Server : Apache System : Linux server2.corals.io 4.18.0-348.2.1.el8_5.x86_64 #1 SMP Mon Nov 15 09:17:08 EST 2021 x86_64 User : corals ( 1002) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory : /proc/thread-self/root/usr/local/maldetect.bk1413376/ |
Jul 16 2025 03:57:28 server2 maldet(1928381): {sigup} performing signature update check...
Jul 16 2025 03:57:28 server2 maldet(1928381): {sigup} local signature set is version 20250225482944
Jul 16 2025 03:57:57 server2 maldet(1928381): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 16 2025 03:57:58 server2 maldet(1928381): {sigup} new signature set 202507161493482 available
Jul 16 2025 03:57:58 server2 maldet(1928381): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Jul 16 2025 03:58:33 server2 maldet(1928381): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Jul 16 2025 03:59:03 server2 maldet(1928381): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Jul 16 2025 03:59:03 server2 maldet(1928381): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Jul 16 2025 03:59:33 server2 maldet(1928381): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Jul 16 2025 03:59:53 server2 maldet(1928381): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Jul 16 2025 03:59:53 server2 maldet(1928381): {sigup} verified md5sum of maldet-sigpack.tgz
Jul 16 2025 03:59:54 server2 maldet(1928381): {sigup} unpacked and installed maldet-sigpack.tgz
Jul 16 2025 03:59:55 server2 maldet(1928381): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact [email protected]
Jul 16 2025 03:59:55 server2 maldet(1928381): {sigup} signature set update completed
Jul 16 2025 03:59:56 server2 maldet(1928381): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Jul 16 2025 03:59:56 server2 maldet(1927669): {update} completed update v1.6.6 3a1792 => v1.6.6 359d25, running signature updates...
Jul 16 2025 03:59:56 server2 maldet(1928864): {sigup} performing signature update check...
Jul 16 2025 03:59:56 server2 maldet(1928864): {sigup} local signature set is version 202507161493482
Jul 16 2025 04:00:35 server2 maldet(1928864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 16 2025 04:00:35 server2 maldet(1928864): {sigup} latest signature set already installed
Jul 16 2025 04:00:35 server2 maldet(1927669): {update} update and config import completed
Jul 16 2025 04:00:37 server2 maldet(1929312): {sigup} performing signature update check...
Jul 16 2025 04:00:37 server2 maldet(1929312): {sigup} local signature set is version 202507161493482
Jul 16 2025 04:01:39 server2 maldet(1929312): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 16 2025 04:01:40 server2 maldet(1929312): {sigup} latest signature set already installed
Jul 16 2025 04:01:40 server2 maldet(1929510): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 16 2025 04:01:43 server2 maldet(1929510): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Jul 16 2025 04:01:43 server2 maldet(1929510): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 16 2025 04:01:43 server2 maldet(1929510): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 16 2025 04:01:43 server2 maldet(1929510): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0
Jul 16 2025 04:04:07 server2 maldet(1929510): {scan} file list completed in 142s, found 512 files...
Jul 16 2025 04:04:07 server2 maldet(1929510): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 16 2025 04:04:07 server2 maldet(1929510): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (512 files) in progress...
Jul 16 2025 04:05:13 server2 maldet(1929510): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 512, malware hits 0, cleaned hits 0, time 213s
Jul 16 2025 04:05:13 server2 maldet(1929510): {scan} scan report saved, to view run: maldet --report 250716-0401.1929510
Jul 17 2025 03:16:37 server2 maldet(2178276): {update} checking for available updates...
Jul 17 2025 03:17:12 server2 maldet(2178276): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 17 2025 03:17:14 server2 maldet(2178276): {update} hashing install files and checking against server...
Jul 17 2025 03:17:49 server2 maldet(2178276): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 17 2025 03:17:49 server2 maldet(2178276): {update} latest version already installed.
Jul 17 2025 03:17:49 server2 maldet(2178482): {sigup} performing signature update check...
Jul 17 2025 03:17:49 server2 maldet(2178482): {sigup} local signature set is version 202507161493482
Jul 17 2025 03:18:15 server2 maldet(2178482): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 17 2025 03:18:16 server2 maldet(2178482): {sigup} latest signature set already installed
Jul 17 2025 03:18:18 server2 maldet(2178654): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 17 2025 03:18:33 server2 maldet(2178654): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Jul 17 2025 03:18:33 server2 maldet(2178654): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 17 2025 03:18:33 server2 maldet(2178654): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 17 2025 03:18:33 server2 maldet(2178654): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0
Jul 17 2025 03:21:34 server2 maldet(2178654): {scan} file list completed in 181s, found 495 files...
