![]() Server : Apache System : Linux server2.corals.io 4.18.0-348.2.1.el8_5.x86_64 #1 SMP Mon Nov 15 09:17:08 EST 2021 x86_64 User : corals ( 1002) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory : /usr/local/maldetect.last/logs/ |
May 19 2025 03:20:54 server2 maldet(3294453): {sigup} performing signature update check... May 19 2025 03:20:54 server2 maldet(3294453): {sigup} local signature set is version 20250225482944 May 19 2025 03:21:25 server2 maldet(3294453): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 19 2025 03:21:25 server2 maldet(3294453): {sigup} new signature set 20250519762470 available May 19 2025 03:21:25 server2 maldet(3294453): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 19 2025 03:21:53 server2 maldet(3294453): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 19 2025 03:22:32 server2 maldet(3294453): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 19 2025 03:22:32 server2 maldet(3294453): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 19 2025 03:22:32 server2 maldet(3294453): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 19 2025 03:22:57 server2 maldet(3294453): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 19 2025 03:22:57 server2 maldet(3294453): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] May 19 2025 03:22:57 server2 maldet(3294453): {sigup} verified md5sum of maldet-clean.tgz May 19 2025 03:22:57 server2 maldet(3294453): {sigup} unpacked and installed maldet-clean.tgz May 19 2025 03:22:57 server2 maldet(3293411): {update} completed update v1.6.6 3a1792 => v1.6.6 359d25, running signature updates... May 19 2025 03:22:57 server2 maldet(3294809): {sigup} performing signature update check... May 19 2025 03:22:57 server2 maldet(3294809): {sigup} local signature set is version 20250225482944 May 19 2025 03:23:23 server2 maldet(3294809): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 19 2025 03:23:23 server2 maldet(3294809): {sigup} new signature set 20250519762470 available May 19 2025 03:23:23 server2 maldet(3294809): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 19 2025 03:23:45 server2 maldet(3294809): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 19 2025 03:24:28 server2 maldet(3294809): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 19 2025 03:24:28 server2 maldet(3294809): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 19 2025 03:25:11 server2 maldet(3294809): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 19 2025 03:26:51 server2 maldet(3294809): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 19 2025 03:26:51 server2 maldet(3294809): {sigup} verified md5sum of maldet-sigpack.tgz May 19 2025 03:26:52 server2 maldet(3294809): {sigup} unpacked and installed maldet-sigpack.tgz May 19 2025 03:26:52 server2 maldet(3294809): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact [email protected] May 19 2025 03:26:52 server2 maldet(3294809): {sigup} signature set update completed May 19 2025 03:26:52 server2 maldet(3294809): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 19 2025 03:26:52 server2 maldet(3293411): {update} update and config import completed May 19 2025 03:26:52 server2 maldet(3295578): {sigup} performing signature update check... May 19 2025 03:26:52 server2 maldet(3295578): {sigup} local signature set is version 20250519762470 May 19 2025 03:27:31 server2 maldet(3295578): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 19 2025 03:27:31 server2 maldet(3295578): {sigup} new signature set error code: 522 available May 19 2025 03:27:31 server2 maldet(3295578): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 19 2025 03:27:54 server2 maldet(3295578): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 19 2025 03:28:29 server2 maldet(3295578): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 19 2025 03:28:29 server2 maldet(3295578): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 19 2025 03:28:53 server2 maldet(3295578): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 19 2025 03:29:37 server2 maldet(3295578): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 19 2025 03:29:37 server2 maldet(3295578): {sigup} verified md5sum of maldet-sigpack.tgz May 19 2025 03:29:37 server2 maldet(3295578): {sigup} unpacked and installed maldet-sigpack.tgz May 19 2025 03:29:37 server2 maldet(3295578): {sigup} verified md5sum of maldet-clean.tgz May 19 2025 03:29:37 server2 maldet(3295578): {sigup} unpacked and installed maldet-clean.tgz May 19 2025 03:29:37 server2 maldet(3295578): {sigup} signature set update completed May 19 2025 03:29:37 server2 maldet(3295578): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 19 2025 03:29:37 server2 maldet(3296233): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 19 2025 03:29:38 server2 maldet(3296233): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 19 2025 03:29:38 server2 maldet(3296233): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 19 2025 03:29:38 server2 maldet(3296233): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 19 2025 03:29:38 server2 maldet(3296233): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 19 2025 03:30:18 server2 maldet(3296233): {scan} file list completed in 40s, found 12317 files... May 19 2025 03:30:18 server2 maldet(3296233): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 19 2025 03:30:18 server2 maldet(3296233): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (12317 files) in progress... May 19 2025 03:36:23 server2 maldet(3296233): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 12317, malware hits 0, cleaned hits 0, time 406s May 19 2025 03:36:23 server2 maldet(3296233): {scan} scan report saved, to view run: maldet --report 250519-0329.3296233 May 20 2025 03:51:21 server2 maldet(3474939): {update} checking for available updates... May 20 2025 03:51:21 server2 maldet(3474939): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 20 2025 03:51:22 server2 maldet(3474939): {update} hashing install files and checking against server... May 20 2025 03:51:22 server2 maldet(3474939): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 20 2025 03:51:22 server2 maldet(3474939): {update} latest version already installed. May 20 2025 03:51:22 server2 maldet(3475048): {sigup} performing signature update check... May 20 2025 03:51:22 server2 maldet(3475048): {sigup} local signature set is version 20250519762470 May 20 2025 03:51:22 server2 maldet(3475048): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 20 2025 03:51:22 server2 maldet(3475048): {sigup} latest signature set already installed May 20 2025 03:51:22 server2 maldet(3475137): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 20 2025 03:51:24 server2 maldet(3475137): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 20 2025 03:51:24 server2 maldet(3475137): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 20 2025 03:51:24 server2 maldet(3475137): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 20 2025 03:51:24 server2 maldet(3475137): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 20 2025 03:52:02 server2 maldet(3475137): {scan} file list completed in 38s, found 6406 files... May 20 2025 03:52:02 server2 maldet(3475137): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 20 2025 03:52:02 server2 maldet(3475137): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6406 files) in progress... May 20 2025 03:55:18 server2 maldet(3475137): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6406, malware hits 0, cleaned hits 0, time 236s May 20 2025 03:55:18 server2 maldet(3475137): {scan} scan report saved, to view run: maldet --report 250520-0351.3475137 May 21 2025 03:27:49 server2 maldet(3657486): {update} checking for available updates... May 21 2025 03:27:49 server2 maldet(3657486): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 21 2025 03:27:49 server2 maldet(3657486): {update} hashing install files and checking against server... May 21 2025 03:27:49 server2 maldet(3657486): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 21 2025 03:27:49 server2 maldet(3657486): {update} latest version already installed. May 21 2025 03:27:49 server2 maldet(3657595): {sigup} performing signature update check... May 21 2025 03:27:49 server2 maldet(3657595): {sigup} local signature set is version 20250519762470 May 21 2025 03:27:49 server2 maldet(3657595): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 21 2025 03:27:49 server2 maldet(3657595): {sigup} latest signature set already installed May 21 2025 03:27:49 server2 maldet(3657683): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 21 2025 03:27:51 server2 maldet(3657683): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 21 2025 03:27:51 server2 maldet(3657683): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 21 2025 03:27:51 server2 maldet(3657683): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 21 2025 03:27:51 server2 maldet(3657683): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 21 2025 03:28:15 server2 maldet(3657683): {scan} file list completed in 24s, found 1903 files... May 21 2025 03:28:15 server2 maldet(3657683): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 21 2025 03:28:15 server2 maldet(3657683): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1903 files) in progress... May 21 2025 03:30:08 server2 maldet(3657683): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1903, malware hits 0, cleaned hits 0, time 139s May 21 2025 03:30:08 server2 maldet(3657683): {scan} scan report saved, to view run: maldet --report 250521-0327.3657683 May 22 2025 03:32:54 server2 maldet(3850950): {update} checking for available updates... May 22 2025 03:33:34 server2 maldet(3850950): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 22 2025 03:33:34 server2 maldet(3850950): {update} hashing install files and checking against server... May 22 2025 03:34:12 server2 maldet(3850950): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 22 2025 03:34:12 server2 maldet(3850950): {update} latest version already installed. May 22 2025 03:34:12 server2 maldet(3851330): {sigup} performing signature update check... May 22 2025 03:34:12 server2 maldet(3851330): {sigup} local signature set is version 20250519762470 May 22 2025 03:34:39 server2 maldet(3851330): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 22 2025 03:34:39 server2 maldet(3851330): {sigup} new signature set 202505221736773 available May 22 2025 03:34:39 server2 maldet(3851330): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 22 2025 03:36:01 server2 maldet(3851330): {sigup} could not download https://cdn.rfxn.com/downloads/maldet-sigpack.tgz, please try again later. May 22 2025 03:36:26 server2 maldet(3851330): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 22 2025 03:36:26 server2 maldet(3851330): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 22 2025 03:36:54 server2 maldet(3851330): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 22 2025 03:37:42 server2 maldet(3851330): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 22 2025 03:37:42 server2 maldet(3851330): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] May 22 2025 03:37:42 server2 maldet(3851330): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact [email protected] May 22 2025 03:37:43 server2 maldet(3851789): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 22 2025 03:37:45 server2 maldet(3851789): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 22 2025 03:37:45 server2 maldet(3851789): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 22 2025 03:37:45 server2 maldet(3851789): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 22 2025 03:37:45 server2 maldet(3851789): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 22 2025 03:38:06 server2 maldet(3851789): {scan} file list completed in 21s, found 2206 files... May 22 2025 03:38:06 server2 maldet(3851789): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 22 2025 03:38:06 server2 maldet(3851789): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2206 files) in progress... May 22 2025 03:39:36 server2 maldet(3851789): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2206, malware hits 0, cleaned hits 0, time 113s May 22 2025 03:39:36 server2 maldet(3851789): {scan} scan report saved, to view run: maldet --report 250522-0337.3851789 May 23 2025 03:38:24 server2 maldet(4059959): {update} checking for available updates... May 23 2025 03:38:24 server2 maldet(4059959): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 23 2025 03:38:24 server2 maldet(4059959): {update} hashing install files and checking against server... May 23 2025 03:38:24 server2 maldet(4059959): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 23 2025 03:38:24 server2 maldet(4059959): {update} latest version already installed. May 23 2025 03:38:25 server2 maldet(4060069): {sigup} performing signature update check... May 23 2025 03:38:25 server2 maldet(4060069): {sigup} local signature set is version 20250519762470 May 23 2025 03:38:25 server2 maldet(4060069): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 23 2025 03:38:25 server2 maldet(4060069): {sigup} new signature set 202505221736773 available May 23 2025 03:38:25 server2 maldet(4060069): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 23 2025 03:38:25 server2 maldet(4060069): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 23 2025 03:38:25 server2 maldet(4060069): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 