Current Path : /usr/local/maldetect.last/ |
Current File : //usr/local/maldetect.last/event_log |
Apr 09 2025 06:57:31 webserver maldet(18828): {sigup} performing signature update check... Apr 09 2025 06:57:31 webserver maldet(18828): {sigup} local signature set is version 20250225482944 Apr 09 2025 06:57:31 webserver maldet(18828): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 09 2025 06:57:31 webserver maldet(18828): {sigup} new signature set 202504071198007 available Apr 09 2025 06:57:31 webserver maldet(18828): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 09 2025 06:57:32 webserver maldet(18828): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 09 2025 06:57:33 webserver maldet(18828): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 09 2025 06:57:33 webserver maldet(18828): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 09 2025 06:57:33 webserver maldet(18828): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 09 2025 06:57:33 webserver maldet(18828): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 09 2025 06:57:33 webserver maldet(18828): {sigup} verified md5sum of maldet-sigpack.tgz Apr 09 2025 06:57:33 webserver maldet(18828): {sigup} unpacked and installed maldet-sigpack.tgz Apr 09 2025 06:57:34 webserver maldet(18828): {sigup} verified md5sum of maldet-clean.tgz Apr 09 2025 06:57:34 webserver maldet(18828): {sigup} unpacked and installed maldet-clean.tgz Apr 09 2025 06:57:34 webserver maldet(18828): {sigup} signature set update completed Apr 09 2025 06:57:34 webserver maldet(18828): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 09 2025 06:57:34 webserver maldet(18449): {update} completed update v1.6.5 => v1.6.6 359d25, running signature updates... Apr 09 2025 06:57:34 webserver maldet(19043): {sigup} performing signature update check... Apr 09 2025 06:57:34 webserver maldet(19043): {sigup} local signature set is version 202504071198007 Apr 09 2025 06:57:34 webserver maldet(19043): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 09 2025 06:57:34 webserver maldet(19043): {sigup} latest signature set already installed Apr 09 2025 06:57:34 webserver maldet(18449): {update} update and config import completed Apr 10 2025 07:00:17 webserver maldet(19534): {update} checking for available updates... Apr 10 2025 07:00:17 webserver maldet(19534): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 10 2025 07:00:17 webserver maldet(19534): {update} hashing install files and checking against server... Apr 10 2025 07:00:17 webserver maldet(19534): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 10 2025 07:00:17 webserver maldet(19534): {update} latest version already installed. Apr 10 2025 07:00:17 webserver maldet(19647): {sigup} performing signature update check... Apr 10 2025 07:00:17 webserver maldet(19647): {sigup} local signature set is version 202504071198007 Apr 10 2025 07:00:18 webserver maldet(19647): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 10 2025 07:00:18 webserver maldet(19647): {sigup} new signature set 202504101870578 available Apr 10 2025 07:00:18 webserver maldet(19647): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 10 2025 07:00:19 webserver maldet(19647): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 10 2025 07:00:19 webserver maldet(19647): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 10 2025 07:00:19 webserver maldet(19647): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 10 2025 07:00:20 webserver maldet(19647): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 10 2025 07:00:20 webserver maldet(19647): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 10 2025 07:00:20 webserver maldet(19647): {sigup} verified md5sum of maldet-sigpack.tgz Apr 10 2025 07:00:20 webserver maldet(19647): {sigup} unpacked and installed maldet-sigpack.tgz Apr 10 2025 07:00:20 webserver maldet(19647): {sigup} verified md5sum of maldet-clean.tgz Apr 10 2025 07:00:20 webserver maldet(19647): {sigup} unpacked and installed maldet-clean.tgz Apr 10 2025 07:00:20 webserver maldet(19647): {sigup} signature set update completed Apr 10 2025 07:00:20 webserver maldet(19647): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 10 2025 07:00:20 webserver maldet(19853): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 10 2025 07:00:20 webserver maldet(19853): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 10 2025 07:00:20 webserver maldet(19853): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 10 2025 07:00:20 webserver maldet(19853): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 10 2025 07:00:20 webserver maldet(19853): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 10 2025 07:01:17 webserver maldet(19853): {scan} file list completed in 57s, found 3847 files... Apr 10 2025 07:01:17 webserver maldet(19853): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 10 2025 07:01:17 webserver maldet(19853): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3847 files) in progress... Apr 10 2025 07:02:14 webserver maldet(19853): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Apr 10 2025 07:02:14 webserver maldet(19853): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3847, malware hits 0, cleaned hits 0, time 114s Apr 10 2025 07:02:14 webserver maldet(19853): {scan} scan report saved, to view run: maldet --report 250410-0700.19853 Apr 11 2025 06:57:39 webserver maldet(12679): {update} checking for available updates... Apr 11 2025 06:57:40 webserver maldet(12679): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 11 2025 06:57:40 webserver maldet(12679): {update} hashing install files and checking against server... Apr 11 2025 06:57:40 webserver maldet(12679): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 11 2025 06:57:40 webserver maldet(12679): {update} latest version already installed. Apr 11 2025 06:57:40 webserver maldet(12791): {sigup} performing signature update check... Apr 11 2025 06:57:40 webserver maldet(12791): {sigup} local signature set is version 202504101870578 Apr 11 2025 06:57:41 webserver maldet(12791): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 11 2025 06:57:41 webserver maldet(12791): {sigup} latest signature set already installed Apr 11 2025 06:57:41 webserver maldet(12882): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 11 2025 06:57:41 webserver maldet(12882): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 11 2025 06:57:41 webserver maldet(12882): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 11 2025 06:57:41 webserver maldet(12882): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 11 2025 06:57:41 webserver maldet(12882): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 11 2025 06:57:46 webserver maldet(12882): {scan} file list completed in 5s, found 4722 files... Apr 11 2025 06:57:46 webserver maldet(12882): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 11 2025 06:57:46 webserver maldet(12882): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4722 files) in progress... Apr 11 2025 06:59:06 webserver maldet(12882): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Apr 11 2025 06:59:06 webserver maldet(12882): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4722, malware hits 0, cleaned hits 0, time 85s Apr 11 2025 06:59:06 webserver maldet(12882): {scan} scan report saved, to view run: maldet --report 250411-0657.12882 Apr 12 2025 06:57:52 webserver maldet(26431): {update} checking for available updates... Apr 12 2025 06:57:52 webserver maldet(26431): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 12 2025 06:57:52 webserver maldet(26431): {update} hashing install files and checking against server... Apr 12 2025 06:57:53 webserver maldet(26431): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 12 2025 06:57:53 webserver maldet(26431): {update} latest version already installed. Apr 12 2025 06:57:53 webserver maldet(26543): {sigup} performing signature update check... Apr 12 2025 06:57:53 webserver maldet(26543): {sigup} local signature set is version 202504101870578 Apr 12 2025 06:57:53 webserver maldet(26543): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 12 2025 06:57:53 webserver maldet(26543): {sigup} latest signature set already installed Apr 12 2025 06:57:53 webserver maldet(26634): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 12 2025 06:57:53 webserver maldet(26634): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 12 2025 06:57:53 webserver maldet(26634): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 12 2025 06:57:53 webserver maldet(26634): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 12 2025 06:57:53 webserver maldet(26634): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 12 2025 06:57:58 webserver maldet(26634): {scan} file list completed in 5s, found 430 files... Apr 12 2025 06:57:58 webserver maldet(26634): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 12 2025 06:57:58 webserver maldet(26634): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (430 files) in progress... Apr 12 2025 06:58:06 webserver maldet(26634): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 430, malware hits 0, cleaned hits 0, time 13s Apr 12 2025 06:58:06 webserver maldet(26634): {scan} scan report saved, to view run: maldet --report 250412-0657.26634 Apr 13 2025 06:58:45 webserver maldet(16487): {update} checking for available updates... Apr 13 2025 06:58:45 webserver maldet(16487): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 13 2025 06:58:45 webserver maldet(16487): {update} hashing install files and checking against server... Apr 13 2025 06:58:45 webserver maldet(16487): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 13 2025 06:58:45 webserver maldet(16487): {update} latest version already installed. Apr 13 2025 06:58:45 webserver maldet(16599): {sigup} performing signature update check... Apr 13 2025 06:58:45 webserver maldet(16599): {sigup} local signature set is version 202504101870578 Apr 13 2025 06:58:45 webserver maldet(16599): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 13 2025 06:58:45 webserver maldet(16599): {sigup} new signature set 202504132544993 available Apr 13 2025 06:58:45 webserver maldet(16599): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 13 2025 06:58:46 webserver maldet(16599): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 13 2025 06:58:47 webserver maldet(16599): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 13 2025 06:58:47 webserver maldet(16599): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 13 2025 06:58:47 webserver maldet(16599): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 13 2025 06:58:47 webserver maldet(16599): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 13 2025 06:58:47 webserver maldet(16599): {sigup} verified md5sum of maldet-sigpack.tgz Apr 13 2025 06:58:47 webserver maldet(16599): {sigup} unpacked and installed maldet-sigpack.tgz Apr 13 2025 06:58:47 webserver maldet(16599): {sigup} verified md5sum of maldet-clean.tgz Apr 13 2025 06:58:47 webserver maldet(16599): {sigup} unpacked and installed maldet-clean.tgz Apr 13 2025 06:58:47 webserver maldet(16599): {sigup} signature set update completed Apr 13 2025 06:58:47 webserver maldet(16599): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 13 2025 06:58:47 webserver maldet(16812): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 13 2025 06:58:47 webserver maldet(16812): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 13 2025 06:58:47 webserver maldet(16812): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 13 2025 06:58:47 webserver maldet(16812): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 13 2025 06:58:47 webserver maldet(16812): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 13 2025 06:58:52 webserver maldet(16812): {scan} file list completed in 5s, found 36 files... Apr 13 2025 06:58:52 webserver maldet(16812): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 13 2025 06:58:52 webserver maldet(16812): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (36 files) in progress... Apr 13 2025 06:58:53 webserver maldet(16812): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 36, malware hits 0, cleaned hits 0, time 6s Apr 13 2025 06:58:53 webserver maldet(16812): {scan} scan report saved, to view run: maldet --report 250413-0658.16812 Apr 14 2025 06:59:16 webserver maldet(6749): {update} checking for available updates... Apr 14 2025 06:59:17 webserver maldet(6749): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 14 2025 06:59:17 webserver maldet(6749): {update} hashing install files and checking against server... Apr 14 2025 06:59:17 webserver maldet(6749): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 14 2025 06:59:17 webserver maldet(6749): {update} latest version already installed. Apr 14 2025 06:59:17 webserver maldet(6861): {sigup} performing signature update check... Apr 14 2025 06:59:17 webserver maldet(6861): {sigup} local signature set is version 202504132544993 Apr 14 2025 06:59:17 webserver maldet(6861): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 14 2025 06:59:17 webserver maldet(6861): {sigup} latest signature set already installed Apr 14 2025 06:59:17 webserver maldet(6952): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 14 2025 06:59:17 webserver maldet(6952): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 14 2025 06:59:18 webserver maldet(6952): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 14 2025 06:59:18 webserver maldet(6952): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 14 2025 06:59:18 webserver maldet(6952): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 14 2025 06:59:22 webserver maldet(6952): {scan} file list completed in 4s, found 21 files... Apr 14 2025 06:59:22 webserver maldet(6952): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 14 2025 06:59:22 webserver maldet(6952): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (21 files) in progress... Apr 14 2025 06:59:23 webserver maldet(6952): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 21, malware hits 0, cleaned hits 0, time 6s Apr 14 2025 06:59:23 webserver maldet(6952): {scan} scan report saved, to view run: maldet --report 250414-0659.6952 Apr 15 2025 07:04:06 webserver maldet(23642): {update} checking for available updates... Apr 15 2025 07:04:06 webserver maldet(23642): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 15 2025 07:04:06 webserver maldet(23642): {update} hashing install files and checking against server... Apr 15 2025 07:04:06 webserver maldet(23642): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 15 2025 07:04:06 webserver maldet(23642): {update} latest version already installed. Apr 15 2025 07:04:06 webserver maldet(23754): {sigup} performing signature update check... Apr 15 2025 07:04:06 webserver maldet(23754): {sigup} local signature set is version 202504132544993 Apr 15 2025 07:04:07 webserver maldet(23754): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 15 2025 07:04:07 webserver maldet(23754): {sigup} latest signature set already installed Apr 15 2025 07:04:07 webserver maldet(23845): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 15 2025 07:04:07 webserver maldet(23845): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 15 2025 07:04:07 webserver maldet(23845): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 15 2025 07:04:07 webserver maldet(23845): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 15 2025 07:04:07 webserver maldet(23845): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 15 2025 07:04:12 webserver maldet(23845): {scan} file list completed in 5s, found 42 files... Apr 15 2025 07:04:12 webserver maldet(23845): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 15 2025 07:04:12 webserver maldet(23845): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (42 files) in progress... Apr 15 2025 07:04:12 webserver maldet(23845): {hit} malware hit {HEX}php.generic.cav7.426 found for /var/www/ooareogundevinitiative/wp-content/plugins/wp-file-upload/801.php Apr 15 2025 07:04:12 webserver maldet(23845): {quar} malware quarantined from '/var/www/ooareogundevinitiative/wp-content/plugins/wp-file-upload/801.php' to '/usr/local/maldetect/quarantine/801.php.1742810407' Apr 15 2025 07:04:12 webserver maldet(23845): {clean} could not find clean rule for hit php.generic.cav7 or file /usr/local/maldetect/quarantine/801.php.1742810407 no longer exists. Apr 15 2025 07:04:12 webserver maldet(23845): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 42, malware hits 1, cleaned hits 0, time 5s Apr 15 2025 07:04:12 webserver maldet(23845): {scan} scan report saved, to view run: maldet --report 250415-0704.23845 Apr 15 2025 07:04:12 webserver maldet(23845): {alert} sent scan report to banjiadewoye@gmail.com Apr 16 2025 06:57:44 webserver maldet(2288): {update} checking for available updates... Apr 16 2025 06:57:45 webserver maldet(2288): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 16 2025 06:57:45 webserver maldet(2288): {update} hashing install files and checking against server... Apr 16 2025 06:57:45 webserver maldet(2288): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 16 2025 06:57:45 webserver maldet(2288): {update} latest version already installed. Apr 16 2025 06:57:45 webserver maldet(2400): {sigup} performing signature update check... Apr 16 2025 06:57:45 webserver maldet(2400): {sigup} local signature set is version 202504132544993 Apr 16 2025 06:57:45 webserver maldet(2400): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 16 2025 06:57:45 webserver maldet(2400): {sigup} new signature set 202504163218957 available Apr 16 2025 06:57:45 webserver maldet(2400): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 16 2025 06:57:46 webserver maldet(2400): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 16 2025 06:57:47 webserver maldet(2400): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 16 2025 06:57:47 webserver maldet(2400): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 16 2025 06:57:47 webserver maldet(2400): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 16 2025 06:57:47 webserver maldet(2400): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 16 2025 06:57:47 webserver maldet(2400): {sigup} verified md5sum of maldet-sigpack.tgz Apr 16 2025 06:57:48 webserver maldet(2400): {sigup} unpacked and installed maldet-sigpack.tgz Apr 16 2025 06:57:48 webserver maldet(2400): {sigup} verified md5sum of maldet-clean.tgz Apr 16 2025 06:57:48 webserver maldet(2400): {sigup} unpacked and installed maldet-clean.tgz Apr 16 2025 06:57:48 webserver maldet(2400): {sigup} signature set update completed Apr 16 2025 06:57:48 webserver maldet(2400): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 16 2025 06:57:48 webserver maldet(2605): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 16 2025 06:57:48 webserver maldet(2605): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 16 2025 06:57:48 webserver maldet(2605): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 16 2025 06:57:48 webserver maldet(2605): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 16 2025 06:57:48 webserver maldet(2605): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 16 2025 06:57:53 webserver maldet(2605): {scan} file list completed in 5s, found 806 files... Apr 16 2025 06:57:53 webserver maldet(2605): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 16 2025 06:57:53 webserver maldet(2605): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (806 files) in progress... Apr 16 2025 06:58:19 webserver maldet(2605): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 806, malware hits 0, cleaned hits 0, time 31s Apr 16 2025 06:58:19 webserver maldet(2605): {scan} scan report saved, to view run: maldet --report 250416-0657.2605 Apr 17 2025 06:57:18 webserver maldet(15087): {update} checking for available updates... Apr 17 2025 06:57:18 webserver maldet(15087): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 17 2025 06:57:18 webserver maldet(15087): {update} hashing install files and checking against server... Apr 17 2025 06:57:19 webserver maldet(15087): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 17 2025 06:57:19 webserver maldet(15087): {update} latest version already installed. Apr 17 2025 06:57:19 webserver maldet(15199): {sigup} performing signature update check... Apr 17 2025 06:57:19 webserver maldet(15199): {sigup} local signature set is version 202504163218957 Apr 17 2025 06:57:19 webserver maldet(15199): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 17 2025 06:57:19 webserver maldet(15199): {sigup} latest signature set already installed Apr 17 2025 06:57:19 webserver maldet(15290): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 17 2025 06:57:19 webserver maldet(15290): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 17 2025 06:57:19 webserver maldet(15290): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 17 2025 06:57:19 webserver maldet(15290): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 17 2025 06:57:19 webserver maldet(15290): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 17 2025 06:57:24 webserver maldet(15290): {scan} file list completed in 5s, found 38 files... Apr 17 2025 06:57:24 webserver maldet(15290): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 17 2025 06:57:24 webserver maldet(15290): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (38 files) in progress... Apr 17 2025 06:57:24 webserver maldet(15290): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 38, malware hits 0, cleaned hits 0, time 5s Apr 17 2025 06:57:24 webserver maldet(15290): {scan} scan report saved, to view run: maldet --report 250417-0657.15290 Apr 18 2025 06:56:44 webserver maldet(18326): {update} checking for available updates... Apr 18 2025 06:56:45 webserver maldet(18326): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 18 2025 06:56:45 webserver maldet(18326): {update} hashing install files and checking against server... Apr 18 2025 06:56:45 webserver maldet(18326): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 18 2025 06:56:45 webserver maldet(18326): {update} latest version already installed. Apr 18 2025 06:56:45 webserver maldet(18438): {sigup} performing signature update check... Apr 18 2025 06:56:45 webserver maldet(18438): {sigup} local signature set is version 202504163218957 Apr 18 2025 06:56:45 webserver maldet(18438): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 18 2025 06:56:45 webserver maldet(18438): {sigup} latest signature set already installed Apr 18 2025 06:56:45 webserver maldet(18530): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 18 2025 06:56:45 webserver maldet(18530): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 18 2025 06:56:45 webserver maldet(18530): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 18 2025 06:56:45 webserver maldet(18530): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 18 2025 06:56:45 webserver maldet(18530): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 18 2025 06:56:50 webserver maldet(18530): {scan} file list completed in 5s, found 4607 files... Apr 18 2025 06:56:50 webserver maldet(18530): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 18 2025 06:56:50 webserver maldet(18530): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4607 files) in progress... Apr 18 2025 06:58:11 webserver maldet(18530): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4607, malware hits 0, cleaned hits 0, time 86s Apr 18 2025 06:58:11 webserver maldet(18530): {scan} scan report saved, to view run: maldet --report 250418-0656.18530 Apr 19 2025 06:56:14 webserver maldet(26382): {update} checking for available updates... Apr 19 2025 06:56:14 webserver maldet(26382): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 19 2025 06:56:14 webserver maldet(26382): {update} hashing install files and checking against server... Apr 19 2025 06:56:15 webserver maldet(26382): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 19 2025 06:56:15 webserver maldet(26382): {update} latest version already installed. Apr 19 2025 06:56:15 webserver maldet(26496): {sigup} performing signature update check... Apr 19 2025 06:56:15 webserver maldet(26496): {sigup} local signature set is version 202504163218957 Apr 19 2025 06:56:15 webserver maldet(26496): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 19 2025 06:56:15 webserver maldet(26496): {sigup} new signature set 20250419480331 available Apr 19 2025 06:56:15 webserver maldet(26496): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 19 2025 06:56:16 webserver maldet(26496): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 19 2025 06:56:16 webserver maldet(26496): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 19 2025 06:56:16 webserver maldet(26496): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 19 2025 06:56:17 webserver maldet(26496): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 19 2025 06:56:17 webserver maldet(26496): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 19 2025 06:56:17 webserver maldet(26496): {sigup} verified md5sum of maldet-sigpack.tgz Apr 19 2025 06:56:17 webserver maldet(26496): {sigup} unpacked and installed maldet-sigpack.tgz Apr 19 2025 06:56:17 webserver maldet(26496): {sigup} verified md5sum of maldet-clean.tgz Apr 19 2025 06:56:17 webserver maldet(26496): {sigup} unpacked and installed maldet-clean.tgz Apr 19 2025 06:56:17 webserver maldet(26496): {sigup} signature set update completed Apr 19 2025 06:56:17 webserver maldet(26496): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 19 2025 06:56:17 webserver maldet(26702): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 19 2025 06:56:17 webserver maldet(26702): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 19 2025 06:56:17 webserver maldet(26702): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 19 2025 06:56:17 webserver