10034078-0 found for /var/tmp/pwnkit Jun 08 2026 03:43:51 server maldet(28494): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1622, malware hits 1, cleaned hits 0, time 603s Jun 08 2026 03:43:51 server maldet(28494): {scan} scan report saved, to view run: maldet --report 260608-0333.28494 Jun 08 2026 03:43:51 server maldet(28494): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260608-0333.28494 Jun 09 2026 03:20:02 server maldet(15158): {update} checking for available updates... Jun 09 2026 03:20:06 server maldet(15158): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 09 2026 03:20:08 server maldet(15158): {update} hashing install files and checking against server... Jun 09 2026 03:20:12 server maldet(15158): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 09 2026 03:20:12 server maldet(15158): {update} latest version already installed. Jun 09 2026 03:20:17 server maldet(16381): {sigup} performing signature update check... Jun 09 2026 03:20:17 server maldet(16381): {sigup} local signature set is version 2026052490478 Jun 09 2026 03:20:19 server maldet(16381): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 09 2026 03:20:20 server maldet(16381): {sigup} latest signature set already installed Jun 09 2026 03:20:24 server maldet(17038): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 09 2026 03:20:28 server maldet(17038): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 09 2026 03:20:28 server maldet(17038): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 09 2026 03:20:28 server maldet(17038): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 09 2026 03:20:28 server maldet(17038): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 09 2026 03:24:36 server maldet(17038): {scan} file list completed in 246s, found 1685 files... Jun 09 2026 03:24:36 server maldet(17038): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 09 2026 03:24:36 server maldet(17038): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1685 files) in progress... Jun 09 2026 03:38:26 server maldet(17038): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1685, malware hits 0, cleaned hits 0, time 1081s Jun 09 2026 03:38:26 server maldet(17038): {scan} scan report saved, to view run: maldet --report 260609-0320.17038 Jun 10 2026 03:42:11 server maldet(18747): {update} checking for available updates... Jun 10 2026 03:42:11 server maldet(18747): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 10 2026 03:42:11 server maldet(18747): {update} hashing install files and checking against server... Jun 10 2026 03:42:12 server maldet(18747): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 10 2026 03:42:12 server maldet(18747): {update} latest version already installed. Jun 10 2026 03:42:13 server maldet(19197): {sigup} performing signature update check... Jun 10 2026 03:42:13 server maldet(19197): {sigup} local signature set is version 2026052490478 Jun 10 2026 03:42:14 server maldet(19197): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 10 2026 03:42:14 server maldet(19197): {sigup} latest signature set already installed Jun 10 2026 03:42:14 server maldet(19622): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 10 2026 03:42:14 server maldet(19622): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 10 2026 03:42:14 server maldet(19622): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 10 2026 03:42:14 server maldet(19622): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 10 2026 03:42:14 server maldet(19622): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 10 2026 03:42:23 server maldet(19622): {scan} file list completed in 8s, found 1561 files... Jun 10 2026 03:42:23 server maldet(19622): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 10 2026 03:42:23 server maldet(19622): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1561 files) in progress... Jun 10 2026 03:43:26 server maldet(19622): {hit} malware hit {CAV}Unix.Exploit.Pkexecexploit-10034078-0 found for /tmp/.font-unix/pwnkit Jun 10 2026 03:43:26 server maldet(19622): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1561, malware hits 1, cleaned hits 0, time 72s Jun 10 2026 03:43:26 server maldet(19622): {scan} scan report saved, to view run: maldet --report 260610-0342.19622 Jun 10 2026 03:43:26 server maldet(19622): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260610-0342.19622 Jun 11 2026 03:35:00 server maldet(1571): {update} checking for available updates... Jun 11 2026 03:35:01 server maldet(1571): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 11 2026 03:35:01 server maldet(1571): {update} hashing install files and checking against server... Jun 11 2026 03:35:01 server maldet(1571): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 11 2026 03:35:01 server maldet(1571): {update} latest version already installed. Jun 11 2026 03:35:02 server maldet(2443): {sigup} performing signature update check... Jun 11 2026 03:35:02 server maldet(2443): {sigup} local signature set is version 2026052490478 Jun 11 2026 03:35:03 server maldet(2443): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 11 2026 03:35:03 server maldet(2443): {sigup} latest signature set already installed Jun 11 2026 03:35:04 server maldet(2882): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 11 2026 03:35:04 server maldet(2882): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 11 2026 03:35:04 server maldet(2882): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 11 2026 03:35:04 server maldet(2882): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 11 2026 03:35:04 server maldet(2882): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 11 2026 03:35:12 server maldet(2882): {scan} file list completed in 8s, found 2890 files... Jun 11 2026 03:35:12 server maldet(2882): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 11 2026 03:35:12 server maldet(2882): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2890 files) in progress... Jun 11 2026 03:37:07 server maldet(2882): {hit} malware hit {HEX}php.backdoor.systemget.generic.364 found for /usr/local/apache/htdocs/webftp_simple/images/.s.php Jun 11 2026 03:37:07 server maldet(2882): {hit} malware hit {HEX}php.backdoor.systemget.generic.364 found for /usr/local/apache/htdocs/webftp_simple/skins/.s.php Jun 11 2026 03:37:07 server maldet(2882): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2890, malware