23 2025 03:38:25 server2 maldet(4060069): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 23 2025 03:38:25 server2 maldet(4060069): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 23 2025 03:38:25 server2 maldet(4060069): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 23 2025 03:38:25 server2 maldet(4060069): {sigup} verified md5sum of maldet-sigpack.tgz May 23 2025 03:38:25 server2 maldet(4060069): {sigup} unpacked and installed maldet-sigpack.tgz May 23 2025 03:38:25 server2 maldet(4060069): {sigup} verified md5sum of maldet-clean.tgz May 23 2025 03:38:25 server2 maldet(4060069): {sigup} unpacked and installed maldet-clean.tgz May 23 2025 03:38:25 server2 maldet(4060069): {sigup} signature set update completed May 23 2025 03:38:25 server2 maldet(4060069): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 23 2025 03:38:26 server2 maldet(4060273): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 23 2025 03:38:27 server2 maldet(4060273): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 23 2025 03:38:27 server2 maldet(4060273): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 23 2025 03:38:27 server2 maldet(4060273): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 23 2025 03:38:27 server2 maldet(4060273): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 23 2025 03:38:44 server2 maldet(4060273): {scan} file list completed in 17s, found 377 files... May 23 2025 03:38:44 server2 maldet(4060273): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 23 2025 03:38:44 server2 maldet(4060273): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (377 files) in progress... May 23 2025 03:39:04 server2 maldet(4060273): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 377, malware hits 0, cleaned hits 0, time 38s May 23 2025 03:39:04 server2 maldet(4060273): {scan} scan report saved, to view run: maldet --report 250523-0338.4060273 May 24 2025 03:36:45 server2 maldet(52831): {update} checking for available updates... May 24 2025 03:36:45 server2 maldet(52831): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 24 2025 03:36:45 server2 maldet(52831): {update} hashing install files and checking against server... May 24 2025 03:36:45 server2 maldet(52831): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 24 2025 03:36:45 server2 maldet(52831): {update} latest version already installed. May 24 2025 03:36:45 server2 maldet(52940): {sigup} performing signature update check... May 24 2025 03:36:45 server2 maldet(52940): {sigup} local signature set is version 202505221736773 May 24 2025 03:36:46 server2 maldet(52940): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 24 2025 03:36:46 server2 maldet(52940): {sigup} latest signature set already installed May 24 2025 03:36:46 server2 maldet(53028): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 24 2025 03:36:47 server2 maldet(53028): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 24 2025 03:36:47 server2 maldet(53028): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 24 2025 03:36:47 server2 maldet(53028): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 24 2025 03:36:47 server2 maldet(53028): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 24 2025 03:37:08 server2 maldet(53028): {scan} file list completed in 21s, found 451 files... May 24 2025 03:37:09 server2 maldet(53028): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 24 2025 03:37:09 server2 maldet(53028): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (451 files) in progress... May 24 2025 03:37:33 server2 maldet(53028): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 451, malware hits 0, cleaned hits 0, time 47s May 24 2025 03:37:33 server2 maldet(53028): {scan} scan report saved, to view run: maldet --report 250524-0336.53028 May 25 2025 03:52:33 server2 maldet(259668): {update} checking for available updates... May 25 2025 03:53:01 server2 maldet(259668): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 25 2025 03:53:01 server2 maldet(259668): {update} hashing install files and checking against server... May 25 2025 03:53:41 server2 maldet(259668): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 25 2025 03:53:41 server2 maldet(259668): {update} latest version already installed. May 25 2025 03:53:41 server2 maldet(259864): {sigup} performing signature update check... May 25 2025 03:53:41 server2 maldet(259864): {sigup} local signature set is version 202505221736773 May 25 2025 03:54:40 server2 maldet(259864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 25 2025 03:54:40 server2 maldet(259864): {sigup} new signature set 202505252708832 available May 25 2025 03:54:40 server2 maldet(259864): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 25 2025 03:55:21 server2 maldet(259864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 25 2025 03:56:02 server2 maldet(259864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 25 2025 03:56:02 server2 maldet(259864): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 25 2025 03:56:27 server2 maldet(259864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 25 2025 03:57:11 server2 maldet(259864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 25 2025 03:57:11 server2 maldet(259864): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] May 25 2025 03:57:11 server2 maldet(259864): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact [email protected] May 25 2025 03:57:11 server2 maldet(260518): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 25 2025 03:57:14 server2 maldet(260518): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 25 2025 03:57:14 server2 maldet(260518): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 25 2025 03:57:14 server2 maldet(260518): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 25 2025 03:57:14 server2 maldet(260518): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 25 2025 03:57:23 server2 maldet(260518): {scan} file list completed in 9s, found 484 files... May 25 2025 03:57:23 server2 maldet(260518): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 25 2025 03:57:23 server2 maldet(260518): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (484 files) in progress... May 25 2025 03:57:54 server2 maldet(260518): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 484, malware hits 0, cleaned hits 0, time 43s May 25 2025 03:57:54 server2 maldet(260518): {scan} scan report saved, to view run: maldet --report 250525-0357.260518 May 26 2025 03:39:35 server2 maldet(453695): {update} checking for available updates... May 26 2025 03:39:35 server2 maldet(453695): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 26 2025 03:39:35 server2 maldet(453695): {update} hashing install files and checking against server... May 26 2025 03:39:35 server2 maldet(453695): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 26 2025 03:39:35 server2 maldet(453695): {update} latest version already installed. May 26 2025 03:39:35 server2 maldet(453804): {sigup} performing signature update check... May 26 2025 03:39:35 server2 maldet(453804): {sigup} local signature set is version 202505221736773 May 26 2025 03:39:36 server2 maldet(453804): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 26 2025 03:39:36 server2 maldet(453804): {sigup} new signature set 202505252708832 available May 26 2025 03:39:36 server2 maldet(453804): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 26 2025 03:39:36 server2 maldet(453804): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 26 2025 03:39:36 server2 maldet(453804): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 26 2025 03:39:36 server2 maldet(453804): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 26 2025 03:39:36 server2 maldet(453804): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 26 2025 03:39:36 server2 maldet(453804): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 26 2025 03:39:36 server2 maldet(453804): {sigup} verified md5sum of maldet-sigpack.tgz May 26 2025 03:39:36 server2 maldet(453804): {sigup} unpacked and installed maldet-sigpack.tgz May 26 2025 03:39:37 server2 maldet(453804): {sigup} verified md5sum of maldet-clean.tgz May 26 2025 03:39:37 server2 maldet(453804): {sigup} unpacked and installed maldet-clean.tgz May 26 2025 03:39:37 server2 maldet(453804): {sigup} signature set update completed May 26 2025 03:39:37 server2 maldet(453804): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 26 2025 03:39:37 server2 maldet(454006): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 26 2025 03:39:38 server2 maldet(454006): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 26 2025 03:39:38 server2 maldet(454006): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 26 2025 03:39:38 server2 maldet(454006): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 26 2025 03:39:38 server2 maldet(454006): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 26 2025 03:40:02 server2 maldet(454006): {scan} file list completed in 24s, found 863 files... May 26 2025 03:40:02 server2 maldet(454006): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 26 2025 03:40:02 server2 maldet(454006): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (863 files) in progress... May 26 2025 03:40:51 server2 maldet(454006): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 863, malware hits 0, cleaned hits 0, time 74s May 26 2025 03:40:51 server2 maldet(454006): {scan} scan report saved, to view run: maldet --report 250526-0339.454006 May 27 2025 03:50:59 server2 maldet(653746): {update} checking for available updates... May 27 2025 03:51:00 server2 maldet(653746): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 27 2025 03:51:00 server2 maldet(653746): {update} hashing install files and checking against server... May 27 2025 03:51:00 server2 maldet(653746): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 27 2025 03:51:00 server2 maldet(653746): {update} latest version already installed. May 27 2025 03:51:00 server2 maldet(653855): {sigup} performing signature update check... May 27 2025 03:51:00 server2 maldet(653855): {sigup} local signature set is version 202505252708832 May 27 2025 03:51:00 server2 maldet(653855): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 27 2025 03:51:00 server2 maldet(653855): {sigup} latest signature set already installed May 27 2025 03:51:00 server2 maldet(653943): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 27 2025 03:51:01 server2 maldet(653943): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 27 2025 03:51:01 server2 maldet(653943): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 27 2025 03:51:01 server2 maldet(653943): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 27 2025 03:51:01 server2 maldet(653943): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 27 2025 03:51:17 server2 maldet(653943): {scan} file list completed in 16s, found 1051 files... May 27 2025 03:51:17 server2 maldet(653943): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 27 2025 03:51:17 server2 maldet(653943): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1051 files) in progress... May 27 2025 03:52:19 server2 maldet(653943): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1051, malware hits 0, cleaned hits 0, time 79s May 27 2025 03:52:19 server2 maldet(653943): {scan} scan report saved, to view run: maldet --report 250527-0351.653943 May 28 2025 03:35:10 server2 maldet(847357): {update} checking for available updates... May 28 2025 03:35:40 server2 maldet(847357): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 28 2025 03:35:40 server2 maldet(847357): {update} hashing install files and checking against server... May 28 2025 03:36:21 server2 maldet(847357): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 28 2025 03:36:21 server2 maldet(847357): {update} latest version already installed. May 28 2025 03:36:21 server2 maldet(847570): {sigup} performing signature update check... May 28 2025 03:36:21 server2 maldet(847570): {sigup} local signature set is version 202505252708832 May 28 2025 03:36:56 server2 maldet(847570): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 28 2025 03:36:56 server2 maldet(847570): {sigup} new signature set 202505283679777 available May 28 2025 03:36:56 server2 maldet(847570): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 28 2025 03:37:23 server2 maldet(847570): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 28 2025 03:37:51 server2 maldet(847570): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 28 2025 03:37:51 server2 maldet(847570): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 28 2025 03:37:51 server2 maldet(847570): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 28 2025 03:38:20 server2 maldet(847570): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 28 2025 03:38:20 server2 maldet(847570): {sigup} verified md5sum of maldet-sigpack.tgz May 28 2025 03:38:20 server2 maldet(847570): {sigup} unpacked and installed maldet-sigpack.tgz May 28 2025 03:38:20 server2 maldet(847570): {sigup} verified md5sum of maldet-clean.tgz May 28 2025 03:38:20 server2 maldet(847570): {sigup} unpacked and installed maldet-clean.tgz May 28 2025 03:38:20 server2 maldet(847570): {sigup} signature set update completed May 28 2025 03:38:20 server2 maldet(847570): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 28 2025 03:38:20 server2 maldet(848036): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 