maldet(26702): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 19 2025 06:56:17 webserver maldet(26702): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 19 2025 06:56:22 webserver maldet(26702): {scan} file list completed in 5s, found 439 files... Apr 19 2025 06:56:22 webserver maldet(26702): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 19 2025 06:56:22 webserver maldet(26702): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (439 files) in progress... Apr 19 2025 06:56:30 webserver maldet(26702): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Apr 19 2025 06:56:30 webserver maldet(26702): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 439, malware hits 0, cleaned hits 0, time 13s Apr 19 2025 06:56:30 webserver maldet(26702): {scan} scan report saved, to view run: maldet --report 250419-0656.26702 Apr 20 2025 07:03:54 webserver maldet(27547): {update} checking for available updates... Apr 20 2025 07:03:55 webserver maldet(27547): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 20 2025 07:03:55 webserver maldet(27547): {update} hashing install files and checking against server... Apr 20 2025 07:03:55 webserver maldet(27547): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 20 2025 07:03:55 webserver maldet(27547): {update} latest version already installed. Apr 20 2025 07:03:55 webserver maldet(27659): {sigup} performing signature update check... Apr 20 2025 07:03:55 webserver maldet(27659): {sigup} local signature set is version 20250419480331 Apr 20 2025 07:03:55 webserver maldet(27659): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 20 2025 07:03:55 webserver maldet(27659): {sigup} latest signature set already installed Apr 20 2025 07:03:56 webserver maldet(27750): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 20 2025 07:03:56 webserver maldet(27750): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 20 2025 07:03:56 webserver maldet(27750): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 20 2025 07:03:56 webserver maldet(27750): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 20 2025 07:03:56 webserver maldet(27750): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 20 2025 07:04:01 webserver maldet(27750): {scan} file list completed in 5s, found 21 files... Apr 20 2025 07:04:01 webserver maldet(27750): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 20 2025 07:04:01 webserver maldet(27750): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (21 files) in progress... Apr 20 2025 07:04:01 webserver maldet(27750): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 21, malware hits 0, cleaned hits 0, time 5s Apr 20 2025 07:04:01 webserver maldet(27750): {scan} scan report saved, to view run: maldet --report 250420-0703.27750 Apr 21 2025 06:59:45 webserver maldet(26535): {update} checking for available updates... Apr 21 2025 06:59:45 webserver maldet(26535): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 21 2025 06:59:45 webserver maldet(26535): {update} hashing install files and checking against server... Apr 21 2025 06:59:46 webserver maldet(26535): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 21 2025 06:59:46 webserver maldet(26535): {update} latest version already installed. Apr 21 2025 06:59:46 webserver maldet(26647): {sigup} performing signature update check... Apr 21 2025 06:59:46 webserver maldet(26647): {sigup} local signature set is version 20250419480331 Apr 21 2025 06:59:46 webserver maldet(26647): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 21 2025 06:59:46 webserver maldet(26647): {sigup} latest signature set already installed Apr 21 2025 06:59:46 webserver maldet(26738): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 21 2025 06:59:46 webserver maldet(26738): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 21 2025 06:59:46 webserver maldet(26738): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 21 2025 06:59:46 webserver maldet(26738): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 21 2025 06:59:46 webserver maldet(26738): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 21 2025 06:59:51 webserver maldet(26738): {scan} file list completed in 5s, found 39 files... Apr 21 2025 06:59:51 webserver maldet(26738): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 21 2025 06:59:51 webserver maldet(26738): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (39 files) in progress... Apr 21 2025 06:59:51 webserver maldet(26738): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 39, malware hits 0, cleaned hits 0, time 5s Apr 21 2025 06:59:51 webserver maldet(26738): {scan} scan report saved, to view run: maldet --report 250421-0659.26738 Apr 22 2025 06:57:44 webserver maldet(3286): {update} checking for available updates... Apr 22 2025 06:57:45 webserver maldet(3286): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 22 2025 06:57:45 webserver maldet(3286): {update} hashing install files and checking against server... Apr 22 2025 06:57:45 webserver maldet(3286): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 22 2025 06:57:45 webserver maldet(3286): {update} latest version already installed. Apr 22 2025 06:57:45 webserver maldet(3398): {sigup} performing signature update check... Apr 22 2025 06:57:45 webserver maldet(3398): {sigup} local signature set is version 20250419480331 Apr 22 2025 06:57:45 webserver maldet(3398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 22 2025 06:57:45 webserver maldet(3398): {sigup} new signature set 202504221155028 available Apr 22 2025 06:57:45 webserver maldet(3398): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 22 2025 06:57:46 webserver maldet(3398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 22 2025 06:57:47 webserver maldet(3398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 22 2025 06:57:47 webserver maldet(3398): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 22 2025 06:57:47 webserver maldet(3398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 22 2025 06:57:47 webserver maldet(3398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 22 2025 06:57:47 webserver maldet(3398): {sigup} verified md5sum of maldet-sigpack.tgz Apr 22 2025 06:57:47 webserver maldet(3398): {sigup} unpacked and installed maldet-sigpack.tgz Apr 22 2025 06:57:48 webserver maldet(3398): {sigup} verified md5sum of maldet-clean.tgz Apr 22 2025 06:57:48 webserver maldet(3398): {sigup} unpacked and installed maldet-clean.tgz Apr 22 2025 06:57:48 webserver maldet(3398): {sigup} signature set update completed Apr 22 2025 06:57:48 webserver maldet(3398): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 22 2025 06:57:48 webserver maldet(3603): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 22 2025 06:57:48 webserver maldet(3603): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 22 2025 06:57:48 webserver maldet(3603): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 22 2025 06:57:48 webserver maldet(3603): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 22 2025 06:57:48 webserver maldet(3603): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 22 2025 06:57:53 webserver maldet(3603): {scan} file list completed in 5s, found 190 files... Apr 22 2025 06:57:53 webserver maldet(3603): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 22 2025 06:57:53 webserver maldet(3603): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (190 files) in progress... Apr 22 2025 06:57:58 webserver maldet(3603): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 190, malware hits 0, cleaned hits 0, time 10s Apr 22 2025 06:57:58 webserver maldet(3603): {scan} scan report saved, to view run: maldet --report 250422-0657.3603 Apr 23 2025 06:58:41 webserver maldet(7183): {update} checking for available updates... Apr 23 2025 06:58:42 webserver maldet(7183): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 23 2025 06:58:42 webserver maldet(7183): {update} hashing install files and checking against server... Apr 23 2025 06:58:42 webserver maldet(7183): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 23 2025 06:58:42 webserver maldet(7183): {update} latest version already installed. Apr 23 2025 06:58:42 webserver maldet(7296): {sigup} performing signature update check... Apr 23 2025 06:58:42 webserver maldet(7296): {sigup} local signature set is version 202504221155028 Apr 23 2025 06:58:43 webserver maldet(7296): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 23 2025 06:58:43 webserver maldet(7296): {sigup} latest signature set already installed Apr 23 2025 06:58:43 webserver maldet(7387): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 23 2025 06:58:43 webserver maldet(7387): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 23 2025 06:58:43 webserver maldet(7387): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 23 2025 06:58:43 webserver maldet(7387): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 23 2025 06:58:43 webserver maldet(7387): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 23 2025 06:58:48 webserver maldet(7387): {scan} file list completed in 5s, found 17 files... Apr 23 2025 06:58:48 webserver maldet(7387): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 23 2025 06:58:48 webserver maldet(7387): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (17 files) in progress... Apr 23 2025 06:58:48 webserver maldet(7387): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 17, malware hits 0, cleaned hits 0, time 5s Apr 23 2025 06:58:48 webserver maldet(7387): {scan} scan report saved, to view run: maldet --report 250423-0658.7387 Apr 24 2025 06:57:13 webserver maldet(2301): {update} checking for available updates... Apr 24 2025 06:57:13 webserver maldet(2301): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 24 2025 06:57:13 webserver maldet(2301): {update} hashing install files and checking against server... Apr 24 2025 06:57:13 webserver maldet(2301): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 24 2025 06:57:13 webserver maldet(2301): {update} latest version already installed. Apr 24 2025 06:57:13 webserver maldet(2413): {sigup} performing signature update check... Apr 24 2025 06:57:13 webserver maldet(2413): {sigup} local signature set is version 202504221155028 Apr 24 2025 06:57:14 webserver maldet(2413): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 24 2025 06:57:14 webserver maldet(2413): {sigup} latest signature set already installed Apr 24 2025 06:57:14 webserver maldet(2504): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 24 2025 06:57:14 webserver maldet(2504): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 24 2025 06:57:14 webserver maldet(2504): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 24 2025 06:57:14 webserver maldet(2504): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 24 2025 06:57:14 webserver maldet(2504): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 24 2025 06:57:19 webserver maldet(2504): {scan} file list completed in 5s, found 17 files... Apr 24 2025 06:57:19 webserver maldet(2504): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 24 2025 06:57:19 webserver maldet(2504): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (17 files) in progress... Apr 24 2025 06:57:19 webserver maldet(2504): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 17, malware hits 0, cleaned hits 0, time 5s Apr 24 2025 06:57:19 webserver maldet(2504): {scan} scan report saved, to view run: maldet --report 250424-0657.2504 Apr 25 2025 07:01:43 webserver maldet(30752): {update} checking for available updates... Apr 25 2025 07:01:43 webserver maldet(30752): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 25 2025 07:01:43 webserver maldet(30752): {update} hashing install files and checking against server... Apr 25 2025 07:01:44 webserver maldet(30752): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 25 2025 07:01:44 webserver maldet(30752): {update} latest version already installed. Apr 25 2025 07:01:44 webserver maldet(30864): {sigup} performing signature update check... Apr 25 2025 07:01:44 webserver maldet(30864): {sigup} local signature set is version 202504221155028 Apr 25 2025 07:01:44 webserver maldet(30864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 25 2025 07:01:44 webserver maldet(30864): {sigup} new signature set 202504251845085 available Apr 25 2025 07:01:44 webserver maldet(30864): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 25 2025 07:01:45 webserver maldet(30864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 25 2025 07:01:45 webserver maldet(30864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 25 2025 07:01:45 webserver maldet(30864): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 25 2025 07:01:46 webserver maldet(30864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 25 2025 07:01:46 webserver maldet(30864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 25 2025 07:01:46 webserver maldet(30864): {sigup} verified md5sum of maldet-sigpack.tgz Apr 25 2025 07:01:46 webserver maldet(30864): {sigup} unpacked and installed maldet-sigpack.tgz Apr 25 2025 07:01:46 webserver maldet(30864): {sigup} verified md5sum of maldet-clean.tgz Apr 25 2025 07:01:46 webserver maldet(30864): {sigup} unpacked and installed maldet-clean.tgz Apr 25 2025 07:01:46 webserver maldet(30864): {sigup} signature set update completed Apr 25 2025 07:01:46 webserver maldet(30864): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 25 2025 07:01:46 webserver maldet(31072): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 25 2025 07:01:46 webserver maldet(31072): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 25 2025 07:01:46 webserver maldet(31072): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 25 2025 07:01:46 webserver maldet(31072): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 25 2025 07:01:46 webserver maldet(31072): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 25 2025 07:01:51 webserver maldet(31072): {scan} file list completed in 5s, found 15 files... Apr 25 2025 07:01:51 webserver maldet(31072): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 25 2025 07:01:51 webserver maldet(31072): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (15 files) in progress... Apr 25 2025 07:01:51 webserver maldet(31072): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 15, malware hits 0, cleaned hits 0, time 5s Apr 25 2025 07:01:51 webserver maldet(31072): {scan} scan report saved, to view run: maldet --report 250425-0701.31072 Apr 26 2025 07:03:27 webserver maldet(16093): {update} checking for available updates... Apr 26 2025 07:03:27 webserver maldet(16093): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 26 2025 07:03:27 webserver maldet(16093): {update} hashing install files and checking against server... Apr 26 2025 07:03:28 webserver maldet(16093): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 26 2025 07:03:28 webserver maldet(16093): {update} latest version already installed. Apr 26 2025 07:03:28 webserver maldet(16205): {sigup} performing signature update check... Apr 26 2025 07:03:28 webserver maldet(16205): {sigup} local signature set is version 202504251845085 Apr 26 2025 07:03:28 webserver maldet(16205): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 26 2025 07:03:28 webserver maldet(16205): {sigup} latest signature set already installed Apr 26 2025 07:03:28 webserver maldet(16296): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 26 2025 07:03:28 webserver maldet(16296): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 26 2025 07:03:28 webserver maldet(16296): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 26 2025 07:03:28 webserver maldet(16296): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 26 2025 07:03:28 webserver maldet(16296): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 26 2025 07:03:33 webserver maldet(16296): {scan} file list completed in 5s, found 16 files... Apr 26 2025 07:03:33 webserver maldet(16296): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 26 2025 07:03:33 webserver maldet(16296): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (16 files) in progress... Apr 26 2025 07:03:33 webserver maldet(16296): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 16, malware hits 0, cleaned hits 0, time 5s Apr 26 2025 07:03:33 webserver maldet(16296): {scan} scan report saved, to view run: maldet --report 250426-0703.16296 Apr 27 2025 07:01:16 webserver maldet(5306): {update} checking for available updates... Apr 27 2025 07:01:16 webserver maldet(5306): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 27 2025 07:01:16 webserver maldet(5306): {update} hashing install files and checking against server... Apr 27 2025 07:01:16 webserver maldet(5306): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 27 2025 07:01:16 webserver maldet(5306): {update} latest version already installed. Apr 27 2025 07:01:16 webserver maldet(5419): {sigup} performing signature update check... Apr 27 2025 07:01:16 webserver maldet(5419): {sigup} local signature set is version 202504251845085 Apr 27 2025 07:01:17 webserver maldet(5419): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 27 2025 07:01:17 webserver maldet(5419): {sigup} latest signature set already installed Apr 27 2025 07:01:17 webserver maldet(5510): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 27 2025 07:01:17 webserver maldet(5510): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 27 2025 07:01:17 webserver maldet(5510): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 27 2025 07:01:17 webserver maldet(5510): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 27 2025 07:01:17 webserver maldet(5510): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 27 2025 07:01:22 webserver maldet(5510): {scan} file list completed in 5s, found 16 files... Apr 27 2025 07:01:22 webserver maldet(5510): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 27 2025 07:01:22 webserver maldet(5510): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (16 files) in progress... Apr 27 2025 07:01:22 webserver maldet(5510): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 16, malware hits 0, cleaned hits 0, time 5s Apr 27 2025 07:01:22 webserver maldet(5510): {scan} scan report saved, to view run: maldet --report 250427-0701.5510 Apr 28 2025 07:09:43 webserver maldet(16844): {update} checking for available updates... Apr 28 2025 07:09:43 webserver maldet(16844): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 28 2025 07:09:43 webserver maldet(16844): {update} hashing install files and checking against server... Apr 28 2025 07:09:44 webserver maldet(16844): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 28 2025 07:09:44 webserver maldet(16844): {update} latest version already installed. Apr 28 2025 07:09:44 webserver maldet(16956): {sigup} performing signature update check... Apr 28 2025 07:09:44 webserver maldet(16956): {sigup} local signature set is version 202504251845085 Apr 28 2025 07:09:44 webserver maldet(16956): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 28 2025 07:09:44 webserver maldet(16956): {sigup} new signature set 202504282520736 available Apr 28 2025 07:09:44 webserver maldet(16956): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 28 2025 07:09:45 webserver maldet(16956): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 28 2025 07:09:46 webserver maldet(16956): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 28 2025 07:09:46 webserver maldet(16956): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 28 2025 07:09:46 webserver maldet(16956): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 28 2025 07:09:46 webserver maldet(16956): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 28 2025 07:09:46 webserver maldet(16956): {sigup} verified md5sum of maldet-sigpack.tgz Apr 28 2025 07:09:46 webserver maldet(16956): {sigup} unpacked and installed maldet-sigpack.tgz Apr 28 2025 07:09:46 webserver maldet(16956): {sigup} verified md5sum of maldet-clean.tgz Apr 28 2025 07:09:46 webserver maldet(16956): {sigup} unpacked and installed maldet-clean.tgz Apr 28 2025 07:09:46 webserver maldet(16956): {sigup} signature set update completed Apr 28 2025 07:09:46 webserver maldet(16956): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 28 2025 07:09:46 webserver maldet(17164): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 28 2025 07:09:47 webserver maldet(17164): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 28 2025 07:09:47 webserver maldet(17164): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 28 2025 07:09:47 webserver maldet(17164): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 28 2025 07:09:47 webserver maldet(17164): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 28 2025 07:09:52 webserver maldet(17164): {scan} file list completed in 5s, found 16 files... Apr 28 2025 07:09:52 webserver maldet(17164): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 28 2025 07:09:52 webserver maldet(17164): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (16 files) in progress... Apr 28 2025 07:09:52 webserver maldet(17164): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 16, malware hits 0, cleaned hits 0, time 6s Apr 28 2025 07:09:52 webserver maldet(17164): {scan} scan report saved, to view run: maldet --report 250428-0709.17164 Apr 29 2025 07:03:53 webserver maldet(26743): {update} checking for available updates... Apr 29 2025 07:03:53 webserver maldet(26743): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 29 2025 07:03:53 webserver maldet(26743): {update} hashing install files and checking against server... Apr 29 2025 07:03:53 webserver maldet(26743): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 29 2025 07:03:53 webserver maldet(26743): {update} latest version already installed. Apr 29 2025 07:03:53 webserver maldet(26855): {sigup} performing signature update check... Apr 29 2025 07:03:53 webserver maldet(26855): {sigup} local signature set is version 202504282520736 Apr 29 2025 07:03:54 webserver maldet(26855): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 29 2025 07:03:54 webserver maldet(26855): {sigup} latest signature set already installed Apr 29 2025 07:03:54 webserver maldet(26946): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 29 2025 07:03:54 webserver maldet(26946): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 29 2025 07:03:54 webserver maldet(26946): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 29 2025 07:03:54 webserver maldet(26946): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 29 2025 07:03:54 webserver maldet(26946): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 29 2025 07:03:59 webserver maldet(26946): {scan} file list completed in 5s, found 21 files... Apr 29 2025 07:03:59 webserver maldet(26946): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 29 2025 07:03:59 webserver maldet(26946): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (21 files) in progress... Apr 29 2025 07:03:59 webserver maldet(26946): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 21, malware hits 0, cleaned hits 0, time 5s Apr 29 2025 07:03:59 webserver maldet(26946): {scan} scan report saved, to view run: maldet --report 250429-0703.26946 Apr 30 2025 06:59:10 webserver maldet(19650): {update} checking for available updates... Apr 30 2025 06:59:10 webserver maldet(19650): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 30 2025 06:59:10 webserver maldet(19650): {update} hashing install files and checking against server... Apr 30 2025 06:59:11 webserver maldet(19650): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 30 2025 06:59:11 webserver maldet(19650): {update} latest version already installed. Apr 30 2025 06:59:11 webserver maldet(19764): {sigup} performing signature update check... Apr 30 2025 06:59:11 webserver maldet(19764): {sigup} local signature set is version 202504282520736 Apr 30 2025 06:59:11 webserver maldet(19764): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 30 2025 06:59:11 webserver maldet(19764): {sigup} latest signature set already installed Apr 30 2025 06:59:11 webserver maldet(19855): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 30 2025 06:59:11 webserver maldet(19855): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 30 2025 06:59:11 webserver maldet(19855): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 30 2025 06:59:11 webserver maldet(19855): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 30 2025 06:59:11 webserver maldet(19855): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 30 2025 06:59:16 webserver maldet(19855): {scan} file list completed in 5s, found 16 files... Apr 30 2025 06:59:16 webserver maldet(19855): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Apr 30 2025 06:59:16 webserver maldet(19855): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (16 files) in progress... Apr 30 2025 06:59:16 webserver maldet(19855): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 16, malware hits 0, cleaned hits 0, time 5s Apr 30 2025 06:59:16 webserver maldet(19855): {scan} scan report saved, to view run: maldet --report 250430-0659.19855 May 01 2025 06:56:31 webserver maldet(32266): {update} checking for available updates... May 01 2025 06:56:32 webserver maldet(32266): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 01 2025 06:56:32 webserver maldet(32266): {update} hashing install files and checking against server... May 01 2025 06:56:32 webserver maldet(32266): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 01 2025 06:56:32 webserver maldet(32266): {update} latest version already installed. May 01 2025 06:56:32 webserver maldet(32378): {sigup} performing signature update check... May 01 2025 06:56:32 webserver maldet(32378): {sigup} local signature set is version 202504282520736 May 01 2025 06:56:32 webserver maldet(32378): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 01 2025 06:56:32 webserver maldet(32378): {sigup} new signature set 