hits 2, cleaned hits 0, time 123s Jun 11 2026 03:37:07 server maldet(2882): {scan} scan report saved, to view run: maldet --report 260611-0335.2882 Jun 11 2026 03:37:07 server maldet(2882): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260611-0335.2882 Jun 12 2026 03:23:31 server maldet(16836): {update} checking for available updates... Jun 12 2026 03:23:32 server maldet(16836): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 12 2026 03:23:32 server maldet(16836): {update} hashing install files and checking against server... Jun 12 2026 03:23:32 server maldet(16836): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 12 2026 03:23:32 server maldet(16836): {update} latest version already installed. Jun 12 2026 03:23:33 server maldet(17333): {sigup} performing signature update check... Jun 12 2026 03:23:33 server maldet(17333): {sigup} local signature set is version 2026052490478 Jun 12 2026 03:23:34 server maldet(17333): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 12 2026 03:23:34 server maldet(17333): {sigup} latest signature set already installed Jun 12 2026 03:23:35 server maldet(17803): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 12 2026 03:23:36 server maldet(17803): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 12 2026 03:23:36 server maldet(17803): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 12 2026 03:23:36 server maldet(17803): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 12 2026 03:23:36 server maldet(17803): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 12 2026 03:23:48 server maldet(17803): {scan} file list completed in 11s, found 2252 files... Jun 12 2026 03:23:48 server maldet(17803): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 12 2026 03:23:48 server maldet(17803): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2252 files) in progress... Jun 12 2026 03:25:35 server maldet(17803): {hit} malware hit {HEX}php.backdoor.systemget.generic.364 found for /usr/local/apache/htdocs/webftp_simple/images/.s.php Jun 12 2026 03:25:35 server maldet(17803): {hit} malware hit {HEX}php.backdoor.systemget.generic.364 found for /usr/local/apache/htdocs/webftp_simple/skins/.s.php Jun 12 2026 03:25:35 server maldet(17803): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2252, malware hits 2, cleaned hits 0, time 120s Jun 12 2026 03:25:35 server maldet(17803): {scan} scan report saved, to view run: maldet --report 260612-0323.17803 Jun 12 2026 03:25:35 server maldet(17803): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260612-0323.17803 Jun 13 2026 03:24:33 server maldet(22405): {update} checking for available updates... Jun 13 2026 03:24:34 server maldet(22405): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 13 2026 03:24:34 server maldet(22405): {update} hashing install files and checking against server... Jun 13 2026 03:24:35 server maldet(22405): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 13 2026 03:24:36 server maldet(22405): {update} latest version already installed. Jun 13 2026 03:24:37 server maldet(23021): {sigup} performing signature update check... Jun 13 2026 03:24:37 server maldet(23021): {sigup} local signature set is version 2026052490478 Jun 13 2026 03:24:38 server maldet(23021): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 13 2026 03:24:38 server maldet(23021): {sigup} latest signature set already installed Jun 13 2026 03:24:39 server maldet(23511): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 13 2026 03:24:39 server maldet(23511): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 13 2026 03:24:39 server maldet(23511): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 13 2026 03:24:39 server maldet(23511): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 13 2026 03:24:39 server maldet(23511): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 13 2026 03:24:53 server maldet(23511): {scan} file list completed in 14s, found 1153 files... Jun 13 2026 03:24:53 server maldet(23511): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 13 2026 03:24:53 server maldet(23511): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1153 files) in progress... Jun 13 2026 03:26:09 server maldet(23511): {hit} malware hit {HEX}php.backdoor.systemget.generic.364 found for /usr/local/apache/htdocs/webftp_simple/images/.s.php Jun 13 2026 03:26:09 server maldet(23511): {hit} malware hit {HEX}php.backdoor.systemget.generic.364 found for /usr/local/apache/htdocs/webftp_simple/skins/.s.php Jun 13 2026 03:26:09 server maldet(23511): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1153, malware hits 2, cleaned hits 0, time 90s Jun 13 2026 03:26:09 server maldet(23511): {scan} scan report saved, to view run: maldet --report 260613-0324.23511 Jun 13 2026 03:26:09 server maldet(23511): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260613-0324.23511 Jun 14 2026 03:29:50 server maldet(29276): {update} checking for available updates... Jun 14 2026 03:29:51 server maldet(29276): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 14 2026 03:29:51 server maldet(29276): {update} hashing install files and checking against server... Jun 14 2026 03:29:51 server maldet(29276): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 14 2026 03:29:51 server maldet(29276): {update} latest version already installed. Jun 14 2026 03:29:52 server maldet(29802): {sigup} performing signature update check... Jun 14 2026 03:29:52 server maldet(29802): {sigup} local signature set is version 2026052490478 Jun 14 2026 03:29:52 server maldet(29802): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 14 2026 03:29:52 server maldet(29802): {sigup} latest signature set already installed Jun 14 2026 03:29:53 server maldet(30294): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 14 2026 03:29:53 server maldet(30294): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 14 2026 03:29:53 server maldet(30294): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 14 2026 03:29:53 server maldet(30294): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 14 2026 03:29:53 server maldet(30294): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 14 2026 03:30:03 server maldet(30294): {scan} file list completed in 10s, found 2448 files... Jun 14 2026 03:30:03 server maldet(30294): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 