28 2025 03:38:22 server2 maldet(848036): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 28 2025 03:38:22 server2 maldet(848036): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 28 2025 03:38:22 server2 maldet(848036): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 28 2025 03:38:22 server2 maldet(848036): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 28 2025 03:38:33 server2 maldet(848036): {scan} file list completed in 11s, found 6817 files... May 28 2025 03:38:33 server2 maldet(848036): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 28 2025 03:38:33 server2 maldet(848036): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6817 files) in progress... May 28 2025 03:41:43 server2 maldet(848036): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6817, malware hits 0, cleaned hits 0, time 203s May 28 2025 03:41:43 server2 maldet(848036): {scan} scan report saved, to view run: maldet --report 250528-0338.848036 May 29 2025 03:16:03 server2 maldet(1040890): {update} checking for available updates... May 29 2025 03:16:32 server2 maldet(1040890): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 29 2025 03:16:32 server2 maldet(1040890): {update} hashing install files and checking against server... May 29 2025 03:17:14 server2 maldet(1040890): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 29 2025 03:17:14 server2 maldet(1040890): {update} latest version already installed. May 29 2025 03:17:14 server2 maldet(1041096): {sigup} performing signature update check... May 29 2025 03:17:14 server2 maldet(1041096): {sigup} local signature set is version 202505283679777 May 29 2025 03:17:44 server2 maldet(1041096): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 29 2025 03:17:44 server2 maldet(1041096): {sigup} latest signature set already installed May 29 2025 03:17:44 server2 maldet(1041209): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 29 2025 03:17:45 server2 maldet(1041209): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 29 2025 03:17:46 server2 maldet(1041209): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 29 2025 03:17:46 server2 maldet(1041209): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 29 2025 03:17:46 server2 maldet(1041209): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 29 2025 03:18:07 server2 maldet(1041209): {scan} file list completed in 21s, found 3954 files... May 29 2025 03:18:07 server2 maldet(1041209): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 29 2025 03:18:07 server2 maldet(1041209): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3954 files) in progress... May 29 2025 03:20:34 server2 maldet(1041209): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! May 29 2025 03:20:34 server2 maldet(1041209): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3954, malware hits 0, cleaned hits 0, time 170s May 29 2025 03:20:34 server2 maldet(1041209): {scan} scan report saved, to view run: maldet --report 250529-0317.1041209 May 30 2025 03:41:12 server2 maldet(1282367): {update} checking for available updates... May 30 2025 03:41:12 server2 maldet(1282367): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 30 2025 03:41:12 server2 maldet(1282367): {update} hashing install files and checking against server... May 30 2025 03:41:12 server2 maldet(1282367): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 30 2025 03:41:12 server2 maldet(1282367): {update} latest version already installed. May 30 2025 03:41:12 server2 maldet(1282476): {sigup} performing signature update check... May 30 2025 03:41:13 server2 maldet(1282476): {sigup} local signature set is version 202505283679777 May 30 2025 03:41:13 server2 maldet(1282476): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 30 2025 03:41:13 server2 maldet(1282476): {sigup} latest signature set already installed May 30 2025 03:41:13 server2 maldet(1282564): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 30 2025 03:41:13 server2 maldet(1282564): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 30 2025 03:41:13 server2 maldet(1282564): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 30 2025 03:41:13 server2 maldet(1282564): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 30 2025 03:41:13 server2 maldet(1282564): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 30 2025 03:41:29 server2 maldet(1282564): {scan} file list completed in 16s, found 1250 files... May 30 2025 03:41:29 server2 maldet(1282564): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 30 2025 03:41:29 server2 maldet(1282564): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1250 files) in progress... May 30 2025 03:42:40 server2 maldet(1282564): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1250, malware hits 0, cleaned hits 0, time 87s May 30 2025 03:42:40 server2 maldet(1282564): {scan} scan report saved, to view run: maldet --report 250530-0341.1282564 May 31 2025 03:21:09 server2 maldet(1481332): {update} checking for available updates... May 31 2025 03:21:39 server2 maldet(1481332): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 31 2025 03:21:39 server2 maldet(1481332): {update} hashing install files and checking against server... May 31 2025 03:22:39 server2 maldet(1481332): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 31 2025 03:22:39 server2 maldet(1481332): {update} version check shows latest but hash check failed, forcing update... May 31 2025 03:22:39 server2 maldet(1481332): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz May 31 2025 03:23:38 server2 maldet(1481332): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 May 31 2025 03:23:38 server2 maldet(1481332): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! May 31 2025 03:23:38 server2 maldet(1481641): {sigup} performing signature update check... May 31 2025 03:23:38 server2 maldet(1481641): {sigup} local signature set is version 202505283679777 May 31 2025 03:24:18 server2 maldet(1481641): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 31 2025 03:24:18 server2 maldet(1481641): {sigup} new signature set error code: 525 available May 31 2025 03:24:18 server2 maldet(1481641): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 31 2025 03:25:23 server2 maldet(1481641): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 31 2025 03:25:49 server2 maldet(1481641): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 31 2025 03:25:49 server2 maldet(1481641): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 31 2025 03:25:49 server2 maldet(1481641): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 31 2025 03:26:16 server2 maldet(1481641): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 31 2025 03:26:16 server2 maldet(1481641): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] May 31 2025 03:26:16 server2 maldet(1481641): {sigup} verified md5sum of maldet-clean.tgz May 31 2025 03:26:16 server2 maldet(1481641): {sigup} unpacked and installed maldet-clean.tgz May 31 2025 03:26:16 server2 maldet(1482221): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 31 2025 03:26:17 server2 maldet(1482221): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 31 2025 03:26:17 server2 maldet(1482221): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 31 2025 03:26:17 server2 maldet(1482221): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 31 2025 03:26:17 server2 maldet(1482221): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 31 2025 03:26:33 server2 maldet(1482221): {scan} file list completed in 16s, found 395 files... May 31 2025 03:26:33 server2 maldet(1482221): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 31 2025 03:26:33 server2 maldet(1482221): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (395 files) in progress... May 31 2025 03:26:53 server2 maldet(1482221): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 395, malware hits 0, cleaned hits 0, time 37s May 31 2025 03:26:53 server2 maldet(1482221): {scan} scan report saved, to view run: maldet --report 250531-0326.1482221 Jun 01 2025 03:58:31 server2 maldet(1681411): {update} checking for available updates... Jun 01 2025 03:58:31 server2 maldet(1681411): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 01 2025 03:58:31 server2 maldet(1681411): {update} hashing install files and checking against server... Jun 01 2025 03:58:31 server2 maldet(1681411): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 01 2025 03:58:31 server2 maldet(1681411): {update} latest version already installed. Jun 01 2025 03:58:32 server2 maldet(1681520): {sigup} performing signature update check... Jun 01 2025 03:58:32 server2 maldet(1681520): {sigup} local signature set is version 202505283679777 Jun 01 2025 03:58:51 server2 maldet(1681520): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 01 2025 03:58:51 server2 maldet(1681520): {sigup} new signature set 202506011196154 available Jun 01 2025 03:58:51 server2 maldet(1681520): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 01 2025 03:59:37 server2 maldet(1681520): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 01 2025 04:00:42 server2 maldet(1681520): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 01 2025 04:00:42 server2 maldet(1681520): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 01 2025 04:01:34 server2 maldet(1681520): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 01 2025 04:02:13 server2 maldet(1681520): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 01 2025 04:02:13 server2 maldet(1681520): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] Jun 01 2025 04:02:13 server2 maldet(1681520): {sigup} verified md5sum of maldet-clean.tgz Jun 01 2025 04:02:13 server2 maldet(1681520): {sigup} unpacked and installed maldet-clean.tgz Jun 01 2025 04:02:13 server2 maldet(1682096): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 01 2025 04:02:15 server2 maldet(1682096): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 01 2025 04:02:15 server2 maldet(1682096): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 01 2025 04:02:15 server2 maldet(1682096): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 01 2025 04:02:15 server2 maldet(1682096): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 01 2025 04:02:31 server2 maldet(1682096): {scan} file list completed in 16s, found 949 files... Jun 01 2025 04:02:31 server2 maldet(1682096): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 01 2025 04:02:31 server2 maldet(1682096): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (949 files) in progress... Jun 01 2025 04:03:28 server2 maldet(1682096): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 949, malware hits 0, cleaned hits 0, time 75s Jun 01 2025 04:03:28 server2 maldet(1682096): {scan} scan report saved, to view run: maldet --report 250601-0402.1682096 Jun 02 2025 03:55:29 server2 maldet(1869921): {update} checking for available updates... Jun 02 2025 03:55:29 server2 maldet(1869921): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 02 2025 03:55:29 server2 maldet(1869921): {update} hashing install files and checking against server... Jun 02 2025 03:55:29 server2 maldet(1869921): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 02 2025 03:55:29 server2 maldet(1869921): {update} latest version already installed. Jun 02 2025 03:55:29 server2 maldet(1870030): {sigup} performing signature update check... Jun 02 2025 03:55:29 server2 maldet(1870030): {sigup} local signature set is version 202505283679777 Jun 02 2025 03:55:30 server2 maldet(1870030): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 02 2025 03:55:30 server2 maldet(1870030): {sigup} new signature set 202506011196154 available Jun 02 2025 03:55:30 server2 maldet(1870030): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 02 2025 03:55:30 server2 maldet(1870030): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 02 2025 03:55:30 server2 maldet(1870030): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 02 2025 03:55:30 server2 maldet(1870030): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 02 2025 03:55:30 server2 maldet(1870030): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 02 2025 03:55:30 server2 maldet(1870030): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 02 2025 03:55:30 server2 maldet(1870030): {sigup} verified md5sum of maldet-sigpack.tgz Jun 02 2025 03:55:30 server2 maldet(1870030): {sigup} unpacked and installed maldet-sigpack.tgz Jun 02 2025 03:55:30 server2 maldet(1870030): {sigup} verified md5sum of maldet-clean.tgz Jun 02 2025 03:55:30 server2 maldet(1870030): {sigup} unpacked and installed maldet-clean.tgz Jun 02 2025 03:55:30 server2 maldet(1870030): {sigup} signature set update completed Jun 02 2025 03:55:30 server2 maldet(1870030): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 02 2025 03:55:31 server2 maldet(1870233): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 02 2025 03:55:32 server2 maldet(1870233): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 02 2025 03:55:32 server2 maldet(1870233): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 02 2025 03:55:32 server2 maldet(1870233): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 02 2025 03:55:32 server2 maldet(1870233): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 02 2025 03:55:50 server2 maldet(1870233): {scan} file list completed in 18s, found 2048 files... Jun 02 2025 03:55:50 server2 maldet(1870233): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 