202505013184135 available May 01 2025 06:56:32 webserver maldet(32378): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 01 2025 06:56:33 webserver maldet(32378): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 01 2025 06:56:33 webserver maldet(32378): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 01 2025 06:56:33 webserver maldet(32378): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 01 2025 06:56:34 webserver maldet(32378): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 01 2025 06:56:34 webserver maldet(32378): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 01 2025 06:56:34 webserver maldet(32378): {sigup} verified md5sum of maldet-sigpack.tgz May 01 2025 06:56:34 webserver maldet(32378): {sigup} unpacked and installed maldet-sigpack.tgz May 01 2025 06:56:34 webserver maldet(32378): {sigup} verified md5sum of maldet-clean.tgz May 01 2025 06:56:34 webserver maldet(32378): {sigup} unpacked and installed maldet-clean.tgz May 01 2025 06:56:34 webserver maldet(32378): {sigup} signature set update completed May 01 2025 06:56:34 webserver maldet(32378): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 01 2025 06:56:34 webserver maldet(32587): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 01 2025 06:56:34 webserver maldet(32587): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 01 2025 06:56:34 webserver maldet(32587): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 01 2025 06:56:34 webserver maldet(32587): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 01 2025 06:56:34 webserver maldet(32587): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 01 2025 06:56:39 webserver maldet(32587): {scan} file list completed in 5s, found 53 files... May 01 2025 06:56:39 webserver maldet(32587): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 01 2025 06:56:39 webserver maldet(32587): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (53 files) in progress... May 01 2025 06:56:45 webserver maldet(32587): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 53, malware hits 0, cleaned hits 0, time 11s May 01 2025 06:56:45 webserver maldet(32587): {scan} scan report saved, to view run: maldet --report 250501-0656.32587 May 02 2025 07:03:55 webserver maldet(10834): {update} checking for available updates... May 02 2025 07:03:55 webserver maldet(10834): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 02 2025 07:03:55 webserver maldet(10834): {update} hashing install files and checking against server... May 02 2025 07:03:55 webserver maldet(10834): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 02 2025 07:03:55 webserver maldet(10834): {update} latest version already installed. May 02 2025 07:03:56 webserver maldet(10946): {sigup} performing signature update check... May 02 2025 07:03:56 webserver maldet(10946): {sigup} local signature set is version 202505013184135 May 02 2025 07:03:56 webserver maldet(10946): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 02 2025 07:03:56 webserver maldet(10946): {sigup} latest signature set already installed May 02 2025 07:03:56 webserver maldet(11037): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 02 2025 07:03:56 webserver maldet(11037): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 02 2025 07:03:56 webserver maldet(11037): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 02 2025 07:03:56 webserver maldet(11037): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 02 2025 07:03:56 webserver maldet(11037): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 02 2025 07:04:01 webserver maldet(11037): {scan} file list completed in 5s, found 17 files... May 02 2025 07:04:01 webserver maldet(11037): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 02 2025 07:04:01 webserver maldet(11037): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (17 files) in progress... May 02 2025 07:04:01 webserver maldet(11037): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 17, malware hits 0, cleaned hits 0, time 5s May 02 2025 07:04:01 webserver maldet(11037): {scan} scan report saved, to view run: maldet --report 250502-0703.11037 May 03 2025 07:01:38 webserver maldet(17904): {update} checking for available updates... May 03 2025 07:01:39 webserver maldet(17904): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 03 2025 07:01:39 webserver maldet(17904): {update} hashing install files and checking against server... May 03 2025 07:01:39 webserver maldet(17904): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 03 2025 07:01:39 webserver maldet(17904): {update} latest version already installed. May 03 2025 07:01:39 webserver maldet(18017): {sigup} performing signature update check... May 03 2025 07:01:39 webserver maldet(18017): {sigup} local signature set is version 202505013184135 May 03 2025 07:01:39 webserver maldet(18017): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 03 2025 07:01:39 webserver maldet(18017): {sigup} latest signature set already installed May 03 2025 07:01:39 webserver maldet(18108): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 03 2025 07:01:39 webserver maldet(18108): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 03 2025 07:01:39 webserver maldet(18108): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 03 2025 07:01:39 webserver maldet(18108): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 03 2025 07:01:39 webserver maldet(18108): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 03 2025 07:01:44 webserver maldet(18108): {scan} file list completed in 5s, found 19 files... May 03 2025 07:01:44 webserver maldet(18108): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 03 2025 07:01:44 webserver maldet(18108): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (19 files) in progress... May 03 2025 07:01:45 webserver maldet(18108): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! May 03 2025 07:01:45 webserver maldet(18108): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 19, malware hits 0, cleaned hits 0, time 6s May 03 2025 07:01:45 webserver maldet(18108): {scan} scan report saved, to view run: maldet --report 250503-0701.18108 May 04 2025 06:59:00 webserver maldet(22602): {update} checking for available updates... May 04 2025 06:59:01 webserver maldet(22602): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 04 2025 06:59:01 webserver maldet(22602): {update} hashing install files and checking against server... May 04 2025 06:59:01 webserver maldet(22602): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 04 2025 06:59:01 webserver maldet(22602): {update} latest version already installed. May 04 2025 06:59:01 webserver maldet(22716): {sigup} performing signature update check... May 04 2025 06:59:01 webserver maldet(22716): {sigup} local signature set is version 202505013184135 May 04 2025 06:59:02 webserver maldet(22716): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 04 2025 06:59:02 webserver maldet(22716): {sigup} new signature set 20250504486927 available May 04 2025 06:59:02 webserver maldet(22716): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 04 2025 06:59:02 webserver maldet(22716): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 04 2025 06:59:03 webserver maldet(22716): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 04 2025 06:59:03 webserver maldet(22716): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 04 2025 06:59:03 webserver maldet(22716): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 04 2025 06:59:03 webserver maldet(22716): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 04 2025 06:59:03 webserver maldet(22716): {sigup} verified md5sum of maldet-sigpack.tgz May 04 2025 06:59:03 webserver maldet(22716): {sigup} unpacked and installed maldet-sigpack.tgz May 04 2025 06:59:03 webserver maldet(22716): {sigup} verified md5sum of maldet-clean.tgz May 04 2025 06:59:03 webserver maldet(22716): {sigup} unpacked and installed maldet-clean.tgz May 04 2025 06:59:03 webserver maldet(22716): {sigup} signature set update completed May 04 2025 06:59:03 webserver maldet(22716): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 04 2025 06:59:03 webserver maldet(22924): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 04 2025 06:59:04 webserver maldet(22924): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 04 2025 06:59:04 webserver maldet(22924): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 04 2025 06:59:04 webserver maldet(22924): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 04 2025 06:59:04 webserver maldet(22924): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 04 2025 06:59:09 webserver maldet(22924): {scan} file list completed in 5s, found 18 files... May 04 2025 06:59:09 webserver maldet(22924): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 04 2025 06:59:09 webserver maldet(22924): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (18 files) in progress... May 04 2025 06:59:09 webserver maldet(22924): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 18, malware hits 0, cleaned hits 0, time 6s May 04 2025 06:59:09 webserver maldet(22924): {scan} scan report saved, to view run: maldet --report 250504-0659.22924 May 05 2025 06:57:49 webserver maldet(31977): {update} checking for available updates... May 05 2025 06:57:49 webserver maldet(31977): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 05 2025 06:57:49 webserver maldet(31977): {update} hashing install files and checking against server... May 05 2025 06:57:50 webserver maldet(31977): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 05 2025 06:57:50 webserver maldet(31977): {update} latest version already installed. May 05 2025 06:57:50 webserver maldet(32091): {sigup} performing signature update check... May 05 2025 06:57:50 webserver maldet(32091): {sigup} local signature set is version 20250504486927 May 05 2025 06:57:50 webserver maldet(32091): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 05 2025 06:57:50 webserver maldet(32091): {sigup} latest signature set already installed May 05 2025 06:57:50 webserver maldet(32182): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 05 2025 06:57:50 webserver maldet(32182): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 05 2025 06:57:50 webserver maldet(32182): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 05 2025 06:57:50 webserver maldet(32182): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 05 2025 06:57:50 webserver maldet(32182): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 05 2025 06:57:55 webserver maldet(32182): {scan} file list completed in 5s, found 17 files... May 05 2025 06:57:55 webserver maldet(32182): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 05 2025 06:57:55 webserver maldet(32182): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (17 files) in progress... May 05 2025 06:57:55 webserver maldet(32182): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 17, malware hits 0, cleaned hits 0, time 5s May 05 2025 06:57:55 webserver maldet(32182): {scan} scan report saved, to view run: maldet --report 250505-0657.32182 May 06 2025 07:00:50 webserver maldet(8444): {update} checking for available updates... May 06 2025 07:00:50 webserver maldet(8444): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 06 2025 07:00:50 webserver maldet(8444): {update} hashing install files and checking against server... May 06 2025 07:00:50 webserver maldet(8444): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 06 2025 07:00:50 webserver maldet(8444): {update} latest version already installed. May 06 2025 07:00:50 webserver maldet(8556): {sigup} performing signature update check... May 06 2025 07:00:50 webserver maldet(8556): {sigup} local signature set is version 20250504486927 May 06 2025 07:00:51 webserver maldet(8556): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 06 2025 07:00:51 webserver maldet(8556): {sigup} latest signature set already installed May 06 2025 07:00:51 webserver maldet(8647): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 06 2025 07:00:51 webserver maldet(8647): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 06 2025 07:00:51 webserver maldet(8647): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 06 2025 07:00:51 webserver maldet(8647): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 06 2025 07:00:51 webserver maldet(8647): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 06 2025 07:00:56 webserver maldet(8647): {scan} file list completed in 5s, found 17 files... May 06 2025 07:00:56 webserver maldet(8647): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 06 2025 07:00:56 webserver maldet(8647): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (17 files) in progress... May 06 2025 07:00:56 webserver maldet(8647): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 17, malware hits 0, cleaned hits 0, time 5s May 06 2025 07:00:56 webserver maldet(8647): {scan} scan report saved, to view run: maldet --report 250506-0700.8647 May 07 2025 06:57:17 webserver maldet(12412): {update} checking for available updates... May 07 2025 06:57:17 webserver maldet(12412): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 07 2025 06:57:17 webserver maldet(12412): {update} hashing install files and checking against server... May 07 2025 06:57:18 webserver maldet(12412): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 07 2025 06:57:18 webserver maldet(12412): {update} latest version already installed. May 07 2025 06:57:18 webserver maldet(12524): {sigup} performing signature update check... May 07 2025 06:57:18 webserver maldet(12524): {sigup} local signature set is version 20250504486927 May 07 2025 06:57:18 webserver maldet(12524): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 07 2025 06:57:18 webserver maldet(12524): {sigup} new signature set 202505071163993 available May 07 2025 06:57:18 webserver maldet(12524): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 07 2025 06:57:19 webserver maldet(12524): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 07 2025 06:57:19 webserver maldet(12524): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 07 2025 06:57:19 webserver maldet(12524): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 07 2025 06:57:20 webserver maldet(12524): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 07 2025 06:57:20 webserver maldet(12524): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 07 2025 06:57:20 webserver maldet(12524): {sigup} verified md5sum of maldet-sigpack.tgz May 07 2025 06:57:20 webserver maldet(12524): {sigup} unpacked and installed maldet-sigpack.tgz May 07 2025 06:57:20 webserver maldet(12524): {sigup} verified md5sum of maldet-clean.tgz May 07 2025 06:57:20 webserver maldet(12524): {sigup} unpacked and installed maldet-clean.tgz May 07 2025 06:57:20 webserver maldet(12524): {sigup} signature set update completed May 07 2025 06:57:20 webserver maldet(12524): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 07 2025 06:57:20 webserver maldet(12729): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 07 2025 06:57:20 webserver maldet(12729): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 07 2025 06:57:20 webserver maldet(12729): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 07 2025 06:57:20 webserver maldet(12729): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 07 2025 06:57:20 webserver maldet(12729): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 07 2025 06:57:25 webserver maldet(12729): {scan} file list completed in 5s, found 15 files... May 07 2025 06:57:25 webserver maldet(12729): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 07 2025 06:57:25 webserver maldet(12729): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (15 files) in progress... May 07 2025 06:57:25 webserver maldet(12729): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 15, malware hits 0, cleaned hits 0, time 5s May 07 2025 06:57:25 webserver maldet(12729): {scan} scan report saved, to view run: maldet --report 250507-0657.12729 May 08 2025 06:55:11 webserver maldet(14679): {update} checking for available updates... May 08 2025 06:55:12 webserver maldet(14679): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 08 2025 06:55:12 webserver maldet(14679): {update} hashing install files and checking against server... May 08 2025 06:55:12 webserver maldet(14679): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 08 2025 06:55:12 webserver maldet(14679): {update} latest version already installed. May 08 2025 06:55:12 webserver maldet(14791): {sigup} performing signature update check... May 08 2025 06:55:12 webserver maldet(14791): {sigup} local signature set is version 202505071163993 May 08 2025 06:55:12 webserver maldet(14791): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 08 2025 06:55:12 webserver maldet(14791): {sigup} latest signature set already installed May 08 2025 06:55:12 webserver maldet(14882): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 08 2025 06:55:12 webserver maldet(14882): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 08 2025 06:55:12 webserver maldet(14882): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 08 2025 06:55:12 webserver maldet(14882): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 08 2025 06:55:12 webserver maldet(14882): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 08 2025 06:55:17 webserver maldet(14882): {scan} file list completed in 5s, found 17 files... May 08 2025 06:55:17 webserver maldet(14882): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 08 2025 06:55:17 webserver maldet(14882): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (17 files) in progress... May 08 2025 06:55:18 webserver maldet(14882): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 17, malware hits 0, cleaned hits 0, time 6s May 08 2025 06:55:18 webserver maldet(14882): {scan} scan report saved, to view run: maldet --report 250508-0655.14882 May 09 2025 06:57:05 webserver maldet(23296): {update} checking for available updates... May 09 2025 06:57:05 webserver maldet(23296): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 09 2025 06:57:05 webserver maldet(23296): {update} hashing install files and checking against server... May 09 2025 06:57:05 webserver maldet(23296): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 09 2025 06:57:05 webserver maldet(23296): {update} latest version already installed. May 09 2025 06:57:05 webserver maldet(23408): {sigup} performing signature update check... May 09 2025 06:57:05 webserver maldet(23408): {sigup} local signature set is version 202505071163993 May 09 2025 06:57:06 webserver maldet(23408): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 09 2025 06:57:06 webserver maldet(23408): {sigup} latest signature set already installed May 09 2025 06:57:06 webserver maldet(23499): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 09 2025 06:57:06 webserver maldet(23499): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 09 2025 06:57:06 webserver maldet(23499): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 09 2025 06:57:06 webserver maldet(23499): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 09 2025 06:57:06 webserver maldet(23499): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 09 2025 06:57:11 webserver maldet(23499): {scan} file list completed in 5s, found 17 files... May 09 2025 06:57:11 webserver maldet(23499): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 09 2025 06:57:11 webserver maldet(23499): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (17 files) in progress... May 09 2025 06:57:11 webserver maldet(23499): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 17, malware hits 0, cleaned hits 0, time 5s May 09 2025 06:57:11 webserver maldet(23499): {scan} scan report saved, to view run: maldet --report 250509-0657.23499 May 10 2025 07:00:50 webserver maldet(30491): {update} checking for available updates... May 10 2025 07:00:51 webserver maldet(30491): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 10 2025 07:00:51 webserver maldet(30491): {update} hashing install files and checking against server... May 10 2025 07:00:51 webserver maldet(30491): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 10 2025 07:00:51 webserver maldet(30491): {update} latest version already installed. May 10 2025 07:00:51 webserver maldet(30603): {sigup} performing signature update check... May 10 2025 07:00:51 webserver maldet(30603): {sigup} local signature set is version 202505071163993 May 10 2025 07:00:51 webserver maldet(30603): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 10 2025 07:00:51 webserver maldet(30603): {sigup} new signature set 202505102039127 available May 10 2025 07:00:51 webserver maldet(30603): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 10 2025 07:00:52 webserver maldet(30603): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 10 2025 07:00:53 webserver maldet(30603): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 10 2025 07:00:53 webserver maldet(30603): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 10 2025 07:00:53 webserver maldet(30603): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 10 2025 07:00:53 webserver maldet(30603): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 10 2025 07:00:53 webserver maldet(30603): {sigup} verified md5sum of maldet-sigpack.tgz May 10 2025 07:00:53 webserver maldet(30603): {sigup} unpacked and installed maldet-sigpack.tgz May 10 2025 07:00:53 webserver maldet(30603): {sigup} verified md5sum of maldet-clean.tgz May 10 2025 07:00:53 webserver maldet(30603): {sigup} unpacked and installed maldet-clean.tgz May 10 2025 07:00:53 webserver maldet(30603): {sigup} signature set update completed May 10 2025 07:00:53 webserver maldet(30603): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 10 2025 07:00:53 webserver maldet(30825): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 10 2025 07:00:54 webserver maldet(30825): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 10 2025 07:00:54 webserver maldet(30825): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 10 2025 07:00:54 webserver maldet(30825): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 10 2025 07:00:54 webserver maldet(30825): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 10 2025 07:00:59 webserver maldet(30825): {scan} file list completed in 5s, found 20 files... May 10 2025 07:00:59 webserver maldet(30825): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 10 2025 07:00:59 webserver maldet(30825): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (20 files) in progress... May 10 2025 07:00:59 webserver maldet(30825): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 20, malware hits 0, cleaned hits 0, time 6s May 10 2025 07:00:59 webserver maldet(30825): {scan} scan report saved, to view run: maldet --report 250510-0700.30825 May 11 2025 06:57:27 webserver maldet(1012): {update} checking for available updates... May 11 2025 06:57:27 webserver maldet(1012): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 11 2025 06:57:27 webserver maldet(1012): {update} hashing install files and checking against server... May 11 2025 06:57:27 webserver maldet(1012): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 11 2025 06:57:27 webserver maldet(1012): {update} latest version already installed. May 11 2025 06:57:27 webserver maldet(1124): {sigup} performing signature update check... May 11 2025 06:57:27 webserver maldet(1124): {sigup} local signature set is version 202505102039127 May 11 2025 06:57:28 webserver maldet(1124): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 11 2025 06:57:28 webserver maldet(1124): {sigup} latest signature set already installed May 11 2025 06:57:28 webserver maldet(1215): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 11 2025 06:57:28 webserver maldet(1215): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 11 2025 06:57:28 webserver maldet(1215): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 11 2025 06:57:28 webserver maldet(1215): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 11 2025 06:57:28 webserver maldet(1215): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 11 2025 06:57:33 webserver maldet(1215): {scan} file list completed in 5s, found 17 files... May 11 2025 06:57:33 webserver maldet(1215): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 11 2025 06:57:33 webserver maldet(1215): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (17 files) in progress... May 11 2025 06:57:33 webserver maldet(1215): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 17, malware hits 0, cleaned hits 0, time 5s May 11 2025 06:57:33 webserver maldet(1215): {scan} scan report saved, to view run: maldet --report 250511-0657.1215 May 12 2025 07:03:00 webserver maldet(7080): {update} checking for available updates... May 12 2025 07:03:00 webserver maldet(7080): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 12 2025 07:03:00 webserver maldet(7080): {update} hashing install files and checking against server... May 12 2025 07:03:00 webserver maldet(7080): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 12 2025 07:03:00 webserver maldet(7080): {update} latest version already installed. May 12 2025 07:03:00 webserver maldet(7193): {sigup} performing signature update check... May 12 2025 07:03:00 webserver maldet(7193): {sigup} local signature set is version 202505102039127 May 12 2025 07:03:01 webserver maldet(7193): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 12 2025 07:03:01 webserver maldet(7193): {sigup} latest signature set already installed May 12 2025 07:03:01 webserver maldet(7284): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 12 2025 07:03:01 webserver maldet(7284): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 12 2025 07:03:01 webserver maldet(7284): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 12 2025 07:03:01 webserver maldet(7284): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 