14 2026 03:30:03 server maldet(30294): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2448 files) in progress... Jun 14 2026 03:31:52 server maldet(30294): {hit} malware hit {HEX}php.backdoor.systemget.generic.364 found for /usr/local/apache/htdocs/webftp_simple/images/.s.php Jun 14 2026 03:31:52 server maldet(30294): {hit} malware hit {HEX}php.backdoor.systemget.generic.364 found for /usr/local/apache/htdocs/webftp_simple/skins/.s.php Jun 14 2026 03:31:52 server maldet(30294): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2448, malware hits 2, cleaned hits 0, time 119s Jun 14 2026 03:31:52 server maldet(30294): {scan} scan report saved, to view run: maldet --report 260614-0329.30294 Jun 14 2026 03:31:52 server maldet(30294): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260614-0329.30294 Jun 15 2026 03:11:46 server maldet(19594): {update} checking for available updates... Jun 15 2026 03:11:47 server maldet(19594): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 15 2026 03:11:47 server maldet(19594): {update} hashing install files and checking against server... Jun 15 2026 03:11:47 server maldet(19594): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 15 2026 03:11:47 server maldet(19594): {update} latest version already installed. Jun 15 2026 03:11:48 server maldet(20058): {sigup} performing signature update check... Jun 15 2026 03:11:48 server maldet(20058): {sigup} local signature set is version 2026052490478 Jun 15 2026 03:11:49 server maldet(20058): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 15 2026 03:11:49 server maldet(20058): {sigup} latest signature set already installed Jun 15 2026 03:11:49 server maldet(20502): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 15 2026 03:11:50 server maldet(20502): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 15 2026 03:11:50 server maldet(20502): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 15 2026 03:11:50 server maldet(20502): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 15 2026 03:11:50 server maldet(20502): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 15 2026 03:12:02 server maldet(20502): {scan} file list completed in 12s, found 1527 files... Jun 15 2026 03:12:03 server maldet(20502): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 15 2026 03:12:03 server maldet(20502): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1527 files) in progress... Jun 15 2026 03:13:14 server maldet(20502): {hit} malware hit {CAV}Unix.Exploit.Pkexecexploit-10034078-0 found for /tmp/.XIM-unix/pwnkit Jun 15 2026 03:13:14 server maldet(20502): {hit} malware hit {CAV}Unix.Exploit.Pkexecexploit-10034078-0 found for /tmp/.Test-unix/pwnkit Jun 15 2026 03:13:14 server maldet(20502): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1527, malware hits 2, cleaned hits 0, time 85s Jun 15 2026 03:13:14 server maldet(20502): {scan} scan report saved, to view run: maldet --report 260615-0311.20502 Jun 15 2026 03:13:14 server maldet(20502): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260615-0311.20502 Jun 16 2026 03:32:02 server maldet(31321): {update} checking for available updates... Jun 16 2026 03:32:04 server maldet(31321): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 16 2026 03:32:04 server maldet(31321): {update} hashing install files and checking against server... Jun 16 2026 03:32:04 server maldet(31321): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 16 2026 03:32:04 server maldet(31321): {update} latest version already installed. Jun 16 2026 03:32:05 server maldet(31805): {sigup} performing signature update check... Jun 16 2026 03:32:05 server maldet(31805): {sigup} local signature set is version 2026052490478 Jun 16 2026 03:32:06 server maldet(31805): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 16 2026 03:32:06 server maldet(31805): {sigup} latest signature set already installed Jun 16 2026 03:32:06 server maldet(32265): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 16 2026 03:32:07 server maldet(32265): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 16 2026 03:32:07 server maldet(32265): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 16 2026 03:32:07 server maldet(32265): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 16 2026 03:32:07 server maldet(32265): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 16 2026 03:32:18 server maldet(32265): {scan} file list completed in 10s, found 1983 files... Jun 16 2026 03:32:18 server maldet(32265): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 16 2026 03:32:18 server maldet(32265): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1983 files) in progress... Jun 16 2026 03:33:47 server maldet(32265): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1983, malware hits 0, cleaned hits 0, time 101s Jun 16 2026 03:33:47 server maldet(32265): {scan} scan report saved, to view run: maldet --report 260616-0332.32265 Jun 17 2026 03:49:06 server maldet(8653): {update} checking for available updates... Jun 17 2026 03:49:07 server maldet(8653): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 17 2026 03:49:07 server maldet(8653): {update} hashing install files and checking against server... Jun 17 2026 03:49:08 server maldet(8653): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 17 2026 03:49:08 server maldet(8653): {update} latest version already installed. Jun 17 2026 03:49:09 server maldet(9230): {sigup} performing signature update check... Jun 17 2026 03:49:09 server maldet(9230): {sigup} local signature set is version 2026052490478 Jun 17 2026 03:49:10 server maldet(9230): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 17 2026 03:49:10 server maldet(9230): {sigup} latest signature set already installed Jun 17 2026 03:49:11 server maldet(9760): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 17 2026 03:49:12 server maldet(9760): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 17 2026 03:49:12 server maldet(9760): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 17 2026 03:49:12 server maldet(9760): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 17 2026 03:49:12 server maldet(9760): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 17 2026 03:49:21 server maldet(9760): {scan} file list completed in 9s, found 2820 files... Jun 17 2026 03:49:21 server