Jul 17 2025 03:21:34 server2 maldet(2178654): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 17 2025 03:21:34 server2 maldet(2178654): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (495 files) in progress...
Jul 17 2025 03:24:06 server2 maldet(2178654): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 495, malware hits 0, cleaned hits 0, time 346s
Jul 17 2025 03:24:06 server2 maldet(2178654): {scan} scan report saved, to view run: maldet --report 250717-0318.2178654
Jul 18 2025 03:20:25 server2 maldet(2479826): {update} checking for available updates...
Jul 18 2025 03:20:34 server2 maldet(2479826): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 18 2025 03:20:34 server2 maldet(2479826): {update} hashing install files and checking against server...
Jul 18 2025 03:20:44 server2 maldet(2479826): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 18 2025 03:20:44 server2 maldet(2479826): {update} latest version already installed.
Jul 18 2025 03:20:46 server2 maldet(2479979): {sigup} performing signature update check...
Jul 18 2025 03:20:46 server2 maldet(2479979): {sigup} local signature set is version 202507161493482
Jul 18 2025 03:20:54 server2 maldet(2479979): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 18 2025 03:20:54 server2 maldet(2479979): {sigup} latest signature set already installed
Jul 18 2025 03:20:56 server2 maldet(2480074): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 18 2025 03:20:57 server2 maldet(2480074): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Jul 18 2025 03:20:57 server2 maldet(2480074): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 18 2025 03:20:57 server2 maldet(2480074): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 18 2025 03:20:57 server2 maldet(2480074): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0
Jul 18 2025 03:26:56 server2 maldet(2480074): {scan} file list completed in 359s, found 878 files...
Jul 18 2025 03:26:56 server2 maldet(2480074): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 18 2025 03:26:57 server2 maldet(2480074): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (878 files) in progress...
Jul 18 2025 03:29:00 server2 maldet(2480074): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 878, malware hits 0, cleaned hits 0, time 484s
Jul 18 2025 03:29:00 server2 maldet(2480074): {scan} scan report saved, to view run: maldet --report 250718-0320.2480074
Jul 19 2025 03:31:44 server2 maldet(2719182): {update} checking for available updates...
Jul 19 2025 03:32:17 server2 maldet(2719182): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Jul 19 2025 03:32:19 server2 maldet(2719182): {update} hashing install files and checking against server...
Jul 19 2025 03:32:49 server2 maldet(2719182): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Jul 19 2025 03:32:49 server2 maldet(2719182): {update} latest version already installed.
Jul 19 2025 03:32:49 server2 maldet(2719647): {sigup} performing signature update check...
Jul 19 2025 03:32:49 server2 maldet(2719647): {sigup} local signature set is version 202507161493482
Jul 19 2025 03:33:19 server2 maldet(2719647): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Jul 19 2025 03:33:19 server2 maldet(2719647): {sigup} new signature set 202507192465560 available
Jul 19 2025 03:33:19 server2 maldet(2719647): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Jul 19 2025 03:34:04 server2 maldet(2719647): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Jul 19 2025 03:34:31 server2 maldet(2719647): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Jul 19 2025 03:34:32 server2 maldet(2719647): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Jul 19 2025 03:35:04 server2 maldet(2719647): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Jul 19 2025 03:35:35 server2 maldet(2719647): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Jul 19 2025 03:35:35 server2 maldet(2719647): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected]
Jul 19 2025 03:35:36 server2 maldet(2719647): {sigup} verified md5sum of maldet-clean.tgz
Jul 19 2025 03:35:36 server2 maldet(2719647): {sigup} unpacked and installed maldet-clean.tgz
Jul 19 2025 03:35:38 server2 maldet(2720147): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Jul 19 2025 03:35:40 server2 maldet(2720147): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Jul 19 2025 03:35:40 server2 maldet(2720147): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Jul 19 2025 03:35:40 server2 maldet(2720147): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Jul 19 2025 03:35:40 server2 maldet(2720147): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0
Jul 19 2025 03:41:01 server2 maldet(2720147): {scan} file list completed in 321s, found 1567 files...
Jul 19 2025 03:41:01 server2 maldet(2720147): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Jul 19 2025 03:41:01 server2 maldet(2720147): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1567 files) in progress...
Jul 19 2025 03:51:12 server2 maldet(2720147): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details!
Jul 19 2025 03:51:14 server2 maldet(2720147): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1567, malware hits 0, cleaned hits 0, time 935s
Jul 19 2025 03:51:14 server2 maldet(2720147): {scan} scan report saved, to view run: maldet --report 250719-0335.2720147