12 2025 07:03:01 webserver maldet(7284): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 12 2025 07:03:06 webserver maldet(7284): {scan} file list completed in 5s, found 18 files... May 12 2025 07:03:06 webserver maldet(7284): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 12 2025 07:03:06 webserver maldet(7284): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (18 files) in progress... May 12 2025 07:03:06 webserver maldet(7284): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 18, malware hits 0, cleaned hits 0, time 5s May 12 2025 07:03:06 webserver maldet(7284): {scan} scan report saved, to view run: maldet --report 250512-0703.7284 May 13 2025 06:58:11 webserver maldet(13072): {update} checking for available updates... May 13 2025 06:58:11 webserver maldet(13072): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 13 2025 06:58:11 webserver maldet(13072): {update} hashing install files and checking against server... May 13 2025 06:58:11 webserver maldet(13072): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 13 2025 06:58:11 webserver maldet(13072): {update} latest version already installed. May 13 2025 06:58:11 webserver maldet(13184): {sigup} performing signature update check... May 13 2025 06:58:11 webserver maldet(13184): {sigup} local signature set is version 202505102039127 May 13 2025 06:58:12 webserver maldet(13184): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 13 2025 06:58:12 webserver maldet(13184): {sigup} new signature set 202505133012176 available May 13 2025 06:58:12 webserver maldet(13184): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 13 2025 06:58:12 webserver maldet(13184): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 13 2025 06:58:13 webserver maldet(13184): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 13 2025 06:58:13 webserver maldet(13184): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 13 2025 06:58:13 webserver maldet(13184): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 13 2025 06:58:13 webserver maldet(13184): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 13 2025 06:58:13 webserver maldet(13184): {sigup} verified md5sum of maldet-sigpack.tgz May 13 2025 06:58:13 webserver maldet(13184): {sigup} unpacked and installed maldet-sigpack.tgz May 13 2025 06:58:13 webserver maldet(13184): {sigup} verified md5sum of maldet-clean.tgz May 13 2025 06:58:13 webserver maldet(13184): {sigup} unpacked and installed maldet-clean.tgz May 13 2025 06:58:13 webserver maldet(13184): {sigup} signature set update completed May 13 2025 06:58:13 webserver maldet(13184): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 13 2025 06:58:13 webserver maldet(13389): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 13 2025 06:58:13 webserver maldet(13389): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 13 2025 06:58:13 webserver maldet(13389): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 13 2025 06:58:13 webserver maldet(13389): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 13 2025 06:58:13 webserver maldet(13389): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 13 2025 06:58:18 webserver maldet(13389): {scan} file list completed in 5s, found 17 files... May 13 2025 06:58:18 webserver maldet(13389): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 13 2025 06:58:18 webserver maldet(13389): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (17 files) in progress... May 13 2025 06:58:19 webserver maldet(13389): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 17, malware hits 0, cleaned hits 0, time 6s May 13 2025 06:58:19 webserver maldet(13389): {scan} scan report saved, to view run: maldet --report 250513-0658.13389 May 14 2025 06:59:23 webserver maldet(28433): {update} checking for available updates... May 14 2025 06:59:24 webserver maldet(28433): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 14 2025 06:59:24 webserver maldet(28433): {update} hashing install files and checking against server... May 14 2025 06:59:24 webserver maldet(28433): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 14 2025 06:59:24 webserver maldet(28433): {update} latest version already installed. May 14 2025 06:59:24 webserver maldet(28545): {sigup} performing signature update check... May 14 2025 06:59:24 webserver maldet(28545): {sigup} local signature set is version 202505133012176 May 14 2025 06:59:25 webserver maldet(28545): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 14 2025 06:59:25 webserver maldet(28545): {sigup} latest signature set already installed May 14 2025 06:59:25 webserver maldet(28636): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 14 2025 06:59:25 webserver maldet(28636): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 14 2025 06:59:25 webserver maldet(28636): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 14 2025 06:59:25 webserver maldet(28636): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 14 2025 06:59:25 webserver maldet(28636): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 14 2025 06:59:30 webserver maldet(28636): {scan} file list completed in 5s, found 19 files... May 14 2025 06:59:30 webserver maldet(28636): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 14 2025 06:59:30 webserver maldet(28636): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (19 files) in progress... May 14 2025 06:59:30 webserver maldet(28636): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 19, malware hits 0, cleaned hits 0, time 5s May 14 2025 06:59:30 webserver maldet(28636): {scan} scan report saved, to view run: maldet --report 250514-0659.28636 May 15 2025 07:06:41 webserver maldet(17574): {update} checking for available updates... May 15 2025 07:06:41 webserver maldet(17574): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 15 2025 07:06:41 webserver maldet(17574): {update} hashing install files and checking against server... May 15 2025 07:06:41 webserver maldet(17574): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 15 2025 07:06:41 webserver maldet(17574): {update} latest version already installed. May 15 2025 07:06:42 webserver maldet(17687): {sigup} performing signature update check... May 15 2025 07:06:42 webserver maldet(17687): {sigup} local signature set is version 202505133012176 May 15 2025 07:06:42 webserver maldet(17687): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 15 2025 07:06:42 webserver maldet(17687): {sigup} latest signature set already installed May 15 2025 07:06:42 webserver maldet(17778): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 15 2025 07:06:42 webserver maldet(17778): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 15 2025 07:06:42 webserver maldet(17778): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 15 2025 07:06:42 webserver maldet(17778): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 15 2025 07:06:42 webserver maldet(17778): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 15 2025 07:06:47 webserver maldet(17778): {scan} file list completed in 5s, found 13 files... May 15 2025 07:06:47 webserver maldet(17778): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 15 2025 07:06:47 webserver maldet(17778): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (13 files) in progress... May 15 2025 07:06:47 webserver maldet(17778): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! May 15 2025 07:06:47 webserver maldet(17778): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 13, malware hits 0, cleaned hits 0, time 5s May 15 2025 07:06:47 webserver maldet(17778): {scan} scan report saved, to view run: maldet --report 250515-0706.17778 May 16 2025 07:09:07 webserver maldet(23121): {update} checking for available updates... May 16 2025 07:09:07 webserver maldet(23121): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 16 2025 07:09:07 webserver maldet(23121): {update} hashing install files and checking against server... May 16 2025 07:09:08 webserver maldet(23121): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 16 2025 07:09:08 webserver maldet(23121): {update} latest version already installed. May 16 2025 07:09:08 webserver maldet(23234): {sigup} performing signature update check... May 16 2025 07:09:08 webserver maldet(23234): {sigup} local signature set is version 202505133012176 May 16 2025 07:09:08 webserver maldet(23234): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 16 2025 07:09:08 webserver maldet(23234): {sigup} new signature set 202505163985107 available May 16 2025 07:09:08 webserver maldet(23234): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 16 2025 07:09:09 webserver maldet(23234): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 16 2025 07:09:09 webserver maldet(23234): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 16 2025 07:09:09 webserver maldet(23234): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 16 2025 07:09:10 webserver maldet(23234): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 16 2025 07:09:10 webserver maldet(23234): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 16 2025 07:09:10 webserver maldet(23234): {sigup} verified md5sum of maldet-sigpack.tgz May 16 2025 07:09:10 webserver maldet(23234): {sigup} unpacked and installed maldet-sigpack.tgz May 16 2025 07:09:10 webserver maldet(23234): {sigup} verified md5sum of maldet-clean.tgz May 16 2025 07:09:10 webserver maldet(23234): {sigup} unpacked and installed maldet-clean.tgz May 16 2025 07:09:10 webserver maldet(23234): {sigup} signature set update completed May 16 2025 07:09:10 webserver maldet(23234): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 16 2025 07:09:10 webserver maldet(23483): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 16 2025 07:09:10 webserver maldet(23483): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 16 2025 07:09:10 webserver maldet(23483): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 16 2025 07:09:10 webserver maldet(23483): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 16 2025 07:09:10 webserver maldet(23483): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 16 2025 07:09:15 webserver maldet(23483): {scan} file list completed in 5s, found 11 files... May 16 2025 07:09:15 webserver maldet(23483): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 16 2025 07:09:15 webserver maldet(23483): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (11 files) in progress... May 16 2025 07:09:16 webserver maldet(23483): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 11, malware hits 0, cleaned hits 0, time 6s May 16 2025 07:09:16 webserver maldet(23483): {scan} scan report saved, to view run: maldet --report 250516-0709.23483 May 17 2025 06:57:21 webserver maldet(11896): {update} checking for available updates... May 17 2025 06:57:21 webserver maldet(11896): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 17 2025 06:57:21 webserver maldet(11896): {update} hashing install files and checking against server... May 17 2025 06:57:22 webserver maldet(11896): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 17 2025 06:57:22 webserver maldet(11896): {update} latest version already installed. May 17 2025 06:57:22 webserver maldet(12008): {sigup} performing signature update check... May 17 2025 06:57:22 webserver maldet(12008): {sigup} local signature set is version 202505163985107 May 17 2025 06:57:22 webserver maldet(12008): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 17 2025 06:57:22 webserver maldet(12008): {sigup} latest signature set already installed May 17 2025 06:57:22 webserver maldet(12099): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 17 2025 06:57:22 webserver maldet(12099): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 17 2025 06:57:22 webserver maldet(12099): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 17 2025 06:57:22 webserver maldet(12099): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 17 2025 06:57:22 webserver maldet(12099): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 17 2025 06:57:27 webserver maldet(12099): {scan} file list completed in 5s, found 9 files... May 17 2025 06:57:27 webserver maldet(12099): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 17 2025 06:57:27 webserver maldet(12099): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (9 files) in progress... May 17 2025 06:57:27 webserver maldet(12099): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 9, malware hits 0, cleaned hits 0, time 5s May 17 2025 06:57:27 webserver maldet(12099): {scan} scan report saved, to view run: maldet --report 250517-0657.12099 May 18 2025 06:58:14 webserver maldet(23484): {update} checking for available updates... May 18 2025 06:58:14 webserver maldet(23484): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 18 2025 06:58:14 webserver maldet(23484): {update} hashing install files and checking against server... May 18 2025 06:58:15 webserver maldet(23484): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 18 2025 06:58:15 webserver maldet(23484): {update} latest version already installed. May 18 2025 06:58:15 webserver maldet(23596): {sigup} performing signature update check... May 18 2025 06:58:15 webserver maldet(23596): {sigup} local signature set is version 202505163985107 May 18 2025 06:58:15 webserver maldet(23596): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 18 2025 06:58:15 webserver maldet(23596): {sigup} latest signature set already installed May 18 2025 06:58:15 webserver maldet(23687): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 18 2025 06:58:15 webserver maldet(23687): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 18 2025 06:58:15 webserver maldet(23687): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 18 2025 06:58:15 webserver maldet(23687): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 18 2025 06:58:15 webserver maldet(23687): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 18 2025 06:58:20 webserver maldet(23687): {scan} file list completed in 5s, found 13 files... May 18 2025 06:58:20 webserver maldet(23687): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 18 2025 06:58:20 webserver maldet(23687): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (13 files) in progress... May 18 2025 06:58:20 webserver maldet(23687): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 13, malware hits 0, cleaned hits 0, time 5s May 18 2025 06:58:20 webserver maldet(23687): {scan} scan report saved, to view run: maldet --report 250518-0658.23687 May 19 2025 06:56:37 webserver maldet(14747): {update} checking for available updates... May 19 2025 06:56:38 webserver maldet(14747): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 19 2025 06:56:38 webserver maldet(14747): {update} hashing install files and checking against server... May 19 2025 06:56:38 webserver maldet(14747): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 19 2025 06:56:38 webserver maldet(14747): {update} latest version already installed. May 19 2025 06:56:38 webserver maldet(14861): {sigup} performing signature update check... May 19 2025 06:56:38 webserver maldet(14861): {sigup} local signature set is version 202505163985107 May 19 2025 06:56:38 webserver maldet(14861): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 19 2025 06:56:38 webserver maldet(14861): {sigup} new signature set 20250519762470 available May 19 2025 06:56:38 webserver maldet(14861): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 19 2025 06:56:39 webserver maldet(14861): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 19 2025 06:56:40 webserver maldet(14861): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 19 2025 06:56:40 webserver maldet(14861): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 19 2025 06:56:40 webserver maldet(14861): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 19 2025 06:56:40 webserver maldet(14861): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 19 2025 06:56:40 webserver maldet(14861): {sigup} verified md5sum of maldet-sigpack.tgz May 19 2025 06:56:40 webserver maldet(14861): {sigup} unpacked and installed maldet-sigpack.tgz May 19 2025 06:56:40 webserver maldet(14861): {sigup} verified md5sum of maldet-clean.tgz May 19 2025 06:56:40 webserver maldet(14861): {sigup} unpacked and installed maldet-clean.tgz May 19 2025 06:56:40 webserver maldet(14861): {sigup} signature set update completed May 19 2025 06:56:40 webserver maldet(14861): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 19 2025 06:56:40 webserver maldet(15072): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 19 2025 06:56:40 webserver maldet(15072): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 19 2025 06:56:40 webserver maldet(15072): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 19 2025 06:56:40 webserver maldet(15072): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 19 2025 06:56:40 webserver maldet(15072): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 19 2025 06:56:45 webserver maldet(15072): {scan} file list completed in 5s, found 16 files... May 19 2025 06:56:45 webserver maldet(15072): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 19 2025 06:56:45 webserver maldet(15072): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (16 files) in progress... May 19 2025 06:56:46 webserver maldet(15072): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 16, malware hits 0, cleaned hits 0, time 6s May 19 2025 06:56:46 webserver maldet(15072): {scan} scan report saved, to view run: maldet --report 250519-0656.15072 May 20 2025 06:59:13 webserver maldet(22511): {update} checking for available updates... May 20 2025 06:59:13 webserver maldet(22511): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 20 2025 06:59:13 webserver maldet(22511): {update} hashing install files and checking against server... May 20 2025 06:59:13 webserver maldet(22511): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 20 2025 06:59:13 webserver maldet(22511): {update} latest version already installed. May 20 2025 06:59:13 webserver maldet(22623): {sigup} performing signature update check... May 20 2025 06:59:13 webserver maldet(22623): {sigup} local signature set is version 20250519762470 May 20 2025 06:59:14 webserver maldet(22623): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 20 2025 06:59:14 webserver maldet(22623): {sigup} latest signature set already installed May 20 2025 06:59:14 webserver maldet(22714): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 20 2025 06:59:14 webserver maldet(22714): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 20 2025 06:59:14 webserver maldet(22714): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 20 2025 06:59:14 webserver maldet(22714): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 20 2025 06:59:14 webserver maldet(22714): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 20 2025 06:59:19 webserver maldet(22714): {scan} file list completed in 5s, found 14 files... May 20 2025 06:59:19 webserver maldet(22714): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 20 2025 06:59:19 webserver maldet(22714): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (14 files) in progress... May 20 2025 06:59:19 webserver maldet(22714): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 14, malware hits 0, cleaned hits 0, time 5s May 20 2025 06:59:19 webserver maldet(22714): {scan} scan report saved, to view run: maldet --report 250520-0659.22714 May 21 2025 06:57:34 webserver maldet(14237): {update} checking for available updates... May 21 2025 06:57:34 webserver maldet(14237): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 21 2025 06:57:34 webserver maldet(14237): {update} hashing install files and checking against server... May 21 2025 06:57:35 webserver maldet(14237): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 21 2025 06:57:35 webserver maldet(14237): {update} latest version already installed. May 21 2025 06:57:35 webserver maldet(14349): {sigup} performing signature update check... May 21 2025 06:57:35 webserver maldet(14349): {sigup} local signature set is version 20250519762470 May 21 2025 06:57:35 webserver maldet(14349): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 21 2025 06:57:35 webserver maldet(14349): {sigup} latest signature set already installed May 21 2025 06:57:35 webserver maldet(14440): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 21 2025 06:57:35 webserver maldet(14440): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 21 2025 06:57:35 webserver maldet(14440): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 21 2025 06:57:35 webserver maldet(14440): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 21 2025 06:57:35 webserver maldet(14440): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 21 2025 06:57:40 webserver maldet(14440): {scan} file list completed in 5s, found 14 files... May 21 2025 06:57:40 webserver maldet(14440): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 21 2025 06:57:40 webserver maldet(14440): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (14 files) in progress... May 21 2025 06:57:40 webserver maldet(14440): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 14, malware hits 0, cleaned hits 0, time 5s May 21 2025 06:57:40 webserver maldet(14440): {scan} scan report saved, to view run: maldet --report 250521-0657.14440 May 22 2025 06:59:20 webserver maldet(16327): {update} checking for available updates... May 22 2025 06:59:21 webserver maldet(16327): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 22 2025 06:59:21 webserver maldet(16327): {update} hashing install files and checking against server... May 22 2025 06:59:21 webserver maldet(16327): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 22 2025 06:59:21 webserver maldet(16327): {update} latest version already installed. May 22 2025 06:59:21 webserver maldet(16440): {sigup} performing signature update check... May 22 2025 06:59:21 webserver maldet(16440): {sigup} local signature set is version 20250519762470 May 22 2025 06:59:22 webserver maldet(16440): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 22 2025 06:59:22 webserver maldet(16440): {sigup} new signature set 202505221736773 available May 22 2025 06:59:22 webserver maldet(16440): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 22 2025 06:59:23 webserver maldet(16440): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 22 2025 06:59:23 webserver maldet(16440): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 22 2025 06:59:23 webserver maldet(16440): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 22 2025 06:59:23 webserver maldet(16440): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 22 2025 06:59:24 webserver maldet(16440): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 22 2025 06:59:24 webserver maldet(16440): {sigup} verified md5sum of maldet-sigpack.tgz May 22 2025 06:59:24 webserver maldet(16440): {sigup} unpacked and installed maldet-sigpack.tgz May 22 2025 06:59:24 webserver maldet(16440): {sigup} verified md5sum of maldet-clean.tgz May 22 2025 06:59:24 webserver maldet(16440): {sigup} unpacked and installed maldet-clean.tgz May 22 2025 06:59:24 webserver maldet(16440): {sigup} signature set update completed May 22 2025 06:59:24 webserver maldet(16440): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 22 2025 06:59:24 webserver maldet(16651): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 22 2025 06:59:24 webserver maldet(16651): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 22 2025 06:59:24 webserver maldet(16651): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 22 2025 06:59:24 webserver maldet(16651): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 22 2025 06:59:24 webserver maldet(16651): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 22 2025 06:59:29 webserver maldet(16651): {scan} file list completed in 5s, found 17 files... May 22 2025 06:59:29 webserver maldet(16651): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 22 2025 06:59:29 webserver maldet(16651): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (17 files) in progress... May 22 2025 06:59:29 webserver maldet(16651): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 17, malware hits 0, cleaned hits 0, time 5s May 22 2025 06:59:29 webserver maldet(16651): {scan} scan report saved, to view run: maldet --report 250522-0659.16651 May 23 2025 07:08:31 webserver maldet(29279): {update} checking for available updates... May 23 2025 07:08:32 webserver maldet(29279): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 23 2025 07:08:32 webserver maldet(29279): {update} hashing install files and checking against server... May 23 2025 07:08:32 webserver maldet(29279): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 23 2025 07:08:32 webserver maldet(29279): {update} latest version already installed. May 23 2025 07:08:32 webserver maldet(29393): {sigup} performing signature update check... May 23 2025 07:08:32 webserver maldet(29393): {sigup} local signature set is version 202505221736773 May 23 2025 07:08:32 webserver maldet(29393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 23 2025 07:08:32 webserver maldet(29393): {sigup} latest signature set already installed May 23 2025 07:08:33 webserver maldet(29484): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 23 2025 07:08:33 webserver maldet(29484): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 23 2025 07:08:33 webserver maldet(29484): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 23 2025 07:08:33 webserver maldet(29484): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 23 2025 07:08:33 webserver maldet(29484): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 23 2025 07:08:38 webserver maldet(29484): {scan} file list completed in 5s, found 14 files... May 23 2025 07:08:38 webserver maldet(29484): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 23 2025 07:08:38 