maldet(9760): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 17 2026 03:49:21 server maldet(9760): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2820 files) in progress... Jun 17 2026 03:51:27 server maldet(9760): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2820, malware hits 0, cleaned hits 0, time 136s Jun 17 2026 03:51:27 server maldet(9760): {scan} scan report saved, to view run: maldet --report 260617-0349.9760 Jun 18 2026 03:45:48 server maldet(861): {update} checking for available updates... Jun 18 2026 03:45:49 server maldet(861): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 18 2026 03:45:49 server maldet(861): {update} hashing install files and checking against server... Jun 18 2026 03:45:50 server maldet(861): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 18 2026 03:45:50 server maldet(861): {update} latest version already installed. Jun 18 2026 03:45:51 server maldet(1370): {sigup} performing signature update check... Jun 18 2026 03:45:51 server maldet(1370): {sigup} local signature set is version 2026052490478 Jun 18 2026 03:45:53 server maldet(1370): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 18 2026 03:45:53 server maldet(1370): {sigup} latest signature set already installed Jun 18 2026 03:45:54 server maldet(1840): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 18 2026 03:45:54 server maldet(1840): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 18 2026 03:45:54 server maldet(1840): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 18 2026 03:45:54 server maldet(1840): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 18 2026 03:45:54 server maldet(1840): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 18 2026 03:46:17 server maldet(1840): {scan} file list completed in 23s, found 2966 files... Jun 18 2026 03:46:17 server maldet(1840): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 18 2026 03:46:17 server maldet(1840): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2966 files) in progress... Jun 18 2026 03:49:38 server maldet(1840): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2966, malware hits 0, cleaned hits 0, time 224s Jun 18 2026 03:49:38 server maldet(1840): {scan} scan report saved, to view run: maldet --report 260618-0345.1840 Jun 19 2026 03:18:10 server maldet(19443): {update} checking for available updates... Jun 19 2026 03:18:11 server maldet(19443): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 19 2026 03:18:11 server maldet(19443): {update} hashing install files and checking against server... Jun 19 2026 03:18:12 server maldet(19443): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 19 2026 03:18:12 server maldet(19443): {update} latest version already installed. Jun 19 2026 03:18:12 server maldet(19912): {sigup} performing signature update check... Jun 19 2026 03:18:12 server maldet(19912): {sigup} local signature set is version 2026052490478 Jun 19 2026 03:18:13 server maldet(19912): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 19 2026 03:18:13 server maldet(19912): {sigup} latest signature set already installed Jun 19 2026 03:18:14 server maldet(20362): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 19 2026 03:18:14 server maldet(20362): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 19 2026 03:18:14 server maldet(20362): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 19 2026 03:18:14 server maldet(20362): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 19 2026 03:18:14 server maldet(20362): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 19 2026 03:18:24 server maldet(20362): {scan} file list completed in 10s, found 1911 files... Jun 19 2026 03:18:24 server maldet(20362): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 19 2026 03:18:24 server maldet(20362): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1911 files) in progress... Jun 19 2026 03:19:48 server maldet(20362): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1911, malware hits 0, cleaned hits 0, time 94s Jun 19 2026 03:19:48 server maldet(20362): {scan} scan report saved, to view run: maldet --report 260619-0318.20362 Jun 20 2026 03:36:56 server maldet(30418): {update} checking for available updates... Jun 20 2026 03:36:57 server maldet(30418): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 20 2026 03:36:57 server maldet(30418): {update} hashing install files and checking against server... Jun 20 2026 03:36:58 server maldet(30418): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 20 2026 03:36:58 server maldet(30418): {update} latest version already installed. Jun 20 2026 03:36:59 server maldet(30893): {sigup} performing signature update check... Jun 20 2026 03:36:59 server maldet(30893): {sigup} local signature set is version 2026052490478 Jun 20 2026 03:37:00 server maldet(30893): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 20 2026 03:37:00 server maldet(30893): {sigup} latest signature set already installed Jun 20 2026 03:37:00 server maldet(31346): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 20 2026 03:37:01 server maldet(31346): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 20 2026 03:37:01 server maldet(31346): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 20 2026 03:37:01 server maldet(31346): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 20 2026 03:37:01 server maldet(31346): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 20 2026 03:37:09 server maldet(31346): {scan} file list completed in 8s, found 1811 files... Jun 20 2026 03:37:09 server maldet(31346): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 20 2026 03:37:09 server maldet(31346): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1811 files) in progress... Jun 20 2026 03:38:22 server maldet(31346): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1811, malware hits 0, cleaned hits 0, time 82s Jun 20 2026 03:38:22 server maldet(31346): {scan} scan report saved, to view run: maldet --report 260620-0337.31346 Jun 21 2026 03:38:57 server maldet(15157): {update} checking for available updates... Jun 21 2026 03:38:57 server maldet(15157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 21 2026 03:38:57 server maldet(15157): {update} hashing install files and checking against server... Jun 21 2026 03:38:58 server maldet(15157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 21 2026 03:38:58 