02 2025 03:55:50 server2 maldet(1870233): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2048 files) in progress... Jun 02 2025 03:56:58 server2 maldet(1870233): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2048, malware hits 0, cleaned hits 0, time 87s Jun 02 2025 03:56:58 server2 maldet(1870233): {scan} scan report saved, to view run: maldet --report 250602-0355.1870233 Jun 03 2025 03:49:22 server2 maldet(2064783): {update} checking for available updates... Jun 03 2025 03:49:22 server2 maldet(2064783): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 03 2025 03:49:22 server2 maldet(2064783): {update} hashing install files and checking against server... Jun 03 2025 03:49:22 server2 maldet(2064783): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 03 2025 03:49:22 server2 maldet(2064783): {update} latest version already installed. Jun 03 2025 03:49:22 server2 maldet(2064892): {sigup} performing signature update check... Jun 03 2025 03:49:22 server2 maldet(2064892): {sigup} local signature set is version 202506011196154 Jun 03 2025 03:49:22 server2 maldet(2064892): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 03 2025 03:49:23 server2 maldet(2064892): {sigup} latest signature set already installed Jun 03 2025 03:49:23 server2 maldet(2064980): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 03 2025 03:49:23 server2 maldet(2064980): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 03 2025 03:49:23 server2 maldet(2064980): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 03 2025 03:49:23 server2 maldet(2064980): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 03 2025 03:49:23 server2 maldet(2064980): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 03 2025 03:49:51 server2 maldet(2064980): {scan} file list completed in 28s, found 1137 files... Jun 03 2025 03:49:51 server2 maldet(2064980): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 03 2025 03:49:51 server2 maldet(2064980): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1137 files) in progress... Jun 03 2025 03:51:01 server2 maldet(2064980): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1137, malware hits 0, cleaned hits 0, time 97s Jun 03 2025 03:51:01 server2 maldet(2064980): {scan} scan report saved, to view run: maldet --report 250603-0349.2064980 Jun 04 2025 03:18:17 server2 maldet(2308128): {update} checking for available updates... Jun 04 2025 03:19:23 server2 maldet(2308128): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 04 2025 03:19:23 server2 maldet(2308128): {update} hashing install files and checking against server... Jun 04 2025 03:20:13 server2 maldet(2308128): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 04 2025 03:20:13 server2 maldet(2308128): {update} latest version already installed. Jun 04 2025 03:20:13 server2 maldet(2308493): {sigup} performing signature update check... Jun 04 2025 03:20:13 server2 maldet(2308493): {sigup} local signature set is version 202506011196154 Jun 04 2025 03:21:05 server2 maldet(2308493): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 04 2025 03:21:05 server2 maldet(2308493): {sigup} new signature set 202506042164456 available Jun 04 2025 03:21:05 server2 maldet(2308493): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 04 2025 03:21:42 server2 maldet(2308493): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 04 2025 03:22:21 server2 maldet(2308493): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 04 2025 03:22:21 server2 maldet(2308493): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 04 2025 03:23:09 server2 maldet(2308493): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 04 2025 03:23:55 server2 maldet(2308493): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 04 2025 03:23:55 server2 maldet(2308493): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] Jun 04 2025 03:23:55 server2 maldet(2308493): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact [email protected] Jun 04 2025 03:23:55 server2 maldet(2309073): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 04 2025 03:23:57 server2 maldet(2309073): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 04 2025 03:23:57 server2 maldet(2309073): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 04 2025 03:23:57 server2 maldet(2309073): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 04 2025 03:23:57 server2 maldet(2309073): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 04 2025 03:24:18 server2 maldet(2309073): {scan} file list completed in 21s, found 2283 files... Jun 04 2025 03:24:18 server2 maldet(2309073): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 04 2025 03:24:18 server2 maldet(2309073): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2283 files) in progress... Jun 04 2025 03:26:52 server2 maldet(2309073): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2283, malware hits 0, cleaned hits 0, time 177s Jun 04 2025 03:26:52 server2 maldet(2309073): {scan} scan report saved, to view run: maldet --report 250604-0323.2309073 Jun 05 2025 03:47:06 server2 maldet(2509608): {update} checking for available updates... Jun 05 2025 03:47:06 server2 maldet(2509608): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 05 2025 03:47:06 server2 maldet(2509608): {update} hashing install files and checking against server... Jun 05 2025 03:47:06 server2 maldet(2509608): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 05 2025 03:47:06 server2 maldet(2509608): {update} latest version already installed. Jun 05 2025 03:47:06 server2 maldet(2509732): {sigup} performing signature update check... Jun 05 2025 03:47:06 server2 maldet(2509732): {sigup} local signature set is version 202506011196154 Jun 05 2025 03:47:06 server2 maldet(2509732): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 05 2025 03:47:06 server2 maldet(2509732): {sigup} new signature set 202506042164456 available Jun 05 2025 03:47:06 server2 maldet(2509732): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 05 2025 03:47:07 server2 maldet(2509732): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 05 2025 03:47:07 server2 maldet(2509732): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 05 2025 03:47:07 server2 maldet(2509732): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 05 2025 03:47:07 server2 maldet(2509732): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 05 2025 03:47:07 server2 maldet(2509732): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 05 2025 03:47:07 server2 maldet(2509732): {sigup} verified md5sum of maldet-sigpack.tgz Jun 05 2025 03:47:07 server2 maldet(2509732): {sigup} unpacked and installed maldet-sigpack.tgz Jun 05 2025 03:47:07 server2 maldet(2509732): {sigup} verified md5sum of maldet-clean.tgz Jun 05 2025 03:47:07 server2 maldet(2509732): {sigup} unpacked and installed maldet-clean.tgz Jun 05 2025 03:47:07 server2 maldet(2509732): {sigup} signature set update completed Jun 05 2025 03:47:07 server2 maldet(2509732): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 05 2025 03:47:07 server2 maldet(2509984): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 05 2025 03:47:08 server2 maldet(2509984): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 05 2025 03:47:08 server2 maldet(2509984): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 05 2025 03:47:08 server2 maldet(2509984): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 05 2025 03:47:09 server2 maldet(2509984): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 05 2025 03:47:37 server2 maldet(2509984): {scan} file list completed in 29s, found 1215 files... Jun 05 2025 03:47:37 server2 maldet(2509984): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 05 2025 03:47:37 server2 maldet(2509984): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1215 files) in progress... Jun 05 2025 03:48:54 server2 maldet(2509984): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1215, malware hits 0, cleaned hits 0, time 107s Jun 05 2025 03:48:54 server2 maldet(2509984): {scan} scan report saved, to view run: maldet --report 250605-0347.2509984 Jun 06 2025 03:36:09 server2 maldet(2725717): {update} checking for available updates... Jun 06 2025 03:36:09 server2 maldet(2725717): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 06 2025 03:36:09 server2 maldet(2725717): {update} hashing install files and checking against server... Jun 06 2025 03:36:09 server2 maldet(2725717): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 06 2025 03:36:09 server2 maldet(2725717): {update} latest version already installed. Jun 06 2025 03:36:10 server2 maldet(2725826): {sigup} performing signature update check... Jun 06 2025 03:36:10 server2 maldet(2725826): {sigup} local signature set is version 202506042164456 Jun 06 2025 03:36:10 server2 maldet(2725826): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 06 2025 03:36:10 server2 maldet(2725826): {sigup} latest signature set already installed Jun 06 2025 03:36:10 server2 maldet(2725914): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 06 2025 03:36:11 server2 maldet(2725914): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 06 2025 03:36:11 server2 maldet(2725914): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 06 2025 03:36:11 server2 maldet(2725914): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 06 2025 03:36:11 server2 maldet(2725914): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 06 2025 03:36:29 server2 maldet(2725914): {scan} file list completed in 18s, found 1141 files... Jun 06 2025 03:36:29 server2 maldet(2725914): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 06 2025 03:36:29 server2 maldet(2725914): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1141 files) in progress... Jun 06 2025 03:37:46 server2 maldet(2725914): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1141, malware hits 0, cleaned hits 0, time 96s Jun 06 2025 03:37:46 server2 maldet(2725914): {scan} scan report saved, to view run: maldet --report 250606-0336.2725914 Jun 07 2025 03:19:09 server2 maldet(2936782): {update} checking for available updates... Jun 07 2025 03:19:48 server2 maldet(2936782): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 07 2025 03:19:48 server2 maldet(2936782): {update} hashing install files and checking against server... Jun 07 2025 03:20:25 server2 maldet(2936782): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 07 2025 03:20:25 server2 maldet(2936782): {update} latest version already installed. Jun 07 2025 03:20:25 server2 maldet(2937093): {sigup} performing signature update check... Jun 07 2025 03:20:25 server2 maldet(2937093): {sigup} local signature set is version 202506042164456 Jun 07 2025 03:21:05 server2 maldet(2937093): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 07 2025 03:21:05 server2 maldet(2937093): {sigup} new signature set error code: 525 available Jun 07 2025 03:21:05 server2 maldet(2937093): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 07 2025 03:21:31 server2 maldet(2937093): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 07 2025 03:22:00 server2 maldet(2937093): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 07 2025 03:22:00 server2 maldet(2937093): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 07 2025 03:22:00 server2 maldet(2937093): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 07 2025 03:22:58 server2 maldet(2937093): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 07 2025 03:22:58 server2 maldet(2937093): {sigup} verified md5sum of maldet-sigpack.tgz Jun 07 2025 03:22:58 server2 maldet(2937093): {sigup} unpacked and installed maldet-sigpack.tgz Jun 07 2025 03:22:59 server2 maldet(2937093): {sigup} verified md5sum of maldet-clean.tgz Jun 07 2025 03:22:59 server2 maldet(2937093): {sigup} unpacked and installed maldet-clean.tgz Jun 07 2025 03:22:59 server2 maldet(2937093): {sigup} signature set update completed Jun 07 2025 03:22:59 server2 maldet(2937093): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 07 2025 03:22:59 server2 maldet(2937500): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 07 2025 03:23:00 server2 maldet(2937500): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 07 2025 03:23:00 server2 maldet(2937500): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 07 2025 03:23:00 server2 maldet(2937500): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 07 2025 03:23:00 server2 maldet(2937500): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 07 2025 03:23:27 server2 maldet(2937500): {scan} file list completed in 27s, found 1350 files... Jun 07 2025 03:23:27 server2 maldet(2937500): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 07 2025 03:23:27 server2 maldet(2937500): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1350 files) in progress... Jun 07 2025 03:24:52 server2 maldet(2937500): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1350, malware hits 0, cleaned hits 0, time 113s Jun 07 2025 03:24:52 server2 maldet(2937500): {scan} scan report saved, to view run: maldet --report 250607-0322.2937500 Jun 08 2025 03:18:40 server2 maldet(3134646): {update} checking for available updates... Jun 08 2025 03:19:21 server2 maldet(3134646): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 08 2025 03:19:21 server2 maldet(3134646): {update} hashing install files and checking against server... Jun 08 2025 03:19:52 server2 maldet(3134646): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 