webserver maldet(29484): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (14 files) in progress... May 23 2025 07:08:38 webserver maldet(29484): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 14, malware hits 0, cleaned hits 0, time 5s May 23 2025 07:08:38 webserver maldet(29484): {scan} scan report saved, to view run: maldet --report 250523-0708.29484 May 24 2025 06:57:10 webserver maldet(8789): {update} checking for available updates... May 24 2025 06:57:10 webserver maldet(8789): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 24 2025 06:57:10 webserver maldet(8789): {update} hashing install files and checking against server... May 24 2025 06:57:10 webserver maldet(8789): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 24 2025 06:57:10 webserver maldet(8789): {update} latest version already installed. May 24 2025 06:57:10 webserver maldet(8901): {sigup} performing signature update check... May 24 2025 06:57:10 webserver maldet(8901): {sigup} local signature set is version 202505221736773 May 24 2025 06:57:11 webserver maldet(8901): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 24 2025 06:57:11 webserver maldet(8901): {sigup} latest signature set already installed May 24 2025 06:57:11 webserver maldet(8992): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 24 2025 06:57:11 webserver maldet(8992): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 24 2025 06:57:11 webserver maldet(8992): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 24 2025 06:57:11 webserver maldet(8992): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 24 2025 06:57:11 webserver maldet(8992): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 24 2025 06:57:16 webserver maldet(8992): {scan} file list completed in 5s, found 16 files... May 24 2025 06:57:16 webserver maldet(8992): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 24 2025 06:57:16 webserver maldet(8992): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (16 files) in progress... May 24 2025 06:57:16 webserver maldet(8992): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! May 24 2025 06:57:16 webserver maldet(8992): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 16, malware hits 0, cleaned hits 0, time 5s May 24 2025 06:57:16 webserver maldet(8992): {scan} scan report saved, to view run: maldet --report 250524-0657.8992 May 25 2025 06:58:48 webserver maldet(15963): {update} checking for available updates... May 25 2025 06:58:48 webserver maldet(15963): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 25 2025 06:58:48 webserver maldet(15963): {update} hashing install files and checking against server... May 25 2025 06:58:49 webserver maldet(15963): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 25 2025 06:58:49 webserver maldet(15963): {update} latest version already installed. May 25 2025 06:58:49 webserver maldet(16078): {sigup} performing signature update check... May 25 2025 06:58:49 webserver maldet(16078): {sigup} local signature set is version 202505221736773 May 25 2025 06:58:49 webserver maldet(16078): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 25 2025 06:58:49 webserver maldet(16078): {sigup} new signature set 202505252708832 available May 25 2025 06:58:49 webserver maldet(16078): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 25 2025 06:58:50 webserver maldet(16078): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 25 2025 06:58:50 webserver maldet(16078): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 25 2025 06:58:50 webserver maldet(16078): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 25 2025 06:58:50 webserver maldet(16078): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 25 2025 06:58:51 webserver maldet(16078): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 25 2025 06:58:51 webserver maldet(16078): {sigup} verified md5sum of maldet-sigpack.tgz May 25 2025 06:58:51 webserver maldet(16078): {sigup} unpacked and installed maldet-sigpack.tgz May 25 2025 06:58:51 webserver maldet(16078): {sigup} verified md5sum of maldet-clean.tgz May 25 2025 06:58:51 webserver maldet(16078): {sigup} unpacked and installed maldet-clean.tgz May 25 2025 06:58:51 webserver maldet(16078): {sigup} signature set update completed May 25 2025 06:58:51 webserver maldet(16078): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 25 2025 06:58:51 webserver maldet(16284): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 25 2025 06:58:51 webserver maldet(16284): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 25 2025 06:58:51 webserver maldet(16284): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 25 2025 06:58:51 webserver maldet(16284): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 25 2025 06:58:51 webserver maldet(16284): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 25 2025 06:58:56 webserver maldet(16284): {scan} file list completed in 5s, found 16 files... May 25 2025 06:58:56 webserver maldet(16284): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 25 2025 06:58:56 webserver maldet(16284): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (16 files) in progress... May 25 2025 06:58:56 webserver maldet(16284): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 16, malware hits 0, cleaned hits 0, time 5s May 25 2025 06:58:56 webserver maldet(16284): {scan} scan report saved, to view run: maldet --report 250525-0658.16284 May 26 2025 06:59:22 webserver maldet(21984): {update} checking for available updates... May 26 2025 06:59:22 webserver maldet(21984): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 26 2025 06:59:22 webserver maldet(21984): {update} hashing install files and checking against server... May 26 2025 06:59:23 webserver maldet(21984): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 26 2025 06:59:23 webserver maldet(21984): {update} latest version already installed. May 26 2025 06:59:23 webserver maldet(22096): {sigup} performing signature update check... May 26 2025 06:59:23 webserver maldet(22096): {sigup} local signature set is version 202505252708832 May 26 2025 06:59:23 webserver maldet(22096): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 26 2025 06:59:23 webserver maldet(22096): {sigup} latest signature set already installed May 26 2025 06:59:23 webserver maldet(22187): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 26 2025 06:59:23 webserver maldet(22187): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 26 2025 06:59:23 webserver maldet(22187): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 26 2025 06:59:23 webserver maldet(22187): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 26 2025 06:59:23 webserver maldet(22187): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 26 2025 06:59:28 webserver maldet(22187): {scan} file list completed in 5s, found 37 files... May 26 2025 06:59:28 webserver maldet(22187): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 26 2025 06:59:28 webserver maldet(22187): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (37 files) in progress... May 26 2025 06:59:28 webserver maldet(22187): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 37, malware hits 0, cleaned hits 0, time 5s May 26 2025 06:59:28 webserver maldet(22187): {scan} scan report saved, to view run: maldet --report 250526-0659.22187 May 27 2025 06:58:14 webserver maldet(1760): {update} checking for available updates... May 27 2025 06:58:14 webserver maldet(1760): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 27 2025 06:58:14 webserver maldet(1760): {update} hashing install files and checking against server... May 27 2025 06:58:15 webserver maldet(1760): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 27 2025 06:58:15 webserver maldet(1760): {update} latest version already installed. May 27 2025 06:58:15 webserver maldet(1872): {sigup} performing signature update check... May 27 2025 06:58:15 webserver maldet(1872): {sigup} local signature set is version 202505252708832 May 27 2025 06:58:15 webserver maldet(1872): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 27 2025 06:58:15 webserver maldet(1872): {sigup} latest signature set already installed May 27 2025 06:58:15 webserver maldet(1963): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 27 2025 06:58:15 webserver maldet(1963): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 27 2025 06:58:15 webserver maldet(1963): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 27 2025 06:58:15 webserver maldet(1963): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 27 2025 06:58:15 webserver maldet(1963): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 27 2025 06:58:20 webserver maldet(1963): {scan} file list completed in 5s, found 33 files... May 27 2025 06:58:20 webserver maldet(1963): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 27 2025 06:58:20 webserver maldet(1963): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (33 files) in progress... May 27 2025 06:58:21 webserver maldet(1963): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 33, malware hits 0, cleaned hits 0, time 6s May 27 2025 06:58:21 webserver maldet(1963): {scan} scan report saved, to view run: maldet --report 250527-0658.1963 May 28 2025 06:57:01 webserver maldet(21826): {update} checking for available updates... May 28 2025 06:57:01 webserver maldet(21826): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 28 2025 06:57:01 webserver maldet(21826): {update} hashing install files and checking against server... May 28 2025 06:57:01 webserver maldet(21826): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 28 2025 06:57:01 webserver maldet(21826): {update} latest version already installed. May 28 2025 06:57:01 webserver maldet(21938): {sigup} performing signature update check... May 28 2025 06:57:01 webserver maldet(21938): {sigup} local signature set is version 202505252708832 May 28 2025 06:57:02 webserver maldet(21938): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 28 2025 06:57:02 webserver maldet(21938): {sigup} new signature set 202505283679777 available May 28 2025 06:57:02 webserver maldet(21938): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 28 2025 06:57:03 webserver maldet(21938): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 28 2025 06:57:03 webserver maldet(21938): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 28 2025 06:57:03 webserver maldet(21938): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 28 2025 06:57:03 webserver maldet(21938): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 28 2025 06:57:03 webserver maldet(21938): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 28 2025 06:57:03 webserver maldet(21938): {sigup} verified md5sum of maldet-sigpack.tgz May 28 2025 06:57:04 webserver maldet(21938): {sigup} unpacked and installed maldet-sigpack.tgz May 28 2025 06:57:04 webserver maldet(21938): {sigup} verified md5sum of maldet-clean.tgz May 28 2025 06:57:04 webserver maldet(21938): {sigup} unpacked and installed maldet-clean.tgz May 28 2025 06:57:04 webserver maldet(21938): {sigup} signature set update completed May 28 2025 06:57:04 webserver maldet(21938): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 28 2025 06:57:04 webserver maldet(22165): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 28 2025 06:57:04 webserver maldet(22165): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 28 2025 06:57:04 webserver maldet(22165): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 28 2025 06:57:04 webserver maldet(22165): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 28 2025 06:57:04 webserver maldet(22165): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 28 2025 06:57:09 webserver maldet(22165): {scan} file list completed in 5s, found 37 files... May 28 2025 06:57:09 webserver maldet(22165): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 28 2025 06:57:09 webserver maldet(22165): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (37 files) in progress... May 28 2025 06:57:09 webserver maldet(22165): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 37, malware hits 0, cleaned hits 0, time 5s May 28 2025 06:57:09 webserver maldet(22165): {scan} scan report saved, to view run: maldet --report 250528-0657.22165 May 29 2025 06:56:20 webserver maldet(27718): {update} checking for available updates... May 29 2025 06:56:20 webserver maldet(27718): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 29 2025 06:56:20 webserver maldet(27718): {update} hashing install files and checking against server... May 29 2025 06:56:21 webserver maldet(27718): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 29 2025 06:56:21 webserver maldet(27718): {update} latest version already installed. May 29 2025 06:56:21 webserver maldet(27832): {sigup} performing signature update check... May 29 2025 06:56:21 webserver maldet(27832): {sigup} local signature set is version 202505283679777 May 29 2025 06:56:21 webserver maldet(27832): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 29 2025 06:56:21 webserver maldet(27832): {sigup} latest signature set already installed May 29 2025 06:56:21 webserver maldet(27923): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 29 2025 06:56:21 webserver maldet(27923): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 29 2025 06:56:21 webserver maldet(27923): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 29 2025 06:56:21 webserver maldet(27923): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 29 2025 06:56:21 webserver maldet(27923): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 29 2025 06:56:26 webserver maldet(27923): {scan} file list completed in 5s, found 32 files... May 29 2025 06:56:26 webserver maldet(27923): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 29 2025 06:56:26 webserver maldet(27923): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (32 files) in progress... May 29 2025 06:56:27 webserver maldet(27923): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 32, malware hits 0, cleaned hits 0, time 6s May 29 2025 06:56:27 webserver maldet(27923): {scan} scan report saved, to view run: maldet --report 250529-0656.27923 May 30 2025 07:00:27 webserver maldet(5023): {update} checking for available updates... May 30 2025 07:00:27 webserver maldet(5023): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 30 2025 07:00:27 webserver maldet(5023): {update} hashing install files and checking against server... May 30 2025 07:00:27 webserver maldet(5023): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 30 2025 07:00:27 webserver maldet(5023): {update} latest version already installed. May 30 2025 07:00:28 webserver maldet(5136): {sigup} performing signature update check... May 30 2025 07:00:28 webserver maldet(5136): {sigup} local signature set is version 202505283679777 May 30 2025 07:00:28 webserver maldet(5136): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 30 2025 07:00:28 webserver maldet(5136): {sigup} latest signature set already installed May 30 2025 07:00:28 webserver maldet(5227): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 30 2025 07:00:28 webserver maldet(5227): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 30 2025 07:00:28 webserver maldet(5227): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 30 2025 07:00:28 webserver maldet(5227): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 30 2025 07:00:28 webserver maldet(5227): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 30 2025 07:00:33 webserver maldet(5227): {scan} file list completed in 5s, found 32 files... May 30 2025 07:00:33 webserver maldet(5227): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 30 2025 07:00:33 webserver maldet(5227): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (32 files) in progress... May 30 2025 07:00:33 webserver maldet(5227): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 32, malware hits 0, cleaned hits 0, time 5s May 30 2025 07:00:33 webserver maldet(5227): {scan} scan report saved, to view run: maldet --report 250530-0700.5227 May 31 2025 06:56:20 webserver maldet(22711): {update} checking for available updates... May 31 2025 06:56:20 webserver maldet(22711): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 31 2025 06:56:20 webserver maldet(22711): {update} hashing install files and checking against server... May 31 2025 06:56:20 webserver maldet(22711): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 31 2025 06:56:20 webserver maldet(22711): {update} latest version already installed. May 31 2025 06:56:20 webserver maldet(22823): {sigup} performing signature update check... May 31 2025 06:56:20 webserver maldet(22823): {sigup} local signature set is version 202505283679777 May 31 2025 06:56:21 webserver maldet(22823): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 31 2025 06:56:21 webserver maldet(22823): {sigup} new signature set 20250531456902 available May 31 2025 06:56:21 webserver maldet(22823): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 31 2025 06:56:22 webserver maldet(22823): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 31 2025 06:56:22 webserver maldet(22823): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 31 2025 06:56:22 webserver maldet(22823): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 31 2025 06:56:22 webserver maldet(22823): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 31 2025 06:56:22 webserver maldet(22823): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 31 2025 06:56:22 webserver maldet(22823): {sigup} verified md5sum of maldet-sigpack.tgz May 31 2025 06:56:23 webserver maldet(22823): {sigup} unpacked and installed maldet-sigpack.tgz May 31 2025 06:56:23 webserver maldet(22823): {sigup} verified md5sum of maldet-clean.tgz May 31 2025 06:56:23 webserver maldet(22823): {sigup} unpacked and installed maldet-clean.tgz May 31 2025 06:56:23 webserver maldet(22823): {sigup} signature set update completed May 31 2025 06:56:23 webserver maldet(22823): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 31 2025 06:56:23 webserver maldet(23029): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 31 2025 06:56:23 webserver maldet(23029): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 31 2025 06:56:23 webserver maldet(23029): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 31 2025 06:56:23 webserver maldet(23029): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 31 2025 06:56:23 webserver maldet(23029): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 31 2025 06:57:58 webserver maldet(23029): {scan} file list completed in 95s, found 19 files... May 31 2025 06:57:58 webserver maldet(23029): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... May 31 2025 06:57:58 webserver maldet(23029): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (19 files) in progress... May 31 2025 06:57:58 webserver maldet(23029): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! May 31 2025 06:57:58 webserver maldet(23029): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 19, malware hits 0, cleaned hits 0, time 95s May 31 2025 06:57:58 webserver maldet(23029): {scan} scan report saved, to view run: maldet --report 250531-0656.23029 Jun 01 2025 06:59:53 webserver maldet(22430): {update} checking for available updates... Jun 01 2025 06:59:53 webserver maldet(22430): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 01 2025 06:59:53 webserver maldet(22430): {update} hashing install files and checking against server... Jun 01 2025 06:59:53 webserver maldet(22430): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 01 2025 06:59:53 webserver maldet(22430): {update} latest version already installed. Jun 01 2025 06:59:54 webserver maldet(22544): {sigup} performing signature update check... Jun 01 2025 06:59:54 webserver maldet(22544): {sigup} local signature set is version 20250531456902 Jun 01 2025 06:59:54 webserver maldet(22544): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 01 2025 06:59:54 webserver maldet(22544): {sigup} new signature set 202506011196154 available Jun 01 2025 06:59:54 webserver maldet(22544): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 01 2025 06:59:55 webserver maldet(22544): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 01 2025 06:59:55 webserver maldet(22544): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 01 2025 06:59:55 webserver maldet(22544): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 01 2025 06:59:56 webserver maldet(22544): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 01 2025 06:59:56 webserver maldet(22544): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 01 2025 06:59:56 webserver maldet(22544): {sigup} verified md5sum of maldet-sigpack.tgz Jun 01 2025 06:59:56 webserver maldet(22544): {sigup} unpacked and installed maldet-sigpack.tgz Jun 01 2025 06:59:56 webserver maldet(22544): {sigup} verified md5sum of maldet-clean.tgz Jun 01 2025 06:59:56 webserver maldet(22544): {sigup} unpacked and installed maldet-clean.tgz Jun 01 2025 06:59:56 webserver maldet(22544): {sigup} signature set update completed Jun 01 2025 06:59:56 webserver maldet(22544): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 01 2025 06:59:56 webserver maldet(22753): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 01 2025 06:59:56 webserver maldet(22753): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 01 2025 06:59:56 webserver maldet(22753): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 01 2025 06:59:56 webserver maldet(22753): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 01 2025 06:59:56 webserver maldet(22753): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 01 2025 07:00:01 webserver maldet(22753): {scan} file list completed in 5s, found 11 files... Jun 01 2025 07:00:01 webserver maldet(22753): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 01 2025 07:00:01 webserver maldet(22753): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (11 files) in progress... Jun 01 2025 07:00:02 webserver maldet(22753): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 11, malware hits 0, cleaned hits 0, time 6s Jun 01 2025 07:00:02 webserver maldet(22753): {scan} scan report saved, to view run: maldet --report 250601-0659.22753 Jun 02 2025 06:57:53 webserver maldet(4500): {update} checking for available updates... Jun 02 2025 06:57:53 webserver maldet(4500): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 02 2025 06:57:53 webserver maldet(4500): {update} hashing install files and checking against server... Jun 02 2025 06:57:53 webserver maldet(4500): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 02 2025 06:57:53 webserver maldet(4500): {update} latest version already installed. Jun 02 2025 06:57:53 webserver maldet(4612): {sigup} performing signature update check... Jun 02 2025 06:57:53 webserver maldet(4612): {sigup} local signature set is version 202506011196154 Jun 02 2025 06:57:54 webserver maldet(4612): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 02 2025 06:57:54 webserver maldet(4612): {sigup} latest signature set already installed Jun 02 2025 06:57:54 webserver maldet(4703): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 02 2025 06:57:54 webserver maldet(4703): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 02 2025 06:57:54 webserver maldet(4703): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 02 2025 06:57:54 webserver maldet(4703): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 02 2025 06:57:54 webserver maldet(4703): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 02 2025 06:57:59 webserver maldet(4703): {scan} file list completed in 5s, found 30 files... Jun 02 2025 06:57:59 webserver maldet(4703): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 02 2025 06:57:59 webserver maldet(4703): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (30 files) in progress... Jun 02 2025 06:57:59 webserver maldet(4703): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 30, malware hits 0, cleaned hits 0, time 5s Jun 02 2025 06:57:59 webserver maldet(4703): {scan} scan report saved, to view run: maldet --report 250602-0657.4703 Jun 03 2025 06:58:22 webserver maldet(714): {update} checking for available updates... Jun 03 2025 06:58:23 webserver maldet(714): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 03 2025 06:58:23 webserver maldet(714): {update} hashing install files and checking against server... Jun 03 2025 06:58:23 webserver maldet(714): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 03 2025 06:58:23 webserver maldet(714): {update} latest version already installed. Jun 03 2025 06:58:23 webserver maldet(828): {sigup} performing signature update check... Jun 03 2025 06:58:23 webserver maldet(828): {sigup} local signature set is version 202506011196154 Jun 03 2025 06:58:23 webserver maldet(828): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 03 2025 06:58:23 webserver maldet(828): {sigup} latest signature set already installed Jun 03 2025 06:58:23 webserver maldet(920): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 03 2025 06:58:24 webserver maldet(920): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 03 2025 06:58:24 webserver maldet(920): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 03 2025 06:58:24 webserver maldet(920): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 03 2025 06:58:24 webserver maldet(920): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 03 2025 06:58:29 webserver maldet(920): {scan} file list completed in 5s, found 29 files... Jun 03 2025 06:58:29 webserver maldet(920): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 03 2025 06:58:29 webserver maldet(920): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (29 files) in progress... Jun 03 2025 06:58:29 webserver maldet(920): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 29, malware hits 0, cleaned hits 0, time 6s Jun 03 2025 06:58:29 webserver maldet(920): {scan} scan report saved, to view