server maldet(15157): {update} latest version already installed. Jun 21 2026 03:38:59 server maldet(15679): {sigup} performing signature update check... Jun 21 2026 03:38:59 server maldet(15679): {sigup} local signature set is version 2026052490478 Jun 21 2026 03:38:59 server maldet(15679): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 21 2026 03:38:59 server maldet(15679): {sigup} latest signature set already installed Jun 21 2026 03:39:00 server maldet(16179): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 21 2026 03:39:00 server maldet(16179): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 21 2026 03:39:00 server maldet(16179): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 21 2026 03:39:00 server maldet(16179): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 21 2026 03:39:00 server maldet(16179): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 21 2026 03:39:09 server maldet(16179): {scan} file list completed in 9s, found 3633 files... Jun 21 2026 03:39:09 server maldet(16179): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 21 2026 03:39:09 server maldet(16179): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3633 files) in progress... Jun 21 2026 03:41:04 server maldet(16179): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3633, malware hits 0, cleaned hits 0, time 123s Jun 21 2026 03:41:04 server maldet(16179): {scan} scan report saved, to view run: maldet --report 260621-0338.16179 Jun 22 2026 03:48:19 server maldet(18697): {update} checking for available updates... Jun 22 2026 03:48:19 server maldet(18697): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 22 2026 03:48:19 server maldet(18697): {update} hashing install files and checking against server... Jun 22 2026 03:48:20 server maldet(18697): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 22 2026 03:48:20 server maldet(18697): {update} latest version already installed. Jun 22 2026 03:48:21 server maldet(19196): {sigup} performing signature update check... Jun 22 2026 03:48:21 server maldet(19196): {sigup} local signature set is version 2026052490478 Jun 22 2026 03:48:22 server maldet(19196): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 22 2026 03:48:22 server maldet(19196): {sigup} latest signature set already installed Jun 22 2026 03:48:22 server maldet(19668): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 22 2026 03:48:22 server maldet(19668): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 22 2026 03:48:23 server maldet(19668): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 22 2026 03:48:23 server maldet(19668): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 22 2026 03:48:23 server maldet(19668): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 22 2026 03:48:30 server maldet(19668): {scan} file list completed in 7s, found 9323 files... Jun 22 2026 03:48:30 server maldet(19668): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 22 2026 03:48:30 server maldet(19668): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (9323 files) in progress... Jun 22 2026 03:53:11 server maldet(19668): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 9323, malware hits 0, cleaned hits 0, time 289s Jun 22 2026 03:53:11 server maldet(19668): {scan} scan report saved, to view run: maldet --report 260622-0348.19668 Jun 23 2026 03:56:28 server maldet(1173): {update} checking for available updates... Jun 23 2026 03:56:29 server maldet(1173): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 23 2026 03:56:29 server maldet(1173): {update} hashing install files and checking against server... Jun 23 2026 03:56:30 server maldet(1173): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 23 2026 03:56:30 server maldet(1173): {update} latest version already installed. Jun 23 2026 03:56:31 server maldet(1666): {sigup} performing signature update check... Jun 23 2026 03:56:31 server maldet(1666): {sigup} local signature set is version 2026052490478 Jun 23 2026 03:56:31 server maldet(1666): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 23 2026 03:56:31 server maldet(1666): {sigup} latest signature set already installed Jun 23 2026 03:56:32 server maldet(2136): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 23 2026 03:56:33 server maldet(2136): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 23 2026 03:56:33 server maldet(2136): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 23 2026 03:56:33 server maldet(2136): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 23 2026 03:56:33 server maldet(2136): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 23 2026 03:56:49 server maldet(2136): {scan} file list completed in 16s, found 4715 files... Jun 23 2026 03:56:50 server maldet(2136): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 23 2026 03:56:50 server maldet(2136): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4715 files) in progress... Jun 23 2026 04:01:08 server maldet(2136): {hit} malware hit {CAV}Unix.Exploit.Pkexecexploit-10034078-0 found for /tmp/pwnkit Jun 23 2026 04:01:08 server maldet(2136): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4715, malware hits 1, cleaned hits 0, time 276s Jun 23 2026 04:01:08 server maldet(2136): {scan} scan report saved, to view run: maldet --report 260623-0356.2136 Jun 23 2026 04:01:08 server maldet(2136): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260623-0356.2136 Jun 24 2026 03:44:32 server maldet(23172): {update} checking for available updates... Jun 24 2026 03:44:32 server maldet(23172): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 24 2026 03:44:32 server maldet(23172): {update} hashing install files and checking against server... Jun 24 2026 03:44:33 server maldet(23172): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 24 2026 03:44:33 server maldet(23172): {update} latest version already installed. Jun 24 2026 03:44:34 server maldet(23657): {sigup} performing signature update check... Jun 24 2026 03:44:34 server maldet(23657): {sigup} local signature set is version 2026052490478 Jun 24 2026 03:44:34 server maldet(23657): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 24 2026 03:44:34 server maldet(23657): {sigup} latest signature set already installed Jun 24 2026 03:44:35 server maldet(24118): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 24 2026 03:44:35 server