08 2025 03:19:52 server2 maldet(3134646): {update} latest version already installed. Jun 08 2025 03:19:52 server2 maldet(3134852): {sigup} performing signature update check... Jun 08 2025 03:19:52 server2 maldet(3134852): {sigup} local signature set is version 20250607589111 Jun 08 2025 03:20:58 server2 maldet(3134852): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 08 2025 03:20:58 server2 maldet(3134852): {sigup} new signature set error code: 525 available Jun 08 2025 03:20:58 server2 maldet(3134852): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 08 2025 03:21:35 server2 maldet(3134852): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 08 2025 03:22:08 server2 maldet(3134852): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 08 2025 03:22:08 server2 maldet(3134852): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 08 2025 03:22:47 server2 maldet(3134852): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 08 2025 03:23:14 server2 maldet(3134852): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 08 2025 03:23:14 server2 maldet(3134852): {sigup} verified md5sum of maldet-sigpack.tgz Jun 08 2025 03:23:14 server2 maldet(3134852): {sigup} unpacked and installed maldet-sigpack.tgz Jun 08 2025 03:23:15 server2 maldet(3134852): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact [email protected] Jun 08 2025 03:23:15 server2 maldet(3134852): {sigup} signature set update completed Jun 08 2025 03:23:15 server2 maldet(3134852): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 08 2025 03:23:15 server2 maldet(3135416): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 08 2025 03:23:17 server2 maldet(3135416): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 08 2025 03:23:17 server2 maldet(3135416): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 08 2025 03:23:17 server2 maldet(3135416): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 08 2025 03:23:17 server2 maldet(3135416): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 08 2025 03:23:57 server2 maldet(3135416): {scan} file list completed in 40s, found 825 files... Jun 08 2025 03:23:57 server2 maldet(3135416): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 08 2025 03:23:57 server2 maldet(3135416): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (825 files) in progress... Jun 08 2025 03:26:12 server2 maldet(3135416): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 825, malware hits 0, cleaned hits 0, time 177s Jun 08 2025 03:26:12 server2 maldet(3135416): {scan} scan report saved, to view run: maldet --report 250608-0323.3135416 Jun 09 2025 03:46:31 server2 maldet(3337266): {update} checking for available updates... Jun 09 2025 03:46:31 server2 maldet(3337266): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 09 2025 03:46:31 server2 maldet(3337266): {update} hashing install files and checking against server... Jun 09 2025 03:46:31 server2 maldet(3337266): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 09 2025 03:46:31 server2 maldet(3337266): {update} latest version already installed. Jun 09 2025 03:46:31 server2 maldet(3337376): {sigup} performing signature update check... Jun 09 2025 03:46:31 server2 maldet(3337376): {sigup} local signature set is version 20250607589111 Jun 09 2025 03:46:31 server2 maldet(3337376): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 09 2025 03:46:31 server2 maldet(3337376): {sigup} latest signature set already installed Jun 09 2025 03:46:31 server2 maldet(3337464): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 09 2025 03:46:32 server2 maldet(3337464): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 09 2025 03:46:32 server2 maldet(3337464): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 09 2025 03:46:32 server2 maldet(3337464): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 09 2025 03:46:33 server2 maldet(3337464): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 09 2025 03:47:04 server2 maldet(3337464): {scan} file list completed in 32s, found 614 files... Jun 09 2025 03:47:04 server2 maldet(3337464): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 09 2025 03:47:04 server2 maldet(3337464): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (614 files) in progress... Jun 09 2025 03:47:41 server2 maldet(3337464): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 614, malware hits 0, cleaned hits 0, time 70s Jun 09 2025 03:47:41 server2 maldet(3337464): {scan} scan report saved, to view run: maldet --report 250609-0346.3337464 Jun 10 2025 03:39:17 server2 maldet(3530698): {update} checking for available updates... Jun 10 2025 03:39:17 server2 maldet(3530698): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 10 2025 03:39:17 server2 maldet(3530698): {update} hashing install files and checking against server... Jun 10 2025 03:39:17 server2 maldet(3530698): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 10 2025 03:39:17 server2 maldet(3530698): {update} latest version already installed. Jun 10 2025 03:39:17 server2 maldet(3530807): {sigup} performing signature update check... Jun 10 2025 03:39:17 server2 maldet(3530807): {sigup} local signature set is version 20250607589111 Jun 10 2025 03:39:17 server2 maldet(3530807): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 10 2025 03:39:17 server2 maldet(3530807): {sigup} latest signature set already installed Jun 10 2025 03:39:17 server2 maldet(3530895): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 10 2025 03:39:19 server2 maldet(3530895): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 10 2025 03:39:19 server2 maldet(3530895): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 10 2025 03:39:19 server2 maldet(3530895): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 10 2025 03:39:19 server2 maldet(3530895): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 10 2025 03:39:44 server2 maldet(3530895): {scan} file list completed in 25s, found 1228 files... Jun 10 2025 03:39:44 server2 maldet(3530895): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 10 2025 03:39:44 server2 maldet(3530895): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1228 files) in progress... Jun 10 2025 03:40:57 server2 maldet(3530895): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1228, malware hits 0, cleaned hits 0, time 100s Jun 10 2025 03:40:57 server2 maldet(3530895): {scan} scan report saved, to view run: maldet --report 250610-0339.3530895 Jun 11 2025 03:53:49 server2 maldet(3736039): {update} checking for available updates... Jun 11 2025 03:53:49 server2 maldet(3736039): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 11 2025 03:53:50 server2 maldet(3736039): {update} hashing install files and checking against server... Jun 11 2025 03:53:50 server2 maldet(3736039): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 11 2025 03:53:50 server2 maldet(3736039): {update} latest version already installed. Jun 11 2025 03:53:50 server2 maldet(3736150): {sigup} performing signature update check... Jun 11 2025 03:53:50 server2 maldet(3736150): {sigup} local signature set is version 20250607589111 Jun 11 2025 03:53:50 server2 maldet(3736150): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 11 2025 03:53:50 server2 maldet(3736150): {sigup} new signature set 20250610484586 available Jun 11 2025 03:53:50 server2 maldet(3736150): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 11 2025 03:53:50 server2 maldet(3736150): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 11 2025 03:53:50 server2 maldet(3736150): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 11 2025 03:53:50 server2 maldet(3736150): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 11 2025 03:53:51 server2 maldet(3736150): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 11 2025 03:53:51 server2 maldet(3736150): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 11 2025 03:53:51 server2 maldet(3736150): {sigup} verified md5sum of maldet-sigpack.tgz Jun 11 2025 03:53:51 server2 maldet(3736150): {sigup} unpacked and installed maldet-sigpack.tgz Jun 11 2025 03:53:51 server2 maldet(3736150): {sigup} verified md5sum of maldet-clean.tgz Jun 11 2025 03:53:51 server2 maldet(3736150): {sigup} unpacked and installed maldet-clean.tgz Jun 11 2025 03:53:51 server2 maldet(3736150): {sigup} signature set update completed Jun 11 2025 03:53:51 server2 maldet(3736150): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 11 2025 03:53:51 server2 maldet(3736354): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 11 2025 03:53:56 server2 maldet(3736354): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 11 2025 03:53:56 server2 maldet(3736354): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 11 2025 03:53:56 server2 maldet(3736354): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 11 2025 03:53:56 server2 maldet(3736354): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 11 2025 03:54:48 server2 maldet(3736354): {scan} file list completed in 52s, found 1076 files... Jun 11 2025 03:54:48 server2 maldet(3736354): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 11 2025 03:54:48 server2 maldet(3736354): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1076 files) in progress... Jun 11 2025 03:58:19 server2 maldet(3736354): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1076, malware hits 0, cleaned hits 0, time 268s Jun 11 2025 03:58:19 server2 maldet(3736354): {scan} scan report saved, to view run: maldet --report 250611-0353.3736354 Jun 12 2025 03:41:05 server2 maldet(4001892): {update} checking for available updates... Jun 12 2025 03:41:05 server2 maldet(4001892): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 12 2025 03:41:05 server2 maldet(4001892): {update} hashing install files and checking against server... Jun 12 2025 03:41:05 server2 maldet(4001892): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 12 2025 03:41:05 server2 maldet(4001892): {update} latest version already installed. Jun 12 2025 03:41:05 server2 maldet(4002001): {sigup} performing signature update check... Jun 12 2025 03:41:05 server2 maldet(4002001): {sigup} local signature set is version 20250610484586 Jun 12 2025 03:41:05 server2 maldet(4002001): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 12 2025 03:41:05 server2 maldet(4002001): {sigup} latest signature set already installed Jun 12 2025 03:41:06 server2 maldet(4002089): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 12 2025 03:41:08 server2 maldet(4002089): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 12 2025 03:41:08 server2 maldet(4002089): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 12 2025 03:41:08 server2 maldet(4002089): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 12 2025 03:41:08 server2 maldet(4002089): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 12 2025 03:41:33 server2 maldet(4002089): {scan} file list completed in 25s, found 489 files... Jun 12 2025 03:41:33 server2 maldet(4002089): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 12 2025 03:41:33 server2 maldet(4002089): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (489 files) in progress... Jun 12 2025 03:42:04 server2 maldet(4002089): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 489, malware hits 0, cleaned hits 0, time 58s Jun 12 2025 03:42:04 server2 maldet(4002089): {scan} scan report saved, to view run: maldet --report 250612-0341.4002089 Jun 13 2025 03:17:29 server2 maldet(22807): {update} checking for available updates... Jun 13 2025 03:17:30 server2 maldet(22807): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 13 2025 03:17:30 server2 maldet(22807): {update} hashing install files and checking against server... Jun 13 2025 03:18:00 server2 maldet(22807): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 13 2025 03:18:00 server2 maldet(22807): {update} latest version already installed. Jun 13 2025 03:18:00 server2 maldet(22947): {sigup} performing signature update check... Jun 13 2025 03:18:00 server2 maldet(22947): {sigup} local signature set is version 20250610484586 Jun 13 2025 03:18:39 server2 maldet(22947): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 13 2025 03:18:39 server2 maldet(22947): {sigup} new signature set error code: 522 available Jun 13 2025 03:18:39 server2 maldet(22947): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 13 2025 03:19:24 server2 maldet(22947): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 13 2025 03:19:58 server2 maldet(22947): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 13 2025 03:19:58 server2 maldet(22947): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 13 2025 03:20:58 server2 maldet(22947): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 13 2025 03:21:53 server2 maldet(22947): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 13 2025 03:21:53 server2 maldet(22947): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] Jun 13 2025 03:21:53 server2 maldet(22947): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact [email protected] Jun 13 2025 03:21:54 server2 maldet(23640): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 13 2025 03:21:56 server2 maldet(23640): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 13 2025 03:21:56 server2 maldet(23640): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 13 2025 03:21:56 server2 maldet(23640): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 13 2025 03:21:56 server2 