run: maldet --report 250603-0658.920 Jun 04 2025 06:57:59 webserver maldet(29391): {update} checking for available updates... Jun 04 2025 06:57:59 webserver maldet(29391): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 04 2025 06:57:59 webserver maldet(29391): {update} hashing install files and checking against server... Jun 04 2025 06:58:00 webserver maldet(29391): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 04 2025 06:58:00 webserver maldet(29391): {update} latest version already installed. Jun 04 2025 06:58:00 webserver maldet(29506): {sigup} performing signature update check... Jun 04 2025 06:58:00 webserver maldet(29506): {sigup} local signature set is version 202506011196154 Jun 04 2025 06:58:00 webserver maldet(29506): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 04 2025 06:58:00 webserver maldet(29506): {sigup} new signature set 202506042164456 available Jun 04 2025 06:58:00 webserver maldet(29506): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 04 2025 06:58:01 webserver maldet(29506): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 04 2025 06:58:01 webserver maldet(29506): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 04 2025 06:58:01 webserver maldet(29506): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 04 2025 06:58:02 webserver maldet(29506): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 04 2025 06:58:02 webserver maldet(29506): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 04 2025 06:58:02 webserver maldet(29506): {sigup} verified md5sum of maldet-sigpack.tgz Jun 04 2025 06:58:02 webserver maldet(29506): {sigup} unpacked and installed maldet-sigpack.tgz Jun 04 2025 06:58:02 webserver maldet(29506): {sigup} verified md5sum of maldet-clean.tgz Jun 04 2025 06:58:02 webserver maldet(29506): {sigup} unpacked and installed maldet-clean.tgz Jun 04 2025 06:58:02 webserver maldet(29506): {sigup} signature set update completed Jun 04 2025 06:58:02 webserver maldet(29506): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 04 2025 06:58:02 webserver maldet(29711): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 04 2025 06:58:02 webserver maldet(29711): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 04 2025 06:58:02 webserver maldet(29711): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 04 2025 06:58:02 webserver maldet(29711): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 04 2025 06:58:02 webserver maldet(29711): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 04 2025 06:58:07 webserver maldet(29711): {scan} file list completed in 5s, found 27 files... Jun 04 2025 06:58:07 webserver maldet(29711): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 04 2025 06:58:07 webserver maldet(29711): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (27 files) in progress... Jun 04 2025 06:58:07 webserver maldet(29711): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 27, malware hits 0, cleaned hits 0, time 5s Jun 04 2025 06:58:07 webserver maldet(29711): {scan} scan report saved, to view run: maldet --report 250604-0658.29711 Jun 05 2025 06:58:12 webserver maldet(2825): {update} checking for available updates... Jun 05 2025 06:58:12 webserver maldet(2825): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 05 2025 06:58:12 webserver maldet(2825): {update} hashing install files and checking against server... Jun 05 2025 06:58:12 webserver maldet(2825): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 05 2025 06:58:12 webserver maldet(2825): {update} latest version already installed. Jun 05 2025 06:58:12 webserver maldet(2937): {sigup} performing signature update check... Jun 05 2025 06:58:12 webserver maldet(2937): {sigup} local signature set is version 202506042164456 Jun 05 2025 06:58:13 webserver maldet(2937): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 05 2025 06:58:13 webserver maldet(2937): {sigup} latest signature set already installed Jun 05 2025 06:58:13 webserver maldet(3028): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 05 2025 06:58:13 webserver maldet(3028): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 05 2025 06:58:13 webserver maldet(3028): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 05 2025 06:58:13 webserver maldet(3028): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 05 2025 06:58:13 webserver maldet(3028): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 05 2025 06:58:18 webserver maldet(3028): {scan} file list completed in 5s, found 33 files... Jun 05 2025 06:58:18 webserver maldet(3028): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 05 2025 06:58:18 webserver maldet(3028): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (33 files) in progress... Jun 05 2025 06:58:18 webserver maldet(3028): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 33, malware hits 0, cleaned hits 0, time 5s Jun 05 2025 06:58:18 webserver maldet(3028): {scan} scan report saved, to view run: maldet --report 250605-0658.3028 Jun 06 2025 06:58:57 webserver maldet(28313): {update} checking for available updates... Jun 06 2025 06:58:58 webserver maldet(28313): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 06 2025 06:58:58 webserver maldet(28313): {update} hashing install files and checking against server... Jun 06 2025 06:58:58 webserver maldet(28313): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 06 2025 06:58:58 webserver maldet(28313): {update} latest version already installed. Jun 06 2025 06:58:58 webserver maldet(28428): {sigup} performing signature update check... Jun 06 2025 06:58:58 webserver maldet(28428): {sigup} local signature set is version 202506042164456 Jun 06 2025 06:58:58 webserver maldet(28428): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 06 2025 06:58:58 webserver maldet(28428): {sigup} latest signature set already installed Jun 06 2025 06:58:59 webserver maldet(28519): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 06 2025 06:58:59 webserver maldet(28519): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 06 2025 06:58:59 webserver maldet(28519): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 06 2025 06:58:59 webserver maldet(28519): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 06 2025 06:58:59 webserver maldet(28519): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 06 2025 06:59:04 webserver maldet(28519): {scan} file list completed in 5s, found 30 files... Jun 06 2025 06:59:04 webserver maldet(28519): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 06 2025 06:59:04 webserver maldet(28519): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (30 files) in progress... Jun 06 2025 06:59:04 webserver maldet(28519): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 30, malware hits 0, cleaned hits 0, time 5s Jun 06 2025 06:59:04 webserver maldet(28519): {scan} scan report saved, to view run: maldet --report 250606-0658.28519 Jun 07 2025 06:58:08 webserver maldet(1564): {update} checking for available updates... Jun 07 2025 06:58:08 webserver maldet(1564): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 07 2025 06:58:08 webserver maldet(1564): {update} hashing install files and checking against server... Jun 07 2025 06:58:09 webserver maldet(1564): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 07 2025 06:58:09 webserver maldet(1564): {update} latest version already installed. Jun 07 2025 06:58:09 webserver maldet(1691): {sigup} performing signature update check... Jun 07 2025 06:58:09 webserver maldet(1691): {sigup} local signature set is version 202506042164456 Jun 07 2025 06:58:09 webserver maldet(1691): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 07 2025 06:58:09 webserver maldet(1691): {sigup} new signature set 20250607589111 available Jun 07 2025 06:58:09 webserver maldet(1691): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 07 2025 06:58:10 webserver maldet(1691): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 07 2025 06:58:10 webserver maldet(1691): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 07 2025 06:58:10 webserver maldet(1691): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 07 2025 06:58:11 webserver maldet(1691): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 07 2025 06:58:11 webserver maldet(1691): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 07 2025 06:58:11 webserver maldet(1691): {sigup} verified md5sum of maldet-sigpack.tgz Jun 07 2025 06:58:11 webserver maldet(1691): {sigup} unpacked and installed maldet-sigpack.tgz Jun 07 2025 06:58:11 webserver maldet(1691): {sigup} verified md5sum of maldet-clean.tgz Jun 07 2025 06:58:11 webserver maldet(1691): {sigup} unpacked and installed maldet-clean.tgz Jun 07 2025 06:58:11 webserver maldet(1691): {sigup} signature set update completed Jun 07 2025 06:58:11 webserver maldet(1691): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 07 2025 06:58:11 webserver maldet(1900): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 07 2025 06:58:11 webserver maldet(1900): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 07 2025 06:58:11 webserver maldet(1900): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 07 2025 06:58:11 webserver maldet(1900): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 07 2025 06:58:11 webserver maldet(1900): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 07 2025 06:58:16 webserver maldet(1900): {scan} file list completed in 5s, found 14 files... Jun 07 2025 06:58:16 webserver maldet(1900): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 07 2025 06:58:16 webserver maldet(1900): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (14 files) in progress... Jun 07 2025 06:58:17 webserver maldet(1900): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jun 07 2025 06:58:17 webserver maldet(1900): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 14, malware hits 0, cleaned hits 0, time 6s Jun 07 2025 06:58:17 webserver maldet(1900): {scan} scan report saved, to view run: maldet --report 250607-0658.1900 Jun 08 2025 07:00:44 webserver maldet(13476): {update} checking for available updates... Jun 08 2025 07:00:44 webserver maldet(13476): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 08 2025 07:00:44 webserver maldet(13476): {update} hashing install files and checking against server... Jun 08 2025 07:00:44 webserver maldet(13476): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 08 2025 07:00:44 webserver maldet(13476): {update} latest version already installed. Jun 08 2025 07:00:44 webserver maldet(13589): {sigup} performing signature update check... Jun 08 2025 07:00:44 webserver maldet(13589): {sigup} local signature set is version 20250607589111 Jun 08 2025 07:00:45 webserver maldet(13589): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 08 2025 07:00:45 webserver maldet(13589): {sigup} latest signature set already installed Jun 08 2025 07:00:45 webserver maldet(13680): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 08 2025 07:00:45 webserver maldet(13680): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 08 2025 07:00:45 webserver maldet(13680): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 08 2025 07:00:45 webserver maldet(13680): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 08 2025 07:00:45 webserver maldet(13680): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 08 2025 07:00:50 webserver maldet(13680): {scan} file list completed in 5s, found 11 files... Jun 08 2025 07:00:50 webserver maldet(13680): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 08 2025 07:00:50 webserver maldet(13680): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (11 files) in progress... Jun 08 2025 07:00:50 webserver maldet(13680): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 11, malware hits 0, cleaned hits 0, time 5s Jun 08 2025 07:00:50 webserver maldet(13680): {scan} scan report saved, to view run: maldet --report 250608-0700.13680 Jun 09 2025 07:01:27 webserver maldet(2527): {update} checking for available updates... Jun 09 2025 07:01:27 webserver maldet(2527): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 09 2025 07:01:27 webserver maldet(2527): {update} hashing install files and checking against server... Jun 09 2025 07:01:28 webserver maldet(2527): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 09 2025 07:01:28 webserver maldet(2527): {update} latest version already installed. Jun 09 2025 07:01:28 webserver maldet(2641): {sigup} performing signature update check... Jun 09 2025 07:01:28 webserver maldet(2641): {sigup} local signature set is version 20250607589111 Jun 09 2025 07:01:28 webserver maldet(2641): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 09 2025 07:01:28 webserver maldet(2641): {sigup} latest signature set already installed Jun 09 2025 07:01:28 webserver maldet(2733): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 09 2025 07:01:28 webserver maldet(2733): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 09 2025 07:01:28 webserver maldet(2733): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 09 2025 07:01:28 webserver maldet(2733): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 09 2025 07:01:28 webserver maldet(2733): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 09 2025 07:01:34 webserver maldet(2733): {scan} file list completed in 6s, found 37 files... Jun 09 2025 07:01:34 webserver maldet(2733): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 09 2025 07:01:34 webserver maldet(2733): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (37 files) in progress... Jun 09 2025 07:01:34 webserver maldet(2733): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 37, malware hits 0, cleaned hits 0, time 6s Jun 09 2025 07:01:34 webserver maldet(2733): {scan} scan report saved, to view run: maldet --report 250609-0701.2733 Jun 10 2025 07:00:46 webserver maldet(27860): {update} checking for available updates... Jun 10 2025 07:00:46 webserver maldet(27860): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 10 2025 07:00:46 webserver maldet(27860): {update} hashing install files and checking against server... Jun 10 2025 07:00:47 webserver maldet(27860): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 10 2025 07:00:47 webserver maldet(27860): {update} latest version already installed. Jun 10 2025 07:00:47 webserver maldet(27975): {sigup} performing signature update check... Jun 10 2025 07:00:47 webserver maldet(27975): {sigup} local signature set is version 20250607589111 Jun 10 2025 07:00:47 webserver maldet(27975): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 10 2025 07:00:47 webserver maldet(27975): {sigup} latest signature set already installed Jun 10 2025 07:00:47 webserver maldet(28066): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 10 2025 07:00:47 webserver maldet(28066): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 10 2025 07:00:47 webserver maldet(28066): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 10 2025 07:00:47 webserver maldet(28066): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 10 2025 07:00:47 webserver maldet(28066): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 10 2025 07:00:52 webserver maldet(28066): {scan} file list completed in 5s, found 32 files... Jun 10 2025 07:00:52 webserver maldet(28066): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 10 2025 07:00:52 webserver maldet(28066): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (32 files) in progress... Jun 10 2025 07:00:53 webserver maldet(28066): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jun 10 2025 07:00:53 webserver maldet(28066): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 32, malware hits 0, cleaned hits 0, time 6s Jun 10 2025 07:00:53 webserver maldet(28066): {scan} scan report saved, to view run: maldet --report 250610-0700.28066 Jun 11 2025 07:01:53 webserver maldet(22928): {update} checking for available updates... Jun 11 2025 07:01:54 webserver maldet(22928): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 11 2025 07:01:54 webserver maldet(22928): {update} hashing install files and checking against server... Jun 11 2025 07:01:54 webserver maldet(22928): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 11 2025 07:01:54 webserver maldet(22928): {update} latest version already installed. Jun 11 2025 07:01:54 webserver maldet(23040): {sigup} performing signature update check... Jun 11 2025 07:01:54 webserver maldet(23040): {sigup} local signature set is version 20250607589111 Jun 11 2025 07:01:54 webserver maldet(23040): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 11 2025 07:01:54 webserver maldet(23040): {sigup} new signature set 20250610484586 available Jun 11 2025 07:01:54 webserver maldet(23040): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 11 2025 07:01:55 webserver maldet(23040): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 11 2025 07:01:56 webserver maldet(23040): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 11 2025 07:01:56 webserver maldet(23040): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 11 2025 07:01:56 webserver maldet(23040): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 11 2025 07:01:56 webserver maldet(23040): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 11 2025 07:01:56 webserver maldet(23040): {sigup} verified md5sum of maldet-sigpack.tgz Jun 11 2025 07:01:57 webserver maldet(23040): {sigup} unpacked and installed maldet-sigpack.tgz Jun 11 2025 07:01:57 webserver maldet(23040): {sigup} verified md5sum of maldet-clean.tgz Jun 11 2025 07:01:57 webserver maldet(23040): {sigup} unpacked and installed maldet-clean.tgz Jun 11 2025 07:01:57 webserver maldet(23040): {sigup} signature set update completed Jun 11 2025 07:01:57 webserver maldet(23040): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 11 2025 07:01:57 webserver maldet(23245): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 11 2025 07:01:57 webserver maldet(23245): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 11 2025 07:01:57 webserver maldet(23245): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 11 2025 07:01:57 webserver maldet(23245): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 11 2025 07:01:57 webserver maldet(23245): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 11 2025 07:02:02 webserver maldet(23245): {scan} file list completed in 5s, found 28 files... Jun 11 2025 07:02:02 webserver maldet(23245): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 11 2025 07:02:02 webserver maldet(23245): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (28 files) in progress... Jun 11 2025 07:02:02 webserver maldet(23245): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 28, malware hits 0, cleaned hits 0, time 5s Jun 11 2025 07:02:02 webserver maldet(23245): {scan} scan report saved, to view run: maldet --report 250611-0701.23245 Jun 12 2025 06:58:36 webserver maldet(13564): {update} checking for available updates... Jun 12 2025 06:58:36 webserver maldet(13564): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 12 2025 06:58:36 webserver maldet(13564): {update} hashing install files and checking against server... Jun 12 2025 06:58:36 webserver maldet(13564): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 12 2025 06:58:36 webserver maldet(13564): {update} latest version already installed. Jun 12 2025 06:58:36 webserver maldet(13676): {sigup} performing signature update check... Jun 12 2025 06:58:36 webserver maldet(13676): {sigup} local signature set is version 20250610484586 Jun 12 2025 06:58:37 webserver maldet(13676): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 12 2025 06:58:37 webserver maldet(13676): {sigup} latest signature set already installed Jun 12 2025 06:58:37 webserver maldet(13767): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 12 2025 06:58:37 webserver maldet(13767): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 12 2025 06:58:37 webserver maldet(13767): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 12 2025 06:58:37 webserver maldet(13767): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 12 2025 06:58:37 webserver maldet(13767): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 12 2025 06:58:42 webserver maldet(13767): {scan} file list completed in 5s, found 31 files... Jun 12 2025 06:58:42 webserver maldet(13767): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 12 2025 06:58:42 webserver maldet(13767): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (31 files) in progress... Jun 12 2025 06:58:42 webserver maldet(13767): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 31, malware hits 0, cleaned hits 0, time 5s Jun 12 2025 06:58:42 webserver maldet(13767): {scan} scan report saved, to view run: maldet --report 250612-0658.13767 Jun 13 2025 06:56:55 webserver maldet(15156): {update} checking for available updates... Jun 13 2025 06:56:55 webserver maldet(15156): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 13 2025 06:56:55 webserver maldet(15156): {update} hashing install files and checking against server... Jun 13 2025 06:56:56 webserver maldet(15156): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 13 2025 06:56:56 webserver maldet(15156): {update} latest version already installed. Jun 13 2025 06:56:56 webserver maldet(15270): {sigup} performing signature update check... Jun 13 2025 06:56:56 webserver maldet(15270): {sigup} local signature set is version 20250610484586 Jun 13 2025 06:56:56 webserver maldet(15270): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 13 2025 06:56:56 webserver maldet(15270): {sigup} new signature set 20250613705251 available Jun 13 2025 06:56:56 webserver maldet(15270): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 13 2025 06:56:57 webserver maldet(15270): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 13 2025 06:56:57 webserver maldet(15270): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 13 2025 06:56:57 webserver maldet(15270): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 13 2025 06:56:58 webserver maldet(15270): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 13 2025 06:56:58 webserver maldet(15270): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 13 2025 06:56:58 webserver maldet(15270): {sigup} verified md5sum of maldet-sigpack.tgz Jun 13 2025 06:56:58 webserver maldet(15270): {sigup} unpacked and installed maldet-sigpack.tgz Jun 13 2025 06:56:58 webserver maldet(15270): {sigup} verified md5sum of maldet-clean.tgz Jun 13 2025 06:56:58 webserver maldet(15270): {sigup} unpacked and installed maldet-clean.tgz Jun 13 2025 06:56:58 webserver maldet(15270): {sigup} signature set update completed Jun 13 2025 06:56:58 webserver maldet(15270): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 13 2025 06:56:58 webserver maldet(15477): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 13 2025 06:56:58 webserver maldet(15477): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 13 2025 06:56:58 webserver maldet(15477): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 13 2025 06:56:58 webserver maldet(15477): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 13 2025 06:56:58 webserver maldet(15477): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 13 2025 06:57:03 webserver maldet(15477): {scan} file list completed in 5s, found 33 files... Jun 13 2025 06:57:03 webserver maldet(15477): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 13 2025 06:57:03 webserver maldet(15477): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (33 files) in progress... Jun 13 2025 06:57:04 webserver maldet(15477): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 33, malware hits 0, cleaned hits 0, time 6s Jun 13 2025 06:57:04 webserver maldet(15477): {scan} scan report saved, to view run: maldet --report 250613-0656.15477 Jun 14 2025 06:57:48 webserver maldet(10457): {update} checking for available updates... Jun 14 2025 06:57:48 webserver maldet(10457): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 14 2025 06:57:48 webserver maldet(10457): {update} hashing install files and checking against server... Jun 14 2025 06:57:49 webserver maldet(10457): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 14 2025 06:57:49 webserver maldet(10457): {update} latest version already installed. Jun 14 2025 06:57:49 webserver maldet(10569): {sigup} performing signature update check... Jun 14 2025 06:57:49 webserver maldet(10569): {sigup} local signature set is version 20250613705251 Jun 14 2025 06:57:49 webserver maldet(10569): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 14 2025 06:57:49 webserver maldet(10569): {sigup} latest signature set already installed Jun 14 2025 06:57:49 webserver maldet(10661): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 14 2025 06:57:49 webserver maldet(10661): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 14 2025 06:57:49 webserver maldet(10661): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 14 2025 06:57:49 webserver maldet(10661): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 14 2025 06:57:49 webserver maldet(10661): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 14 2025 06:57:54 webserver maldet(10661): {scan} file list completed in 5s, found 30 files... Jun 14 2025 06:57:54 webserver maldet(10661): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 14 2025 06:57:54 webserver maldet(10661): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (30 files) in progress... Jun 14 2025 06:57:55 webserver maldet(10661): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 30, malware hits 0, cleaned hits 0, time 6s Jun 14 2025 06:57:55 webserver maldet(10661): {scan} scan report saved, to view run: maldet --report 250614-0657.10661 Jun 15 2025 06:56:59 webserver maldet(18205): {update} checking for available updates... Jun 15 2025 06:56:59 webserver maldet(18205): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 15 2025 06:56:59 webserver maldet(18205): {update} hashing install files and