maldet(24118): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 24 2026 03:44:35 server maldet(24118): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 24 2026 03:44:35 server maldet(24118): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 24 2026 03:44:35 server maldet(24118): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 24 2026 03:44:43 server maldet(24118): {scan} file list completed in 8s, found 2744 files... Jun 24 2026 03:44:43 server maldet(24118): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 24 2026 03:44:43 server maldet(24118): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2744 files) in progress... Jun 24 2026 03:46:28 server maldet(24118): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2744, malware hits 0, cleaned hits 0, time 113s Jun 24 2026 03:46:28 server maldet(24118): {scan} scan report saved, to view run: maldet --report 260624-0344.24118 Jun 25 2026 03:39:45 server maldet(8943): {update} checking for available updates... Jun 25 2026 03:39:46 server maldet(8943): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 25 2026 03:39:46 server maldet(8943): {update} hashing install files and checking against server... Jun 25 2026 03:39:47 server maldet(8943): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 25 2026 03:39:47 server maldet(8943): {update} latest version already installed. Jun 25 2026 03:39:48 server maldet(9448): {sigup} performing signature update check... Jun 25 2026 03:39:48 server maldet(9448): {sigup} local signature set is version 2026052490478 Jun 25 2026 03:39:49 server maldet(9448): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 25 2026 03:39:49 server maldet(9448): {sigup} latest signature set already installed Jun 25 2026 03:39:49 server maldet(9923): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 25 2026 03:39:50 server maldet(9923): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 25 2026 03:39:50 server maldet(9923): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 25 2026 03:39:50 server maldet(9923): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 25 2026 03:39:50 server maldet(9923): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 25 2026 03:39:59 server maldet(9923): {scan} file list completed in 9s, found 1656 files... Jun 25 2026 03:39:59 server maldet(9923): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 25 2026 03:39:59 server maldet(9923): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1656 files) in progress... Jun 25 2026 03:41:20 server maldet(9923): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1656, malware hits 0, cleaned hits 0, time 91s Jun 25 2026 03:41:20 server maldet(9923): {scan} scan report saved, to view run: maldet --report 260625-0339.9923 Jun 26 2026 03:41:27 server maldet(16689): {update} checking for available updates... Jun 26 2026 03:41:28 server maldet(16689): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 26 2026 03:41:28 server maldet(16689): {update} hashing install files and checking against server... Jun 26 2026 03:41:30 server maldet(16689): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 26 2026 03:41:30 server maldet(16689): {update} latest version already installed. Jun 26 2026 03:41:30 server maldet(17218): {sigup} performing signature update check... Jun 26 2026 03:41:30 server maldet(17218): {sigup} local signature set is version 2026052490478 Jun 26 2026 03:41:31 server maldet(17218): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 26 2026 03:41:31 server maldet(17218): {sigup} latest signature set already installed Jun 26 2026 03:41:32 server maldet(17692): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 26 2026 03:41:32 server maldet(17692): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 26 2026 03:41:32 server maldet(17692): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 26 2026 03:41:32 server maldet(17692): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 26 2026 03:41:32 server maldet(17692): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 26 2026 03:41:42 server maldet(17692): {scan} file list completed in 10s, found 1064 files... Jun 26 2026 03:41:42 server maldet(17692): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 26 2026 03:41:42 server maldet(17692): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1064 files) in progress... Jun 26 2026 03:42:44 server maldet(17692): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1064, malware hits 0, cleaned hits 0, time 72s Jun 26 2026 03:42:44 server maldet(17692): {scan} scan report saved, to view run: maldet --report 260626-0341.17692 Jun 27 2026 03:25:14 server maldet(18371): {update} checking for available updates... Jun 27 2026 03:25:14 server maldet(18371): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 27 2026 03:25:14 server maldet(18371): {update} hashing install files and checking against server... Jun 27 2026 03:25:16 server maldet(18371): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 27 2026 03:25:16 server maldet(18371): {update} latest version already installed. Jun 27 2026 03:25:17 server maldet(18887): {sigup} performing signature update check... Jun 27 2026 03:25:17 server maldet(18887): {sigup} local signature set is version 2026052490478 Jun 27 2026 03:25:18 server maldet(18887): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 27 2026 03:25:18 server maldet(18887): {sigup} latest signature set already installed Jun 27 2026 03:25:19 server maldet(19382): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 27 2026 03:25:19 server maldet(19382): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 27 2026 03:25:19 server maldet(19382): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 27 2026 03:25:19 server maldet(19382): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 27 2026 03:25:19 server maldet(19382): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 27 2026 03:25:30 server maldet(19382): {scan} file list completed in 11s, found 3 files... Jun 27 2026 03:25:30 server maldet(19382): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 27 2026 03:25:30 server maldet(19382): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3 files) in progress... Jun 27 2026 03:26:13 server maldet(19382): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3, malware hits 0, cleaned hits 0, time 54s Jun 27 2026 03:26:13 server