maldet(23640): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 13 2025 03:22:27 server2 maldet(23640): {scan} file list completed in 31s, found 1655 files... Jun 13 2025 03:22:27 server2 maldet(23640): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 13 2025 03:22:27 server2 maldet(23640): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1655 files) in progress... Jun 13 2025 03:24:12 server2 maldet(23640): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1655, malware hits 0, cleaned hits 0, time 138s Jun 13 2025 03:24:12 server2 maldet(23640): {scan} scan report saved, to view run: maldet --report 250613-0321.23640 Jun 14 2025 03:47:29 server2 maldet(246255): {update} checking for available updates... Jun 14 2025 03:47:29 server2 maldet(246255): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 14 2025 03:47:29 server2 maldet(246255): {update} hashing install files and checking against server... Jun 14 2025 03:47:29 server2 maldet(246255): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 14 2025 03:47:29 server2 maldet(246255): {update} latest version already installed. Jun 14 2025 03:47:29 server2 maldet(246364): {sigup} performing signature update check... Jun 14 2025 03:47:29 server2 maldet(246364): {sigup} local signature set is version 20250610484586 Jun 14 2025 03:47:29 server2 maldet(246364): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 14 2025 03:47:29 server2 maldet(246364): {sigup} new signature set 20250613705251 available Jun 14 2025 03:47:29 server2 maldet(246364): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 14 2025 03:47:30 server2 maldet(246364): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 14 2025 03:47:30 server2 maldet(246364): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 14 2025 03:47:30 server2 maldet(246364): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 14 2025 03:47:30 server2 maldet(246364): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 14 2025 03:47:30 server2 maldet(246364): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 14 2025 03:47:30 server2 maldet(246364): {sigup} verified md5sum of maldet-sigpack.tgz Jun 14 2025 03:47:30 server2 maldet(246364): {sigup} unpacked and installed maldet-sigpack.tgz Jun 14 2025 03:47:30 server2 maldet(246364): {sigup} verified md5sum of maldet-clean.tgz Jun 14 2025 03:47:30 server2 maldet(246364): {sigup} unpacked and installed maldet-clean.tgz Jun 14 2025 03:47:30 server2 maldet(246364): {sigup} signature set update completed Jun 14 2025 03:47:30 server2 maldet(246364): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 14 2025 03:47:30 server2 maldet(246566): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 14 2025 03:47:32 server2 maldet(246566): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 14 2025 03:47:32 server2 maldet(246566): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 14 2025 03:47:32 server2 maldet(246566): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 14 2025 03:47:32 server2 maldet(246566): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 14 2025 03:48:02 server2 maldet(246566): {scan} file list completed in 30s, found 864 files... Jun 14 2025 03:48:02 server2 maldet(246566): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 14 2025 03:48:02 server2 maldet(246566): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (864 files) in progress... Jun 14 2025 03:48:51 server2 maldet(246566): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 864, malware hits 0, cleaned hits 0, time 81s Jun 14 2025 03:48:51 server2 maldet(246566): {scan} scan report saved, to view run: maldet --report 250614-0347.246566 Jun 15 2025 03:13:26 server2 maldet(443331): {update} checking for available updates... Jun 15 2025 03:14:01 server2 maldet(443331): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 15 2025 03:14:01 server2 maldet(443331): {update} hashing install files and checking against server... Jun 15 2025 03:14:32 server2 maldet(443331): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 15 2025 03:14:32 server2 maldet(443331): {update} latest version already installed. Jun 15 2025 03:14:32 server2 maldet(443519): {sigup} performing signature update check... Jun 15 2025 03:14:32 server2 maldet(443519): {sigup} local signature set is version 20250613705251 Jun 15 2025 03:14:57 server2 maldet(443519): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 15 2025 03:14:57 server2 maldet(443519): {sigup} latest signature set already installed Jun 15 2025 03:14:57 server2 maldet(443621): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 15 2025 03:15:00 server2 maldet(443621): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 15 2025 03:15:00 server2 maldet(443621): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 15 2025 03:15:00 server2 maldet(443621): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 15 2025 03:15:00 server2 maldet(443621): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 15 2025 03:15:37 server2 maldet(443621): {scan} file list completed in 37s, found 567 files... Jun 15 2025 03:15:37 server2 maldet(443621): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 15 2025 03:15:37 server2 maldet(443621): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (567 files) in progress... Jun 15 2025 03:16:09 server2 maldet(443621): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 567, malware hits 0, cleaned hits 0, time 72s Jun 15 2025 03:16:09 server2 maldet(443621): {scan} scan report saved, to view run: maldet --report 250615-0314.443621 Jun 16 2025 03:59:59 server2 maldet(670602): {update} checking for available updates... Jun 16 2025 04:00:46 server2 maldet(670602): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 16 2025 04:00:46 server2 maldet(670602): {update} hashing install files and checking against server... Jun 16 2025 04:01:30 server2 maldet(670602): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 16 2025 04:01:31 server2 maldet(670602): {update} version check shows latest but hash check failed, forcing update... Jun 16 2025 04:01:31 server2 maldet(670602): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Jun 16 2025 04:02:07 server2 maldet(670602): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Jun 16 2025 04:02:07 server2 maldet(670602): {update} verified md5sum of maldetect-current.tar.gz Jun 16 2025 04:02:07 server2 maldet(670602): {update} completed update v1.6.6 3a1792 => verror code: 525 359d25, running signature updates... Jun 16 2025 04:02:07 server2 maldet(671170): {sigup} performing signature update check... Jun 16 2025 04:02:07 server2 maldet(671170): {sigup} local signature set is version 20250613705251 Jun 16 2025 04:03:32 server2 maldet(671170): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 16 2025 04:03:32 server2 maldet(671170): {sigup} new signature set 20250616812462 available Jun 16 2025 04:03:32 server2 maldet(671170): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 16 2025 04:04:12 server2 maldet(671170): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 16 2025 04:04:46 server2 maldet(671170): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 16 2025 04:04:46 server2 maldet(671170): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 16 2025 04:05:37 server2 maldet(671170): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 16 2025 04:06:09 server2 maldet(671170): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 16 2025 04:06:09 server2 maldet(671170): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] Jun 16 2025 04:06:09 server2 maldet(671170): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact [email protected] Jun 16 2025 04:06:09 server2 maldet(670602): {update} update and config import completed Jun 16 2025 04:06:09 server2 maldet(671870): {sigup} performing signature update check... Jun 16 2025 04:06:09 server2 maldet(671870): {sigup} local signature set is version 20250613705251 Jun 16 2025 04:06:54 server2 maldet(671870): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 16 2025 04:06:54 server2 maldet(671870): {sigup} new signature set error code: 525 available Jun 16 2025 04:06:54 server2 maldet(671870): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 16 2025 04:07:43 server2 maldet(671870): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 16 2025 04:08:42 server2 maldet(671870): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 16 2025 04:08:42 server2 maldet(671870): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 16 2025 04:09:18 server2 maldet(671870): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 16 2025 04:09:44 server2 maldet(671870): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 16 2025 04:09:44 server2 maldet(671870): {sigup} verified md5sum of maldet-sigpack.tgz Jun 16 2025 04:09:44 server2 maldet(671870): {sigup} unpacked and installed maldet-sigpack.tgz Jun 16 2025 04:09:44 server2 maldet(671870): {sigup} verified md5sum of maldet-clean.tgz Jun 16 2025 04:09:44 server2 maldet(671870): {sigup} unpacked and installed maldet-clean.tgz Jun 16 2025 04:09:44 server2 maldet(671870): {sigup} signature set update completed Jun 16 2025 04:09:44 server2 maldet(671870): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 16 2025 04:09:44 server2 maldet(672726): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 16 2025 04:09:46 server2 maldet(672726): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 16 2025 04:09:46 server2 maldet(672726): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 16 2025 04:09:46 server2 maldet(672726): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 16 2025 04:09:46 server2 maldet(672726): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 16 2025 04:10:36 server2 maldet(672726): {scan} file list completed in 50s, found 838 files... Jun 16 2025 04:10:36 server2 maldet(672726): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 16 2025 04:10:36 server2 maldet(672726): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (838 files) in progress... Jun 16 2025 04:12:06 server2 maldet(672726): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 838, malware hits 0, cleaned hits 0, time 142s Jun 16 2025 04:12:06 server2 maldet(672726): {scan} scan report saved, to view run: maldet --report 250616-0409.672726 Jun 17 2025 03:12:01 server2 maldet(862109): {update} checking for available updates... Jun 17 2025 03:12:35 server2 maldet(862109): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 17 2025 03:12:35 server2 maldet(862109): {update} hashing install files and checking against server... Jun 17 2025 03:13:04 server2 maldet(862109): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 17 2025 03:13:04 server2 maldet(862109): {update} latest version already installed. Jun 17 2025 03:13:04 server2 maldet(862331): {sigup} performing signature update check... Jun 17 2025 03:13:04 server2 maldet(862331): {sigup} local signature set is version 20250616812462 Jun 17 2025 03:13:36 server2 maldet(862331): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 17 2025 03:13:36 server2 maldet(862331): {sigup} latest signature set already installed Jun 17 2025 03:13:36 server2 maldet(862440): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 17 2025 03:13:38 server2 maldet(862440): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 17 2025 03:13:38 server2 maldet(862440): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 17 2025 03:13:38 server2 maldet(862440): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 17 2025 03:13:38 server2 maldet(862440): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 17 2025 03:14:33 server2 maldet(862440): {scan} file list completed in 55s, found 853 files... Jun 17 2025 03:14:33 server2 maldet(862440): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 17 2025 03:14:33 server2 maldet(862440): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (853 files) in progress... Jun 17 2025 03:15:50 server2 maldet(862440): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 853, malware hits 0, cleaned hits 0, time 134s Jun 17 2025 03:15:50 server2 maldet(862440): {scan} scan report saved, to view run: maldet --report 250617-0313.862440 Jun 18 2025 03:49:41 server2 maldet(1063088): {update} checking for available updates... Jun 18 2025 03:49:42 server2 maldet(1063088): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 18 2025 03:49:42 server2 maldet(1063088): {update} hashing install files and checking against server... Jun 18 2025 03:49:42 server2 maldet(1063088): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 18 2025 03:49:42 server2 maldet(1063088): {update} latest version already installed. Jun 18 2025 03:49:42 server2 maldet(1063197): {sigup} performing signature update check... Jun 18 2025 03:49:42 server2 maldet(1063197): {sigup} local signature set is version 20250616812462 Jun 18 2025 03:49:42 server2 maldet(1063197): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 18 2025 03:49:42 server2 maldet(1063197): {sigup} latest signature set already installed Jun 18 2025 03:49:42 server2 maldet(1063285): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 18 2025 03:49:47 server2 maldet(1063285): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 18 2025 03:49:47 server2 maldet(1063285): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 18 2025 03:49:47 server2 maldet(1063285): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 18 2025 03:49:47 server2 