checking against server... Jun 15 2025 06:57:00 webserver maldet(18205): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 15 2025 06:57:00 webserver maldet(18205): {update} latest version already installed. Jun 15 2025 06:57:00 webserver maldet(18317): {sigup} performing signature update check... Jun 15 2025 06:57:00 webserver maldet(18317): {sigup} local signature set is version 20250613705251 Jun 15 2025 06:57:00 webserver maldet(18317): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 15 2025 06:57:00 webserver maldet(18317): {sigup} latest signature set already installed Jun 15 2025 06:57:00 webserver maldet(18408): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 15 2025 06:57:00 webserver maldet(18408): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 15 2025 06:57:00 webserver maldet(18408): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 15 2025 06:57:00 webserver maldet(18408): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 15 2025 06:57:00 webserver maldet(18408): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 15 2025 06:57:05 webserver maldet(18408): {scan} file list completed in 5s, found 13 files... Jun 15 2025 06:57:05 webserver maldet(18408): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 15 2025 06:57:05 webserver maldet(18408): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (13 files) in progress... Jun 15 2025 06:57:06 webserver maldet(18408): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 13, malware hits 0, cleaned hits 0, time 6s Jun 15 2025 06:57:06 webserver maldet(18408): {scan} scan report saved, to view run: maldet --report 250615-0657.18408 Jun 16 2025 06:57:12 webserver maldet(17711): {update} checking for available updates... Jun 16 2025 06:57:12 webserver maldet(17711): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 16 2025 06:57:12 webserver maldet(17711): {update} hashing install files and checking against server... Jun 16 2025 06:57:13 webserver maldet(17711): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 16 2025 06:57:13 webserver maldet(17711): {update} latest version already installed. Jun 16 2025 06:57:13 webserver maldet(17823): {sigup} performing signature update check... Jun 16 2025 06:57:13 webserver maldet(17823): {sigup} local signature set is version 20250613705251 Jun 16 2025 06:57:13 webserver maldet(17823): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 16 2025 06:57:13 webserver maldet(17823): {sigup} new signature set 20250616812462 available Jun 16 2025 06:57:13 webserver maldet(17823): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 16 2025 06:57:14 webserver maldet(17823): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 16 2025 06:57:14 webserver maldet(17823): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 16 2025 06:57:14 webserver maldet(17823): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 16 2025 06:57:15 webserver maldet(17823): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 16 2025 06:57:15 webserver maldet(17823): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 16 2025 06:57:15 webserver maldet(17823): {sigup} verified md5sum of maldet-sigpack.tgz Jun 16 2025 06:57:15 webserver maldet(17823): {sigup} unpacked and installed maldet-sigpack.tgz Jun 16 2025 06:57:15 webserver maldet(17823): {sigup} verified md5sum of maldet-clean.tgz Jun 16 2025 06:57:15 webserver maldet(17823): {sigup} unpacked and installed maldet-clean.tgz Jun 16 2025 06:57:15 webserver maldet(17823): {sigup} signature set update completed Jun 16 2025 06:57:15 webserver maldet(17823): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 16 2025 06:57:15 webserver maldet(18031): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 16 2025 06:57:16 webserver maldet(18031): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 16 2025 06:57:16 webserver maldet(18031): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 16 2025 06:57:16 webserver maldet(18031): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 16 2025 06:57:16 webserver maldet(18031): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 16 2025 06:58:39 webserver maldet(18031): {scan} file list completed in 83s, found 62 files... Jun 16 2025 06:58:39 webserver maldet(18031): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 16 2025 06:58:39 webserver maldet(18031): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (62 files) in progress... Jun 16 2025 06:58:39 webserver maldet(18031): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jun 16 2025 06:58:39 webserver maldet(18031): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 62, malware hits 0, cleaned hits 0, time 84s Jun 16 2025 06:58:39 webserver maldet(18031): {scan} scan report saved, to view run: maldet --report 250616-0657.18031 Jun 17 2025 07:07:11 webserver maldet(1039): {update} checking for available updates... Jun 17 2025 07:07:11 webserver maldet(1039): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 17 2025 07:07:11 webserver maldet(1039): {update} hashing install files and checking against server... Jun 17 2025 07:07:11 webserver maldet(1039): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 17 2025 07:07:11 webserver maldet(1039): {update} latest version already installed. Jun 17 2025 07:07:11 webserver maldet(1151): {sigup} performing signature update check... Jun 17 2025 07:07:11 webserver maldet(1151): {sigup} local signature set is version 20250616812462 Jun 17 2025 07:07:12 webserver maldet(1151): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 17 2025 07:07:12 webserver maldet(1151): {sigup} latest signature set already installed Jun 17 2025 07:07:12 webserver maldet(1242): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 17 2025 07:07:12 webserver maldet(1242): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 17 2025 07:07:12 webserver maldet(1242): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 17 2025 07:07:12 webserver maldet(1242): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 17 2025 07:07:12 webserver maldet(1242): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 17 2025 07:07:17 webserver maldet(1242): {scan} file list completed in 5s, found 267 files... Jun 17 2025 07:07:17 webserver maldet(1242): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 17 2025 07:07:17 webserver maldet(1242): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (267 files) in progress... Jun 17 2025 07:07:18 webserver maldet(1242): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 267, malware hits 0, cleaned hits 0, time 6s Jun 17 2025 07:07:18 webserver maldet(1242): {scan} scan report saved, to view run: maldet --report 250617-0707.1242 Jun 18 2025 06:59:25 webserver maldet(18153): {update} checking for available updates... Jun 18 2025 06:59:26 webserver maldet(18153): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 18 2025 06:59:26 webserver maldet(18153): {update} hashing install files and checking against server... Jun 18 2025 06:59:26 webserver maldet(18153): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 18 2025 06:59:26 webserver maldet(18153): {update} latest version already installed. Jun 18 2025 06:59:26 webserver maldet(18267): {sigup} performing signature update check... Jun 18 2025 06:59:26 webserver maldet(18267): {sigup} local signature set is version 20250616812462 Jun 18 2025 06:59:26 webserver maldet(18267): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 18 2025 06:59:26 webserver maldet(18267): {sigup} latest signature set already installed Jun 18 2025 06:59:26 webserver maldet(18359): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 18 2025 06:59:27 webserver maldet(18359): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 18 2025 06:59:27 webserver maldet(18359): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 18 2025 06:59:27 webserver maldet(18359): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 18 2025 06:59:27 webserver maldet(18359): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 18 2025 06:59:32 webserver maldet(18359): {scan} file list completed in 5s, found 2420 files... Jun 18 2025 06:59:32 webserver maldet(18359): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 18 2025 06:59:32 webserver maldet(18359): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2420 files) in progress... Jun 18 2025 07:00:06 webserver maldet(18359): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jun 18 2025 07:00:06 webserver maldet(18359): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2420, malware hits 0, cleaned hits 0, time 40s Jun 18 2025 07:00:06 webserver maldet(18359): {scan} scan report saved, to view run: maldet --report 250618-0659.18359 Jun 19 2025 06:56:20 webserver maldet(13033): {update} checking for available updates... Jun 19 2025 06:56:21 webserver maldet(13033): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 19 2025 06:56:21 webserver maldet(13033): {update} hashing install files and checking against server... Jun 19 2025 06:56:21 webserver maldet(13033): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 19 2025 06:56:21 webserver maldet(13033): {update} latest version already installed. Jun 19 2025 06:56:21 webserver maldet(13145): {sigup} performing signature update check... Jun 19 2025 06:56:21 webserver maldet(13145): {sigup} local signature set is version 20250616812462 Jun 19 2025 06:56:21 webserver maldet(13145): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 19 2025 06:56:21 webserver maldet(13145): {sigup} latest signature set already installed Jun 19 2025 06:56:21 webserver maldet(13236): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 19 2025 06:56:21 webserver maldet(13236): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 19 2025 06:56:21 webserver maldet(13236): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 19 2025 06:56:21 webserver maldet(13236): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 19 2025 06:56:21 webserver maldet(13236): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 19 2025 06:56:27 webserver maldet(13236): {scan} file list completed in 6s, found 27 files... Jun 19 2025 06:56:27 webserver maldet(13236): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 19 2025 06:56:27 webserver maldet(13236): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (27 files) in progress... Jun 19 2025 06:56:27 webserver maldet(13236): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 27, malware hits 0, cleaned hits 0, time 6s Jun 19 2025 06:56:27 webserver maldet(13236): {scan} scan report saved, to view run: maldet --report 250619-0656.13236 Jun 20 2025 06:58:52 webserver maldet(10312): {update} checking for available updates... Jun 20 2025 06:58:52 webserver maldet(10312): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 20 2025 06:58:52 webserver maldet(10312): {update} hashing install files and checking against server... Jun 20 2025 06:58:53 webserver maldet(10312): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 20 2025 06:58:53 webserver maldet(10312): {update} latest version already installed. Jun 20 2025 06:58:53 webserver maldet(10424): {sigup} performing signature update check... Jun 20 2025 06:58:53 webserver maldet(10424): {sigup} local signature set is version 20250616812462 Jun 20 2025 06:58:53 webserver maldet(10424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 20 2025 06:58:53 webserver maldet(10424): {sigup} new signature set 202506191777955 available Jun 20 2025 06:58:53 webserver maldet(10424): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 20 2025 06:58:54 webserver maldet(10424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 20 2025 06:58:54 webserver maldet(10424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 20 2025 06:58:54 webserver maldet(10424): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 20 2025 06:58:55 webserver maldet(10424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 20 2025 06:58:55 webserver maldet(10424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 20 2025 06:58:55 webserver maldet(10424): {sigup} verified md5sum of maldet-sigpack.tgz Jun 20 2025 06:58:55 webserver maldet(10424): {sigup} unpacked and installed maldet-sigpack.tgz Jun 20 2025 06:58:55 webserver maldet(10424): {sigup} verified md5sum of maldet-clean.tgz Jun 20 2025 06:58:55 webserver maldet(10424): {sigup} unpacked and installed maldet-clean.tgz Jun 20 2025 06:58:55 webserver maldet(10424): {sigup} signature set update completed Jun 20 2025 06:58:55 webserver maldet(10424): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 20 2025 06:58:55 webserver maldet(10633): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 20 2025 06:58:55 webserver maldet(10633): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 20 2025 06:58:55 webserver maldet(10633): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 20 2025 06:58:55 webserver maldet(10633): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 20 2025 06:58:55 webserver maldet(10633): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 20 2025 06:59:01 webserver maldet(10633): {scan} file list completed in 6s, found 30 files... Jun 20 2025 06:59:01 webserver maldet(10633): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 20 2025 06:59:01 webserver maldet(10633): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (30 files) in progress... Jun 20 2025 06:59:01 webserver maldet(10633): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 30, malware hits 0, cleaned hits 0, time 6s Jun 20 2025 06:59:01 webserver maldet(10633): {scan} scan report saved, to view run: maldet --report 250620-0658.10633 Jun 21 2025 06:59:52 webserver maldet(25320): {update} checking for available updates... Jun 21 2025 06:59:52 webserver maldet(25320): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 21 2025 06:59:52 webserver maldet(25320): {update} hashing install files and checking against server... Jun 21 2025 06:59:53 webserver maldet(25320): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 21 2025 06:59:53 webserver maldet(25320): {update} latest version already installed. Jun 21 2025 06:59:53 webserver maldet(25434): {sigup} performing signature update check... Jun 21 2025 06:59:53 webserver maldet(25434): {sigup} local signature set is version 202506191777955 Jun 21 2025 06:59:53 webserver maldet(25434): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 21 2025 06:59:53 webserver maldet(25434): {sigup} latest signature set already installed Jun 21 2025 06:59:53 webserver maldet(25526): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 21 2025 06:59:54 webserver maldet(25526): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 21 2025 06:59:54 webserver maldet(25526): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 21 2025 06:59:54 webserver maldet(25526): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 21 2025 06:59:54 webserver maldet(25526): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 21 2025 06:59:59 webserver maldet(25526): {scan} file list completed in 5s, found 16 files... Jun 21 2025 06:59:59 webserver maldet(25526): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 21 2025 06:59:59 webserver maldet(25526): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (16 files) in progress... Jun 21 2025 07:00:00 webserver maldet(25526): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 16, malware hits 0, cleaned hits 0, time 7s Jun 21 2025 07:00:00 webserver maldet(25526): {scan} scan report saved, to view run: maldet --report 250621-0659.25526 Jun 22 2025 06:59:23 webserver maldet(26355): {update} checking for available updates... Jun 22 2025 06:59:23 webserver maldet(26355): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 22 2025 06:59:23 webserver maldet(26355): {update} hashing install files and checking against server... Jun 22 2025 06:59:24 webserver maldet(26355): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 22 2025 06:59:24 webserver maldet(26355): {update} latest version already installed. Jun 22 2025 06:59:24 webserver maldet(26469): {sigup} performing signature update check... Jun 22 2025 06:59:24 webserver maldet(26469): {sigup} local signature set is version 202506191777955 Jun 22 2025 06:59:24 webserver maldet(26469): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 22 2025 06:59:24 webserver maldet(26469): {sigup} new signature set 202506222744524 available Jun 22 2025 06:59:24 webserver maldet(26469): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 22 2025 06:59:25 webserver maldet(26469): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 22 2025 06:59:25 webserver maldet(26469): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 22 2025 06:59:25 webserver maldet(26469): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 22 2025 06:59:26 webserver maldet(26469): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 22 2025 06:59:26 webserver maldet(26469): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 22 2025 06:59:26 webserver maldet(26469): {sigup} verified md5sum of maldet-sigpack.tgz Jun 22 2025 06:59:26 webserver maldet(26469): {sigup} unpacked and installed maldet-sigpack.tgz Jun 22 2025 06:59:26 webserver maldet(26469): {sigup} verified md5sum of maldet-clean.tgz Jun 22 2025 06:59:26 webserver maldet(26469): {sigup} unpacked and installed maldet-clean.tgz Jun 22 2025 06:59:26 webserver maldet(26469): {sigup} signature set update completed Jun 22 2025 06:59:26 webserver maldet(26469): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 22 2025 06:59:26 webserver maldet(26675): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 22 2025 06:59:26 webserver maldet(26675): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 22 2025 06:59:26 webserver maldet(26675): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 22 2025 06:59:26 webserver maldet(26675): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 22 2025 06:59:26 webserver maldet(26675): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 22 2025 06:59:31 webserver maldet(26675): {scan} file list completed in 5s, found 27 files... Jun 22 2025 06:59:31 webserver maldet(26675): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 22 2025 06:59:31 webserver maldet(26675): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (27 files) in progress... Jun 22 2025 06:59:32 webserver maldet(26675): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 27, malware hits 0, cleaned hits 0, time 6s Jun 22 2025 06:59:32 webserver maldet(26675): {scan} scan report saved, to view run: maldet --report 250622-0659.26675 Jun 23 2025 07:07:05 webserver maldet(29087): {update} checking for available updates... Jun 23 2025 07:07:06 webserver maldet(29087): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 23 2025 07:07:06 webserver maldet(29087): {update} hashing install files and checking against server... Jun 23 2025 07:07:06 webserver maldet(29087): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 23 2025 07:07:06 webserver maldet(29087): {update} latest version already installed. Jun 23 2025 07:07:06 webserver maldet(29199): {sigup} performing signature update check... Jun 23 2025 07:07:06 webserver maldet(29199): {sigup} local signature set is version 202506222744524 Jun 23 2025 07:07:06 webserver maldet(29199): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 23 2025 07:07:06 webserver maldet(29199): {sigup} latest signature set already installed Jun 23 2025 07:07:07 webserver maldet(29290): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 23 2025 07:07:07 webserver maldet(29290): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 23 2025 07:07:07 webserver maldet(29290): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 23 2025 07:07:07 webserver maldet(29290): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 23 2025 07:07:07 webserver maldet(29290): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 23 2025 07:07:12 webserver maldet(29290): {scan} file list completed in 5s, found 30 files... Jun 23 2025 07:07:12 webserver maldet(29290): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 23 2025 07:07:12 webserver maldet(29290): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (30 files) in progress... Jun 23 2025 07:07:12 webserver maldet(29290): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jun 23 2025 07:07:12 webserver maldet(29290): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 30, malware hits 0, cleaned hits 0, time 5s Jun 23 2025 07:07:12 webserver maldet(29290): {scan} scan report saved, to view run: maldet --report 250623-0707.29290 Jun 24 2025 06:57:15 webserver maldet(16615): {update} checking for available updates... Jun 24 2025 06:57:16 webserver maldet(16615): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 24 2025 06:57:16 webserver maldet(16615): {update} hashing install files and checking against server... Jun 24 2025 06:57:16 webserver maldet(16615): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 24 2025 06:57:16 webserver maldet(16615): {update} latest version already installed. Jun 24 2025 06:57:16 webserver maldet(16729): {sigup} performing signature update check... Jun 24 2025 06:57:16 webserver maldet(16729): {sigup} local signature set is version 202506222744524 Jun 24 2025 06:57:16 webserver maldet(16729): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 24 2025 06:57:16 webserver maldet(16729): {sigup} latest signature set already installed Jun 24 2025 06:57:16 webserver maldet(16820): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 24 2025 06:57:17 webserver maldet(16820): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 24 2025 06:57:17 webserver maldet(16820): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 24 2025 06:57:17 webserver maldet(16820): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 24 2025 06:57:17 webserver maldet(16820): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 24 2025 06:57:22 webserver maldet(16820): {scan} file list completed in 5s, found 16 files... Jun 24 2025 06:57:22 webserver maldet(16820): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 24 2025 06:57:22 webserver maldet(16820): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (16 files) in progress... Jun 24 2025 06:57:22 webserver maldet(16820): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 16, malware hits 0, cleaned hits 0, time 5s Jun 24 2025 06:57:22 webserver maldet(16820): {scan} scan report saved, to view run: maldet --report 250624-0657.16820 Jun 25 2025 06:57:05 webserver maldet(5065): {update} checking for available updates... Jun 25 2025 06:57:05 webserver maldet(5065): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 25 2025 06:57:05 webserver maldet(5065): {update} hashing install files and checking against server... Jun 25 2025 06:57:05 webserver maldet(5065): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 25 2025 06:57:05 webserver maldet(5065): {update} latest version already installed. Jun 25 2025 06:57:05 webserver maldet(5177): {sigup} performing signature update check... Jun 25 2025 06:57:05 webserver maldet(5177): {sigup} local signature set is version 202506222744524 Jun 25 2025 06:57:06 webserver maldet(5177): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 25 2025 06:57:06 webserver maldet(5177): {sigup} new signature set 202506253712170 available Jun 25 2025 06:57:06 webserver maldet(5177): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 25 2025 06:57:07 webserver maldet(5177): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 25 2025 06:57:07 webserver maldet(5177): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 25 2025 06:57:07 webserver maldet(5177): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 25 2025 06:57:07 webserver maldet(5177): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 25 2025 06:57:08 webserver maldet(5177): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 25 2025 06:57:08 webserver maldet(5177): {sigup} verified md5sum of maldet-sigpack.tgz Jun 25 2025 06:57:08 webserver maldet(5177): {sigup} unpacked and installed maldet-sigpack.tgz Jun 25 2025 06:57:08 webserver maldet(5177): {sigup} verified md5sum of maldet-clean.tgz Jun 25 2025 06:57:08 webserver maldet(5177): {sigup} unpacked and installed maldet-clean.tgz Jun 25 2025 06:57:08 webserver maldet(5177): {sigup} signature set update completed Jun 25 2025 06:57:08 webserver maldet(5177): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 25 2025 06:57:08 webserver maldet(5382): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 25 2025 06:57:08 webserver maldet(5382): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 25 2025 06:57:08 webserver maldet(5382): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 25 2025 06:57:08 webserver maldet(5382): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 25 2025 06:57:08 webserver maldet(5382): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 25 2025 06:57:13 webserver maldet(5382): {scan} file list completed in 5s, found 24 files... Jun 25 2025 06:57:13 webserver maldet(5382): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 25 2025 06:57:13 webserver maldet(5382): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (24 files) in progress... Jun 25 2025 06:57:14 webserver maldet(5382): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 24, malware hits 0, cleaned hits 0, time 6s Jun 25 2025 06:57:14 webserver maldet(5382): {scan} scan report saved, to view run: maldet --report 250625-0657.5382 Jun 26 2025 06:59:13 webserver maldet(22859): {update} checking for available updates... Jun 26 2025 06:59:14 webserver maldet(22859): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 26 2025 06:59:14 webserver maldet(22859): {update} hashing install files and checking against server... Jun 26 2025 06:59:14 webserver maldet(22859): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 26 2025 06:59:14 webserver maldet(22859): {update} latest