maldet(19382): {scan} scan report saved, to view run: maldet --report 260627-0325.19382 Jun 28 2026 03:21:38 server maldet(11244): {update} checking for available updates... Jun 28 2026 03:21:38 server maldet(11244): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 28 2026 03:21:38 server maldet(11244): {update} hashing install files and checking against server... Jun 28 2026 03:21:39 server maldet(11244): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 28 2026 03:21:39 server maldet(11244): {update} latest version already installed. Jun 28 2026 03:21:39 server maldet(11708): {sigup} performing signature update check... Jun 28 2026 03:21:39 server maldet(11708): {sigup} local signature set is version 2026052490478 Jun 28 2026 03:21:40 server maldet(11708): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 28 2026 03:21:40 server maldet(11708): {sigup} latest signature set already installed Jun 28 2026 03:21:40 server maldet(12150): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 28 2026 03:21:40 server maldet(12150): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 28 2026 03:21:40 server maldet(12150): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 28 2026 03:21:40 server maldet(12150): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 28 2026 03:21:40 server maldet(12150): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 28 2026 03:21:47 server maldet(12150): {scan} file list completed in 7s, found 3 files... Jun 28 2026 03:21:47 server maldet(12150): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 28 2026 03:21:47 server maldet(12150): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3 files) in progress... Jun 28 2026 03:22:14 server maldet(12150): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3, malware hits 0, cleaned hits 0, time 34s Jun 28 2026 03:22:14 server maldet(12150): {scan} scan report saved, to view run: maldet --report 260628-0321.12150 Jun 29 2026 03:30:10 server maldet(21733): {update} checking for available updates... Jun 29 2026 03:30:11 server maldet(21733): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 29 2026 03:30:11 server maldet(21733): {update} hashing install files and checking against server... Jun 29 2026 03:30:12 server maldet(21733): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 29 2026 03:30:12 server maldet(21733): {update} latest version already installed. Jun 29 2026 03:30:13 server maldet(22220): {sigup} performing signature update check... Jun 29 2026 03:30:13 server maldet(22220): {sigup} local signature set is version 2026052490478 Jun 29 2026 03:30:15 server maldet(22220): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 29 2026 03:30:15 server maldet(22220): {sigup} latest signature set already installed Jun 29 2026 03:30:17 server maldet(22704): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 29 2026 03:30:18 server maldet(22704): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 29 2026 03:30:18 server maldet(22704): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 29 2026 03:30:18 server maldet(22704): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 29 2026 03:30:18 server maldet(22704): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 29 2026 03:31:12 server maldet(22704): {scan} file list completed in 54s, found 3 files... Jun 29 2026 03:31:12 server maldet(22704): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 29 2026 03:31:12 server maldet(22704): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3 files) in progress... Jun 29 2026 03:31:54 server maldet(22704): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3, malware hits 0, cleaned hits 0, time 97s Jun 29 2026 03:31:54 server maldet(22704): {scan} scan report saved, to view run: maldet --report 260629-0330.22704 Jun 30 2026 03:48:50 server maldet(6892): {update} checking for available updates... Jun 30 2026 03:48:51 server maldet(6892): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 30 2026 03:48:51 server maldet(6892): {update} hashing install files and checking against server... Jun 30 2026 03:48:52 server maldet(6892): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 30 2026 03:48:52 server maldet(6892): {update} latest version already installed. Jun 30 2026 03:48:53 server maldet(7398): {sigup} performing signature update check... Jun 30 2026 03:48:53 server maldet(7398): {sigup} local signature set is version 2026052490478 Jun 30 2026 03:48:54 server maldet(7398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 30 2026 03:48:54 server maldet(7398): {sigup} latest signature set already installed Jun 30 2026 03:48:54 server maldet(7885): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 30 2026 03:48:55 server maldet(7885): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jun 30 2026 03:48:55 server maldet(7885): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 30 2026 03:48:55 server maldet(7885): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 30 2026 03:48:55 server maldet(7885): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jun 30 2026 03:49:06 server maldet(7885): {scan} file list completed in 11s, found 6 files... Jun 30 2026 03:49:06 server maldet(7885): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jun 30 2026 03:49:06 server maldet(7885): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6 files) in progress... Jun 30 2026 03:49:42 server maldet(7885): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6, malware hits 0, cleaned hits 0, time 47s Jun 30 2026 03:49:42 server maldet(7885): {scan} scan report saved, to view run: maldet --report 260630-0348.7885 Jun 30 2026 23:07:36 server maldet(766): {mon} could not find monitor mode dependency 'ed' in PATH, please apt/yum/dnf install ed and try again. Jul 01 2026 03:32:48 server maldet(32498): {update} checking for available updates... Jul 01 2026 03:32:49 server maldet(32498): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 01 2026 03:32:49 server maldet(32498): {update} hashing install files and checking against server... Jul 01 2026 03:32:50 server maldet(32498): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 01 2026 03:32:50 server maldet(32498): {update} latest version already installed. Jul 01 2026 03:32:51 server maldet(527): {sigup} performing signature update check... Jul 01 2026 03:32:51 server maldet(527): {sigup} local