maldet(1063285): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 18 2025 03:50:41 server2 maldet(1063285): {scan} file list completed in 54s, found 726 files... Jun 18 2025 03:50:41 server2 maldet(1063285): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 18 2025 03:50:41 server2 maldet(1063285): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (726 files) in progress... Jun 18 2025 03:51:29 server2 maldet(1063285): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 726, malware hits 0, cleaned hits 0, time 107s Jun 18 2025 03:51:29 server2 maldet(1063285): {scan} scan report saved, to view run: maldet --report 250618-0349.1063285 Jun 19 2025 03:28:22 server2 maldet(1242333): {update} checking for available updates... Jun 19 2025 03:28:22 server2 maldet(1242333): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 19 2025 03:28:22 server2 maldet(1242333): {update} hashing install files and checking against server... Jun 19 2025 03:29:16 server2 maldet(1242333): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 19 2025 03:29:16 server2 maldet(1242333): {update} latest version already installed. Jun 19 2025 03:29:16 server2 maldet(1242545): {sigup} performing signature update check... Jun 19 2025 03:29:16 server2 maldet(1242545): {sigup} local signature set is version 20250616812462 Jun 19 2025 03:29:50 server2 maldet(1242545): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 19 2025 03:29:50 server2 maldet(1242545): {sigup} new signature set 202506191777955 available Jun 19 2025 03:29:50 server2 maldet(1242545): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 19 2025 03:30:21 server2 maldet(1242545): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 19 2025 03:31:05 server2 maldet(1242545): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 19 2025 03:31:05 server2 maldet(1242545): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 19 2025 03:31:55 server2 maldet(1242545): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 19 2025 03:31:55 server2 maldet(1242545): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 19 2025 03:31:55 server2 maldet(1242545): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] Jun 19 2025 03:31:55 server2 maldet(1242545): {sigup} verified md5sum of maldet-clean.tgz Jun 19 2025 03:31:55 server2 maldet(1242545): {sigup} unpacked and installed maldet-clean.tgz Jun 19 2025 03:31:55 server2 maldet(1243075): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 19 2025 03:31:58 server2 maldet(1243075): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 19 2025 03:31:58 server2 maldet(1243075): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 19 2025 03:31:58 server2 maldet(1243075): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 19 2025 03:31:58 server2 maldet(1243075): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 19 2025 03:32:42 server2 maldet(1243075): {scan} file list completed in 44s, found 604 files... Jun 19 2025 03:32:42 server2 maldet(1243075): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 19 2025 03:32:43 server2 maldet(1243075): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (604 files) in progress... Jun 19 2025 03:33:22 server2 maldet(1243075): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 604, malware hits 0, cleaned hits 0, time 87s Jun 19 2025 03:33:22 server2 maldet(1243075): {scan} scan report saved, to view run: maldet --report 250619-0331.1243075 Jun 20 2025 03:50:21 server2 maldet(1458466): {update} checking for available updates... Jun 20 2025 03:50:21 server2 maldet(1458466): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 20 2025 03:50:21 server2 maldet(1458466): {update} hashing install files and checking against server... Jun 20 2025 03:50:21 server2 maldet(1458466): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 20 2025 03:50:21 server2 maldet(1458466): {update} latest version already installed. Jun 20 2025 03:50:22 server2 maldet(1458575): {sigup} performing signature update check... Jun 20 2025 03:50:22 server2 maldet(1458575): {sigup} local signature set is version 20250616812462 Jun 20 2025 03:50:22 server2 maldet(1458575): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 20 2025 03:50:22 server2 maldet(1458575): {sigup} new signature set 202506191777955 available Jun 20 2025 03:50:22 server2 maldet(1458575): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 20 2025 03:50:22 server2 maldet(1458575): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 20 2025 03:50:22 server2 maldet(1458575): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 20 2025 03:50:22 server2 maldet(1458575): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 20 2025 03:50:22 server2 maldet(1458575): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 20 2025 03:50:23 server2 maldet(1458575): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 20 2025 03:50:23 server2 maldet(1458575): {sigup} verified md5sum of maldet-sigpack.tgz Jun 20 2025 03:50:23 server2 maldet(1458575): {sigup} unpacked and installed maldet-sigpack.tgz Jun 20 2025 03:50:23 server2 maldet(1458575): {sigup} verified md5sum of maldet-clean.tgz Jun 20 2025 03:50:23 server2 maldet(1458575): {sigup} unpacked and installed maldet-clean.tgz Jun 20 2025 03:50:23 server2 maldet(1458575): {sigup} signature set update completed Jun 20 2025 03:50:23 server2 maldet(1458575): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 20 2025 03:50:23 server2 maldet(1458777): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 20 2025 03:50:25 server2 maldet(1458777): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 20 2025 03:50:25 server2 maldet(1458777): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 20 2025 03:50:25 server2 maldet(1458777): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 20 2025 03:50:25 server2 maldet(1458777): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 20 2025 03:51:06 server2 maldet(1458777): {scan} file list completed in 41s, found 1479 files... Jun 20 2025 03:51:06 server2 maldet(1458777): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 20 2025 03:51:06 server2 maldet(1458777): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1479 files) in progress... Jun 20 2025 03:52:44 server2 maldet(1458777): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1479, malware hits 0, cleaned hits 0, time 141s Jun 20 2025 03:52:44 server2 maldet(1458777): {scan} scan report saved, to view run: maldet --report 250620-0350.1458777 Jun 21 2025 03:14:17 server2 maldet(1649429): {update} checking for available updates... Jun 21 2025 03:14:17 server2 maldet(1649429): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 21 2025 03:14:17 server2 maldet(1649429): {update} hashing install files and checking against server... Jun 21 2025 03:14:18 server2 maldet(1649429): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 21 2025 03:14:18 server2 maldet(1649429): {update} latest version already installed. Jun 21 2025 03:14:18 server2 maldet(1649538): {sigup} performing signature update check... Jun 21 2025 03:14:18 server2 maldet(1649538): {sigup} local signature set is version 202506191777955 Jun 21 2025 03:14:45 server2 maldet(1649538): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 21 2025 03:14:45 server2 maldet(1649538): {sigup} latest signature set already installed Jun 21 2025 03:14:45 server2 maldet(1649659): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 21 2025 03:14:46 server2 maldet(1649659): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 21 2025 03:14:46 server2 maldet(1649659): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 21 2025 03:14:46 server2 maldet(1649659): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 21 2025 03:14:46 server2 maldet(1649659): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 21 2025 03:15:20 server2 maldet(1649659): {scan} file list completed in 34s, found 1326 files... Jun 21 2025 03:15:20 server2 maldet(1649659): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 21 2025 03:15:20 server2 maldet(1649659): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1326 files) in progress... Jun 21 2025 03:16:49 server2 maldet(1649659): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1326, malware hits 0, cleaned hits 0, time 124s Jun 21 2025 03:16:49 server2 maldet(1649659): {scan} scan report saved, to view run: maldet --report 250621-0314.1649659 Jun 22 2025 03:49:00 server2 maldet(1864361): {update} checking for available updates... Jun 22 2025 03:49:33 server2 maldet(1864361): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 22 2025 03:49:33 server2 maldet(1864361): {update} hashing install files and checking against server... Jun 22 2025 03:49:33 server2 maldet(1864361): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 22 2025 03:49:33 server2 maldet(1864361): {update} latest version already installed. Jun 22 2025 03:49:34 server2 maldet(1864639): {sigup} performing signature update check... Jun 22 2025 03:49:34 server2 maldet(1864639): {sigup} local signature set is version 202506191777955 Jun 22 2025 03:50:01 server2 maldet(1864639): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 22 2025 03:50:01 server2 maldet(1864639): {sigup} new signature set 202506222744524 available Jun 22 2025 03:50:01 server2 maldet(1864639): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 22 2025 03:50:51 server2 maldet(1864639): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 22 2025 03:51:56 server2 maldet(1864639): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 22 2025 03:51:56 server2 maldet(1864639): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 22 2025 03:52:40 server2 maldet(1864639): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 22 2025 03:53:06 server2 maldet(1864639): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 22 2025 03:53:06 server2 maldet(1864639): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] Jun 22 2025 03:53:06 server2 maldet(1864639): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact [email protected] Jun 22 2025 03:53:06 server2 maldet(1865130): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 22 2025 03:53:08 server2 maldet(1865130): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 22 2025 03:53:08 server2 maldet(1865130): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 22 2025 03:53:08 server2 maldet(1865130): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 22 2025 03:53:08 server2 maldet(1865130): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 22 2025 03:53:43 server2 maldet(1865130): {scan} file list completed in 35s, found 1435 files... Jun 22 2025 03:53:43 server2 maldet(1865130): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 22 2025 03:53:43 server2 maldet(1865130): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1435 files) in progress... Jun 22 2025 03:55:01 server2 maldet(1865130): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1435, malware hits 0, cleaned hits 0, time 115s Jun 22 2025 03:55:01 server2 maldet(1865130): {scan} scan report saved, to view run: maldet --report 250622-0353.1865130 Jun 23 2025 03:36:05 server2 maldet(2046089): {update} checking for available updates... Jun 23 2025 03:36:21 server2 maldet(2046089): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 23 2025 03:36:21 server2 maldet(2046089): {update} hashing install files and checking against server... Jun 23 2025 03:36:36 server2 maldet(2046089): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 23 2025 03:36:36 server2 maldet(2046089): {update} latest version already installed. Jun 23 2025 03:36:36 server2 maldet(2046236): {sigup} performing signature update check... Jun 23 2025 03:36:36 server2 maldet(2046236): {sigup} local signature set is version 202506191777955 Jun 23 2025 03:36:48 server2 maldet(2046236): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 23 2025 03:36:48 server2 maldet(2046236): {sigup} new signature set 202506222744524 available Jun 23 2025 03:36:48 server2 maldet(2046236): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 23 2025 03:37:01 server2 maldet(2046236): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 23 2025 03:37:11 server2 maldet(2046236): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 23 2025 03:37:11 server2 maldet(2046236): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 23 2025 03:37:21 server2 maldet(2046236): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 23 2025 03:37:30 server2 maldet(2046236): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 23 2025 03:37:30 server2 maldet(2046236): {sigup} verified md5sum of maldet-sigpack.tgz Jun 23 2025 03:37:30 server2 maldet(2046236): {sigup} unpacked and installed maldet-sigpack.tgz Jun 23 2025 03:37:30 server2 maldet(2046236): {sigup} verified md5sum of maldet-clean.tgz Jun 23 2025 03:37:30 server2 maldet(2046236): {sigup} unpacked and installed maldet-clean.tgz Jun 23 2025 03:37:30 server2 maldet(2046236): {sigup} signature set update completed Jun 23 2025 03:37:30 server2 maldet(2046236): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 23 2025 03:37:31 server2 maldet(2046555): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 23 2025 03:37:31 server2 maldet(2046555): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 23 2025 03:37:31 server2 maldet(2046555): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 23 2025 03:37:31 server2 maldet(2046555): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 