version already installed. Jun 26 2025 06:59:14 webserver maldet(22971): {sigup} performing signature update check... Jun 26 2025 06:59:14 webserver maldet(22971): {sigup} local signature set is version 202506253712170 Jun 26 2025 06:59:14 webserver maldet(22971): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 26 2025 06:59:14 webserver maldet(22971): {sigup} latest signature set already installed Jun 26 2025 06:59:15 webserver maldet(23062): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 26 2025 06:59:15 webserver maldet(23062): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 26 2025 06:59:15 webserver maldet(23062): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 26 2025 06:59:15 webserver maldet(23062): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 26 2025 06:59:15 webserver maldet(23062): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 26 2025 06:59:20 webserver maldet(23062): {scan} file list completed in 5s, found 244 files... Jun 26 2025 06:59:20 webserver maldet(23062): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 26 2025 06:59:20 webserver maldet(23062): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (244 files) in progress... Jun 26 2025 06:59:24 webserver maldet(23062): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 244, malware hits 0, cleaned hits 0, time 9s Jun 26 2025 06:59:24 webserver maldet(23062): {scan} scan report saved, to view run: maldet --report 250626-0659.23062 Jun 27 2025 06:59:15 webserver maldet(6489): {update} checking for available updates... Jun 27 2025 06:59:15 webserver maldet(6489): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 27 2025 06:59:15 webserver maldet(6489): {update} hashing install files and checking against server... Jun 27 2025 06:59:16 webserver maldet(6489): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 27 2025 06:59:16 webserver maldet(6489): {update} latest version already installed. Jun 27 2025 06:59:16 webserver maldet(6601): {sigup} performing signature update check... Jun 27 2025 06:59:16 webserver maldet(6601): {sigup} local signature set is version 202506253712170 Jun 27 2025 06:59:16 webserver maldet(6601): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 27 2025 06:59:16 webserver maldet(6601): {sigup} latest signature set already installed Jun 27 2025 06:59:16 webserver maldet(6694): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 27 2025 06:59:16 webserver maldet(6694): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 27 2025 06:59:16 webserver maldet(6694): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 27 2025 06:59:16 webserver maldet(6694): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 27 2025 06:59:16 webserver maldet(6694): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 27 2025 06:59:21 webserver maldet(6694): {scan} file list completed in 5s, found 50 files... Jun 27 2025 06:59:21 webserver maldet(6694): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 27 2025 06:59:21 webserver maldet(6694): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (50 files) in progress... Jun 27 2025 06:59:22 webserver maldet(6694): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 50, malware hits 0, cleaned hits 0, time 6s Jun 27 2025 06:59:22 webserver maldet(6694): {scan} scan report saved, to view run: maldet --report 250627-0659.6694 Jun 28 2025 07:03:10 webserver maldet(11007): {update} checking for available updates... Jun 28 2025 07:03:10 webserver maldet(11007): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 28 2025 07:03:10 webserver maldet(11007): {update} hashing install files and checking against server... Jun 28 2025 07:03:10 webserver maldet(11007): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 28 2025 07:03:10 webserver maldet(11007): {update} latest version already installed. Jun 28 2025 07:03:10 webserver maldet(11119): {sigup} performing signature update check... Jun 28 2025 07:03:10 webserver maldet(11119): {sigup} local signature set is version 202506253712170 Jun 28 2025 07:03:11 webserver maldet(11119): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 28 2025 07:03:11 webserver maldet(11119): {sigup} latest signature set already installed Jun 28 2025 07:03:11 webserver maldet(11211): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 28 2025 07:03:11 webserver maldet(11211): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 28 2025 07:03:11 webserver maldet(11211): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 28 2025 07:03:11 webserver maldet(11211): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 28 2025 07:03:11 webserver maldet(11211): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 28 2025 07:03:16 webserver maldet(11211): {scan} file list completed in 5s, found 23 files... Jun 28 2025 07:03:16 webserver maldet(11211): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 28 2025 07:03:16 webserver maldet(11211): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (23 files) in progress... Jun 28 2025 07:03:16 webserver maldet(11211): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 23, malware hits 0, cleaned hits 0, time 5s Jun 28 2025 07:03:16 webserver maldet(11211): {scan} scan report saved, to view run: maldet --report 250628-0703.11211 Jun 29 2025 06:59:56 webserver maldet(2076): {update} checking for available updates... Jun 29 2025 06:59:56 webserver maldet(2076): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 29 2025 06:59:56 webserver maldet(2076): {update} hashing install files and checking against server... Jun 29 2025 06:59:57 webserver maldet(2076): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 29 2025 06:59:57 webserver maldet(2076): {update} latest version already installed. Jun 29 2025 06:59:57 webserver maldet(2191): {sigup} performing signature update check... Jun 29 2025 06:59:57 webserver maldet(2191): {sigup} local signature set is version 202506253712170 Jun 29 2025 06:59:57 webserver maldet(2191): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 29 2025 06:59:57 webserver maldet(2191): {sigup} latest signature set already installed Jun 29 2025 06:59:57 webserver maldet(2282): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 29 2025 06:59:58 webserver maldet(2282): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 29 2025 06:59:58 webserver maldet(2282): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 29 2025 06:59:58 webserver maldet(2282): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 29 2025 06:59:58 webserver maldet(2282): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 29 2025 07:01:17 webserver maldet(2282): {scan} file list completed in 79s, found 13 files... Jun 29 2025 07:01:17 webserver maldet(2282): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 29 2025 07:01:17 webserver maldet(2282): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (13 files) in progress... Jun 29 2025 07:01:18 webserver maldet(2282): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 13, malware hits 0, cleaned hits 0, time 81s Jun 29 2025 07:01:18 webserver maldet(2282): {scan} scan report saved, to view run: maldet --report 250629-0659.2282 Jun 30 2025 06:58:18 webserver maldet(13841): {update} checking for available updates... Jun 30 2025 06:58:18 webserver maldet(13841): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 30 2025 06:58:18 webserver maldet(13841): {update} hashing install files and checking against server... Jun 30 2025 06:58:18 webserver maldet(13841): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 30 2025 06:58:18 webserver maldet(13841): {update} latest version already installed. Jun 30 2025 06:58:18 webserver maldet(13953): {sigup} performing signature update check... Jun 30 2025 06:58:18 webserver maldet(13953): {sigup} local signature set is version 202506253712170 Jun 30 2025 06:58:19 webserver maldet(13953): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 30 2025 06:58:19 webserver maldet(13953): {sigup} latest signature set already installed Jun 30 2025 06:58:19 webserver maldet(14047): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 30 2025 06:58:19 webserver maldet(14047): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 30 2025 06:58:19 webserver maldet(14047): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 30 2025 06:58:19 webserver maldet(14047): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 30 2025 06:58:19 webserver maldet(14047): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 30 2025 06:58:24 webserver maldet(14047): {scan} file list completed in 5s, found 33 files... Jun 30 2025 06:58:24 webserver maldet(14047): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jun 30 2025 06:58:24 webserver maldet(14047): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (33 files) in progress... Jun 30 2025 06:58:24 webserver maldet(14047): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 33, malware hits 0, cleaned hits 0, time 5s Jun 30 2025 06:58:24 webserver maldet(14047): {scan} scan report saved, to view run: maldet --report 250630-0658.14047 Jul 01 2025 06:56:30 webserver maldet(9527): {update} checking for available updates... Jul 01 2025 06:56:30 webserver maldet(9527): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 01 2025 06:56:30 webserver maldet(9527): {update} hashing install files and checking against server... Jul 01 2025 06:56:31 webserver maldet(9527): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 01 2025 06:56:31 webserver maldet(9527): {update} latest version already installed. Jul 01 2025 06:56:31 webserver maldet(9645): {sigup} performing signature update check... Jul 01 2025 06:56:31 webserver maldet(9645): {sigup} local signature set is version 202506253712170 Jul 01 2025 06:56:31 webserver maldet(9645): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 01 2025 06:56:31 webserver maldet(9645): {sigup} new signature set 20250701819448 available Jul 01 2025 06:56:31 webserver maldet(9645): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 01 2025 06:56:32 webserver maldet(9645): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 01 2025 06:56:32 webserver maldet(9645): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 01 2025 06:56:33 webserver maldet(9645): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 01 2025 06:56:33 webserver maldet(9645): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 01 2025 06:56:33 webserver maldet(9645): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 01 2025 06:56:33 webserver maldet(9645): {sigup} verified md5sum of maldet-sigpack.tgz Jul 01 2025 06:56:33 webserver maldet(9645): {sigup} unpacked and installed maldet-sigpack.tgz Jul 01 2025 06:56:33 webserver maldet(9645): {sigup} verified md5sum of maldet-clean.tgz Jul 01 2025 06:56:33 webserver maldet(9645): {sigup} unpacked and installed maldet-clean.tgz Jul 01 2025 06:56:33 webserver maldet(9645): {sigup} signature set update completed Jul 01 2025 06:56:33 webserver maldet(9645): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 01 2025 06:56:33 webserver maldet(9875): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 01 2025 06:56:34 webserver maldet(9875): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 01 2025 06:56:34 webserver maldet(9875): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 01 2025 06:56:34 webserver maldet(9875): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 01 2025 06:56:34 webserver maldet(9875): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 01 2025 06:56:39 webserver maldet(9875): {scan} file list completed in 5s, found 92 files... Jul 01 2025 06:56:39 webserver maldet(9875): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jul 01 2025 06:56:39 webserver maldet(9875): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (92 files) in progress... Jul 01 2025 06:56:40 webserver maldet(9875): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 92, malware hits 0, cleaned hits 0, time 7s Jul 01 2025 06:56:40 webserver maldet(9875): {scan} scan report saved, to view run: maldet --report 250701-0656.9875 Jul 02 2025 06:57:15 webserver maldet(11968): {update} checking for available updates... Jul 02 2025 06:57:15 webserver maldet(11968): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 02 2025 06:57:15 webserver maldet(11968): {update} hashing install files and checking against server... Jul 02 2025 06:57:15 webserver maldet(11968): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 02 2025 06:57:15 webserver maldet(11968): {update} latest version already installed. Jul 02 2025 06:57:15 webserver maldet(12080): {sigup} performing signature update check... Jul 02 2025 06:57:15 webserver maldet(12080): {sigup} local signature set is version 20250701819448 Jul 02 2025 06:57:16 webserver maldet(12080): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 02 2025 06:57:16 webserver maldet(12080): {sigup} latest signature set already installed Jul 02 2025 06:57:16 webserver maldet(12172): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 02 2025 06:57:16 webserver maldet(12172): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 02 2025 06:57:16 webserver maldet(12172): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 02 2025 06:57:16 webserver maldet(12172): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 02 2025 06:57:16 webserver maldet(12172): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 02 2025 06:57:21 webserver maldet(12172): {scan} file list completed in 5s, found 172 files... Jul 02 2025 06:57:21 webserver maldet(12172): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jul 02 2025 06:57:21 webserver maldet(12172): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (172 files) in progress... Jul 02 2025 06:57:23 webserver maldet(12172): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 172, malware hits 0, cleaned hits 0, time 7s Jul 02 2025 06:57:23 webserver maldet(12172): {scan} scan report saved, to view run: maldet --report 250702-0657.12172 Jul 03 2025 06:58:15 webserver maldet(25301): {update} checking for available updates... Jul 03 2025 06:58:15 webserver maldet(25301): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 03 2025 06:58:15 webserver maldet(25301): {update} hashing install files and checking against server... Jul 03 2025 06:58:16 webserver maldet(25301): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 03 2025 06:58:16 webserver maldet(25301): {update} latest version already installed. Jul 03 2025 06:58:16 webserver maldet(25413): {sigup} performing signature update check... Jul 03 2025 06:58:16 webserver maldet(25413): {sigup} local signature set is version 20250701819448 Jul 03 2025 06:58:16 webserver maldet(25413): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 03 2025 06:58:16 webserver maldet(25413): {sigup} latest signature set already installed Jul 03 2025 06:58:16 webserver maldet(25504): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 03 2025 06:58:16 webserver maldet(25504): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 03 2025 06:58:16 webserver maldet(25504): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 03 2025 06:58:16 webserver maldet(25504): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 03 2025 06:58:16 webserver maldet(25504): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 03 2025 06:58:21 webserver maldet(25504): {scan} file list completed in 5s, found 14 files... Jul 03 2025 06:58:21 webserver maldet(25504): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jul 03 2025 06:58:21 webserver maldet(25504): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (14 files) in progress... Jul 03 2025 06:58:21 webserver maldet(25504): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 14, malware hits 0, cleaned hits 0, time 5s Jul 03 2025 06:58:21 webserver maldet(25504): {scan} scan report saved, to view run: maldet --report 250703-0658.25504 Jul 04 2025 07:00:23 webserver maldet(8590): {update} checking for available updates... Jul 04 2025 07:00:23 webserver maldet(8590): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 04 2025 07:00:23 webserver maldet(8590): {update} hashing install files and checking against server... Jul 04 2025 07:00:24 webserver maldet(8590): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 04 2025 07:00:24 webserver maldet(8590): {update} latest version already installed. Jul 04 2025 07:00:24 webserver maldet(8702): {sigup} performing signature update check... Jul 04 2025 07:00:24 webserver maldet(8702): {sigup} local signature set is version 20250701819448 Jul 04 2025 07:00:24 webserver maldet(8702): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 04 2025 07:00:24 webserver maldet(8702): {sigup} new signature set 202507041798016 available Jul 04 2025 07:00:24 webserver maldet(8702): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 04 2025 07:00:25 webserver maldet(8702): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 04 2025 07:00:25 webserver maldet(8702): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 04 2025 07:00:25 webserver maldet(8702): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 04 2025 07:00:26 webserver maldet(8702): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 04 2025 07:00:26 webserver maldet(8702): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 04 2025 07:00:26 webserver maldet(8702): {sigup} verified md5sum of maldet-sigpack.tgz Jul 04 2025 07:00:26 webserver maldet(8702): {sigup} unpacked and installed maldet-sigpack.tgz Jul 04 2025 07:00:26 webserver maldet(8702): {sigup} verified md5sum of maldet-clean.tgz Jul 04 2025 07:00:26 webserver maldet(8702): {sigup} unpacked and installed maldet-clean.tgz Jul 04 2025 07:00:26 webserver maldet(8702): {sigup} signature set update completed Jul 04 2025 07:00:26 webserver maldet(8702): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 04 2025 07:00:26 webserver maldet(8909): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 04 2025 07:00:26 webserver maldet(8909): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 04 2025 07:00:26 webserver maldet(8909): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 04 2025 07:00:26 webserver maldet(8909): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 04 2025 07:00:26 webserver maldet(8909): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 04 2025 07:01:45 webserver maldet(8909): {scan} file list completed in 79s, found 18 files... Jul 04 2025 07:01:45 webserver maldet(8909): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jul 04 2025 07:01:45 webserver maldet(8909): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (18 files) in progress... Jul 04 2025 07:01:45 webserver maldet(8909): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 18, malware hits 0, cleaned hits 0, time 79s Jul 04 2025 07:01:45 webserver maldet(8909): {scan} scan report saved, to view run: maldet --report 250704-0700.8909 Jul 05 2025 07:00:00 webserver maldet(25496): {update} checking for available updates... Jul 05 2025 07:00:00 webserver maldet(25496): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 05 2025 07:00:00 webserver maldet(25496): {update} hashing install files and checking against server... Jul 05 2025 07:00:01 webserver maldet(25496): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 05 2025 07:00:01 webserver maldet(25496): {update} latest version already installed. Jul 05 2025 07:00:01 webserver maldet(25608): {sigup} performing signature update check... Jul 05 2025 07:00:01 webserver maldet(25608): {sigup} local signature set is version 202507041798016 Jul 05 2025 07:00:01 webserver maldet(25608): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 05 2025 07:00:01 webserver maldet(25608): {sigup} latest signature set already installed Jul 05 2025 07:00:01 webserver maldet(25755): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 05 2025 07:00:02 webserver maldet(25755): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 05 2025 07:00:02 webserver maldet(25755): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 05 2025 07:00:02 webserver maldet(25755): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 05 2025 07:00:02 webserver maldet(25755): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 05 2025 07:00:10 webserver maldet(25755): {scan} file list completed in 8s, found 18 files... Jul 05 2025 07:00:10 webserver maldet(25755): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jul 05 2025 07:00:10 webserver maldet(25755): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (18 files) in progress... Jul 05 2025 07:00:10 webserver maldet(25755): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 18, malware hits 0, cleaned hits 0, time 9s Jul 05 2025 07:00:10 webserver maldet(25755): {scan} scan report saved, to view run: maldet --report 250705-0700.25755 Jul 06 2025 06:59:47 webserver maldet(31606): {update} checking for available updates... Jul 06 2025 06:59:47 webserver maldet(31606): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 06 2025 06:59:47 webserver maldet(31606): {update} hashing install files and checking against server... Jul 06 2025 06:59:47 webserver maldet(31606): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 06 2025 06:59:47 webserver maldet(31606): {update} latest version already installed. Jul 06 2025 06:59:47 webserver maldet(31718): {sigup} performing signature update check... Jul 06 2025 06:59:47 webserver maldet(31718): {sigup} local signature set is version 202507041798016 Jul 06 2025 06:59:48 webserver maldet(31718): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 06 2025 06:59:48 webserver maldet(31718): {sigup} latest signature set already installed Jul 06 2025 06:59:48 webserver maldet(31809): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 06 2025 06:59:48 webserver maldet(31809): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 06 2025 06:59:48 webserver maldet(31809): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 06 2025 06:59:48 webserver maldet(31809): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 06 2025 06:59:48 webserver maldet(31809): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 06 2025 06:59:53 webserver maldet(31809): {scan} file list completed in 5s, found 1739 files... Jul 06 2025 06:59:53 webserver maldet(31809): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jul 06 2025 06:59:53 webserver maldet(31809): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1739 files) in progress... Jul 06 2025 07:00:16 webserver maldet(31809): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1739, malware hits 0, cleaned hits 0, time 28s Jul 06 2025 07:00:16 webserver maldet(31809): {scan} scan report saved, to view run: maldet --report 250706-0659.31809 Jul 07 2025 06:57:07 webserver maldet(13077): {update} checking for available updates... Jul 07 2025 06:57:07 webserver maldet(13077): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 07 2025 06:57:08 webserver maldet(13077): {update} hashing install files and checking against server... Jul 07 2025 06:57:08 webserver maldet(13077): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 07 2025 06:57:08 webserver maldet(13077): {update} latest version already installed. Jul 07 2025 06:57:08 webserver maldet(13189): {sigup} performing signature update check... Jul 07 2025 06:57:08 webserver maldet(13189): {sigup} local signature set is version 202507041798016 Jul 07 2025 06:57:08 webserver maldet(13189): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 07 2025 06:57:08 webserver maldet(13189): {sigup} new signature set 202507072770854 available Jul 07 2025 06:57:08 webserver maldet(13189): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 07 2025 06:57:09 webserver maldet(13189): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 07 2025 06:57:10 webserver maldet(13189): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 07 2025 06:57:10 webserver maldet(13189): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 07 2025 06:57:10 webserver maldet(13189): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 07 2025 06:57:10 webserver maldet(13189): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 07 2025 06:57:10 webserver maldet(13189): {sigup} verified md5sum of maldet-sigpack.tgz Jul 07 2025 06:57:11 webserver maldet(13189): {sigup} unpacked and installed maldet-sigpack.tgz Jul 07 2025 06:57:11 webserver maldet(13189): {sigup} verified md5sum of maldet-clean.tgz Jul 07 2025 06:57:11 webserver maldet(13189): {sigup} unpacked and installed maldet-clean.tgz Jul 07 2025 06:57:11 webserver maldet(13189): {sigup} signature set update completed Jul 07 2025 06:57:11 webserver maldet(13189): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 07 2025 06:57:11 webserver maldet(13396): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 07 2025 06:57:11 webserver maldet(13396): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 07 2025 06:57:11 webserver maldet(13396): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 07 2025 06:57:11 webserver maldet(13396): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 07 2025 06:57:11 webserver maldet(13396): {scan} executed /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 07 2025 06:58:28 webserver maldet(13396): {scan} file list completed in 77s, found 262 files... Jul 07 2025 06:58:28 webserver maldet(13396): {scan} found clamav binary at /usr/bin/clamdscan, using clamav scanner engine... Jul 07 2025 06:58:28 webserver maldet(13396): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (262 files) in progress... Jul 07 2025 06:58:32 webserver maldet(13396): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jul 07 2025 06:58:32 webserver maldet(13396): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 262, malware hits 0, cleaned hits 0, time 81s Jul 07 2025 06:58:32 webserver maldet(13396): {scan} scan report saved, to view run: maldet --report 250707-0657.13396