signature set is version 2026052490478 Jul 01 2026 03:32:52 server maldet(527): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 01 2026 03:32:52 server maldet(527): {sigup} latest signature set already installed Jul 01 2026 03:32:53 server maldet(1032): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 01 2026 03:32:53 server maldet(1032): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 01 2026 03:32:54 server maldet(1032): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 01 2026 03:32:54 server maldet(1032): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 01 2026 03:32:54 server maldet(1032): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 01 2026 03:33:23 server maldet(1032): {scan} file list completed in 28s, found 881 files... Jul 01 2026 03:33:23 server maldet(1032): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 01 2026 03:33:23 server maldet(1032): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (881 files) in progress... Jul 01 2026 03:35:52 server maldet(1032): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 881, malware hits 0, cleaned hits 0, time 179s Jul 01 2026 03:35:52 server maldet(1032): {scan} scan report saved, to view run: maldet --report 260701-0332.1032 Jul 02 2026 03:33:31 server maldet(476): {update} checking for available updates... Jul 02 2026 03:33:32 server maldet(476): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 02 2026 03:33:32 server maldet(476): {update} hashing install files and checking against server... Jul 02 2026 03:33:33 server maldet(476): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 02 2026 03:33:33 server maldet(476): {update} latest version already installed. Jul 02 2026 03:33:35 server maldet(991): {sigup} performing signature update check... Jul 02 2026 03:33:35 server maldet(991): {sigup} local signature set is version 2026052490478 Jul 02 2026 03:33:35 server maldet(991): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 02 2026 03:33:36 server maldet(991): {sigup} latest signature set already installed Jul 02 2026 03:33:37 server maldet(1469): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 02 2026 03:33:37 server maldet(1469): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 02 2026 03:33:37 server maldet(1469): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 02 2026 03:33:37 server maldet(1469): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 02 2026 03:33:37 server maldet(1469): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 02 2026 03:33:46 server maldet(1469): {scan} file list completed in 9s, found 1103 files... Jul 02 2026 03:33:46 server maldet(1469): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 02 2026 03:33:46 server maldet(1469): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1103 files) in progress... Jul 02 2026 03:35:28 server maldet(1469): {hit} malware hit {CAV}Unix.Exploit.Pkexecexploit-10034078-0 found for /tmp/.Test-unix/pwnkit Jul 02 2026 03:35:28 server maldet(1469): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1103, malware hits 1, cleaned hits 0, time 111s Jul 02 2026 03:35:28 server maldet(1469): {scan} scan report saved, to view run: maldet --report 260702-0333.1469 Jul 02 2026 03:35:28 server maldet(1469): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260702-0333.1469 Jul 02 2026 06:06:43 server maldet(778): {mon} could not find monitor mode dependency 'ed' in PATH, please apt/yum/dnf install ed and try again. Jul 02 2026 06:52:42 server maldet(785): {mon} could not find monitor mode dependency 'ed' in PATH, please apt/yum/dnf install ed and try again. Jul 02 2026 07:22:10 server maldet(789): {mon} could not find monitor mode dependency 'ed' in PATH, please apt/yum/dnf install ed and try again. Jul 03 2026 03:40:29 server maldet(21224): {update} checking for available updates... Jul 03 2026 03:40:30 server maldet(21224): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 03 2026 03:40:31 server maldet(21224): {update} hashing install files and checking against server... Jul 03 2026 03:40:32 server maldet(21224): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 03 2026 03:40:32 server maldet(21224): {update} latest version already installed. Jul 03 2026 03:40:34 server maldet(21699): {sigup} performing signature update check... Jul 03 2026 03:40:34 server maldet(21699): {sigup} local signature set is version 2026052490478 Jul 03 2026 03:40:35 server maldet(21699): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 03 2026 03:40:35 server maldet(21699): {sigup} latest signature set already installed Jul 03 2026 03:40:38 server maldet(22149): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 03 2026 03:40:40 server maldet(22149): {scan} signatures loaded: 51464 (45385 MD5 | 2373 HEX | 3706 YARA | 0 USER) Jul 03 2026 03:40:40 server maldet(22149): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 03 2026 03:40:40 server maldet(22149): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 03 2026 03:40:40 server maldet(22149): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -25976319c -not -perm 000 -not -uid 0 -not -gid 0 Jul 03 2026 03:41:51 server maldet(22149): {scan} file list completed in 71s, found 1049 files... Jul 03 2026 03:41:51 server maldet(22149): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jul 03 2026 03:41:51 server maldet(22149): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1049 files) in progress... Jul 03 2026 03:44:23 server maldet(22149): {hit} malware hit {CAV}Unix.Exploit.Pkexecexploit-10034078-0 found for /tmp/.XIM-unix/pwnkit Jul 03 2026 03:44:24 server maldet(22149): {hit} malware hit {CAV}Unix.Exploit.Pkexecexploit-10034078-0 found for /tmp/.ICE-unix/pwnkit Jul 03 2026 03:44:24 server maldet(22149): {hit} malware hit {CAV}Unix.Exploit.Pkexecexploit-10034078-0 found for /tmp/.font-unix/pwnkit Jul 03 2026 03:44:24 server maldet(22149): {hit} malware hit {CAV}Unix.Exploit.Pkexecexploit-10034078-0 found for /dev/shm/pwnkit Jul 03 2026 03:44:24 server maldet(22149): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1049, malware hits 4, cleaned hits 0, time 226s Jul 03 2026 03:44:24 server maldet(22149): {scan} scan report saved, to view run: maldet --report 260703-0340.22149 Jul 03 2026 03:44:24 server maldet(22149): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 260703-0340.22149
Close