23 2025 03:37:31 server2 maldet(2046555): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 23 2025 03:38:09 server2 maldet(2046555): {scan} file list completed in 38s, found 1148 files... Jun 23 2025 03:38:09 server2 maldet(2046555): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 23 2025 03:38:09 server2 maldet(2046555): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1148 files) in progress... Jun 23 2025 03:39:35 server2 maldet(2046555): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1148, malware hits 0, cleaned hits 0, time 124s Jun 23 2025 03:39:35 server2 maldet(2046555): {scan} scan report saved, to view run: maldet --report 250623-0337.2046555 Jun 24 2025 03:34:33 server2 maldet(2241540): {update} checking for available updates... Jun 24 2025 03:34:33 server2 maldet(2241540): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 24 2025 03:34:33 server2 maldet(2241540): {update} hashing install files and checking against server... Jun 24 2025 03:34:34 server2 maldet(2241540): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 24 2025 03:34:34 server2 maldet(2241540): {update} latest version already installed. Jun 24 2025 03:34:34 server2 maldet(2241649): {sigup} performing signature update check... Jun 24 2025 03:34:34 server2 maldet(2241649): {sigup} local signature set is version 202506222744524 Jun 24 2025 03:34:34 server2 maldet(2241649): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 24 2025 03:34:34 server2 maldet(2241649): {sigup} latest signature set already installed Jun 24 2025 03:34:34 server2 maldet(2241737): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 24 2025 03:34:35 server2 maldet(2241737): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 24 2025 03:34:35 server2 maldet(2241737): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 24 2025 03:34:35 server2 maldet(2241737): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 24 2025 03:34:35 server2 maldet(2241737): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 24 2025 03:35:12 server2 maldet(2241737): {scan} file list completed in 37s, found 1729 files... Jun 24 2025 03:35:12 server2 maldet(2241737): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 24 2025 03:35:12 server2 maldet(2241737): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1729 files) in progress... Jun 24 2025 03:36:38 server2 maldet(2241737): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1729, malware hits 0, cleaned hits 0, time 124s Jun 24 2025 03:36:38 server2 maldet(2241737): {scan} scan report saved, to view run: maldet --report 250624-0334.2241737 Jun 25 2025 03:20:12 server2 maldet(2458413): {update} checking for available updates... Jun 25 2025 03:21:27 server2 maldet(2458413): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 25 2025 03:21:27 server2 maldet(2458413): {update} hashing install files and checking against server... Jun 25 2025 03:22:12 server2 maldet(2458413): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 25 2025 03:22:12 server2 maldet(2458413): {update} version check shows latest but hash check failed, forcing update... Jun 25 2025 03:22:13 server2 maldet(2458413): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Jun 25 2025 03:23:07 server2 maldet(2458413): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Jun 25 2025 03:23:07 server2 maldet(2458413): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Jun 25 2025 03:23:07 server2 maldet(2458881): {sigup} performing signature update check... Jun 25 2025 03:23:07 server2 maldet(2458881): {sigup} local signature set is version 202506222744524 Jun 25 2025 03:23:48 server2 maldet(2458881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 25 2025 03:23:48 server2 maldet(2458881): {sigup} new signature set 202506253712170 available Jun 25 2025 03:23:49 server2 maldet(2458881): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 25 2025 03:24:36 server2 maldet(2458881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 25 2025 03:25:17 server2 maldet(2458881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 25 2025 03:25:17 server2 maldet(2458881): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 25 2025 03:25:18 server2 maldet(2458881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 25 2025 03:25:45 server2 maldet(2458881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 25 2025 03:25:45 server2 maldet(2458881): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] Jun 25 2025 03:25:45 server2 maldet(2458881): {sigup} verified md5sum of maldet-clean.tgz Jun 25 2025 03:25:45 server2 maldet(2458881): {sigup} unpacked and installed maldet-clean.tgz Jun 25 2025 03:25:45 server2 maldet(2459487): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 25 2025 03:25:48 server2 maldet(2459487): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 25 2025 03:25:48 server2 maldet(2459487): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 25 2025 03:25:48 server2 maldet(2459487): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 25 2025 03:25:48 server2 maldet(2459487): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 25 2025 03:26:15 server2 maldet(2459487): {scan} file list completed in 27s, found 443 files... Jun 25 2025 03:26:15 server2 maldet(2459487): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 25 2025 03:26:15 server2 maldet(2459487): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (443 files) in progress... Jun 25 2025 03:26:44 server2 maldet(2459487): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 443, malware hits 0, cleaned hits 0, time 59s Jun 25 2025 03:26:44 server2 maldet(2459487): {scan} scan report saved, to view run: maldet --report 250625-0325.2459487 Jun 26 2025 03:25:41 server2 maldet(2680532): {update} checking for available updates... Jun 26 2025 03:26:25 server2 maldet(2680532): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 26 2025 03:26:25 server2 maldet(2680532): {update} hashing install files and checking against server... Jun 26 2025 03:26:52 server2 maldet(2680532): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 26 2025 03:26:52 server2 maldet(2680532): {update} latest version already installed. Jun 26 2025 03:26:52 server2 maldet(2680773): {sigup} performing signature update check... Jun 26 2025 03:26:52 server2 maldet(2680773): {sigup} local signature set is version 202506222744524 Jun 26 2025 03:27:21 server2 maldet(2680773): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 26 2025 03:27:22 server2 maldet(2680773): {sigup} new signature set 202506253712170 available Jun 26 2025 03:27:22 server2 maldet(2680773): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 26 2025 03:28:09 server2 maldet(2680773): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 26 2025 03:28:34 server2 maldet(2680773): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 26 2025 03:28:34 server2 maldet(2680773): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 26 2025 03:29:06 server2 maldet(2680773): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 26 2025 03:29:31 server2 maldet(2680773): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 26 2025 03:29:31 server2 maldet(2680773): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] Jun 26 2025 03:29:31 server2 maldet(2680773): {sigup} verified md5sum of maldet-clean.tgz Jun 26 2025 03:29:31 server2 maldet(2680773): {sigup} unpacked and installed maldet-clean.tgz Jun 26 2025 03:29:31 server2 maldet(2681424): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 26 2025 03:29:33 server2 maldet(2681424): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 26 2025 03:29:33 server2 maldet(2681424): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 26 2025 03:29:33 server2 maldet(2681424): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 26 2025 03:29:33 server2 maldet(2681424): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 26 2025 03:29:56 server2 maldet(2681424): {scan} file list completed in 23s, found 496 files... Jun 26 2025 03:29:56 server2 maldet(2681424): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 26 2025 03:29:56 server2 maldet(2681424): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (496 files) in progress... Jun 26 2025 03:30:23 server2 maldet(2681424): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 496, malware hits 0, cleaned hits 0, time 52s Jun 26 2025 03:30:23 server2 maldet(2681424): {scan} scan report saved, to view run: maldet --report 250626-0329.2681424 Jun 27 2025 03:45:53 server2 maldet(2969381): {update} checking for available updates... Jun 27 2025 03:45:53 server2 maldet(2969381): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 27 2025 03:45:53 server2 maldet(2969381): {update} hashing install files and checking against server... Jun 27 2025 03:45:53 server2 maldet(2969381): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 27 2025 03:45:53 server2 maldet(2969381): {update} latest version already installed. Jun 27 2025 03:45:53 server2 maldet(2969490): {sigup} performing signature update check... Jun 27 2025 03:45:53 server2 maldet(2969490): {sigup} local signature set is version 202506222744524 Jun 27 2025 03:45:53 server2 maldet(2969490): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 27 2025 03:45:53 server2 maldet(2969490): {sigup} new signature set 202506253712170 available Jun 27 2025 03:45:53 server2 maldet(2969490): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 27 2025 03:45:53 server2 maldet(2969490): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 27 2025 03:45:54 server2 maldet(2969490): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 27 2025 03:45:54 server2 maldet(2969490): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 27 2025 03:45:54 server2 maldet(2969490): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 27 2025 03:45:54 server2 maldet(2969490): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 27 2025 03:45:54 server2 maldet(2969490): {sigup} verified md5sum of maldet-sigpack.tgz Jun 27 2025 03:45:54 server2 maldet(2969490): {sigup} unpacked and installed maldet-sigpack.tgz Jun 27 2025 03:45:54 server2 maldet(2969490): {sigup} verified md5sum of maldet-clean.tgz Jun 27 2025 03:45:54 server2 maldet(2969490): {sigup} unpacked and installed maldet-clean.tgz Jun 27 2025 03:45:54 server2 maldet(2969490): {sigup} signature set update completed Jun 27 2025 03:45:54 server2 maldet(2969490): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 27 2025 03:45:54 server2 maldet(2969694): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 27 2025 03:45:56 server2 maldet(2969694): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 27 2025 03:45:56 server2 maldet(2969694): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 27 2025 03:45:56 server2 maldet(2969694): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 27 2025 03:45:56 server2 maldet(2969694): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 27 2025 03:46:16 server2 maldet(2969694): {scan} file list completed in 20s, found 591 files... Jun 27 2025 03:46:16 server2 maldet(2969694): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 27 2025 03:46:16 server2 maldet(2969694): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (591 files) in progress... Jun 27 2025 03:46:44 server2 maldet(2969694): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 591, malware hits 0, cleaned hits 0, time 50s Jun 27 2025 03:46:44 server2 maldet(2969694): {scan} scan report saved, to view run: maldet --report 250627-0345.2969694 Jun 28 2025 03:27:08 server2 maldet(3187627): {update} checking for available updates... Jun 28 2025 03:27:09 server2 maldet(3187627): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 28 2025 03:27:09 server2 maldet(3187627): {update} hashing install files and checking against server... Jun 28 2025 03:27:09 server2 maldet(3187627): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 28 2025 03:27:09 server2 maldet(3187627): {update} latest version already installed. Jun 28 2025 03:27:09 server2 maldet(3187736): {sigup} performing signature update check... Jun 28 2025 03:27:09 server2 maldet(3187736): {sigup} local signature set is version 202506253712170 Jun 28 2025 03:27:09 server2 maldet(3187736): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 28 2025 03:27:09 server2 maldet(3187736): {sigup} latest signature set already installed Jun 28 2025 03:27:09 server2 maldet(3187824): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 28 2025 03:27:10 server2 maldet(3187824): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 28 2025 03:27:10 server2 maldet(3187824): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 28 2025 03:27:10 server2 maldet(3187824): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 28 2025 03:27:10 server2 maldet(3187824): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 28 2025 03:27:34 server2 maldet(3187824): {scan} file list completed in 24s, found 2008 files... Jun 28 2025 03:27:34 server2 maldet(3187824): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 28 2025 03:27:34 server2 maldet(3187824): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2008 files) in progress... Jun 28 2025 03:29:01 server2 maldet(3187824): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2008, malware hits 0, cleaned hits 0, time 112s Jun 28 2025 03:29:01 server2 maldet(3187824): {scan} scan report saved, to view run: maldet --report 250628-0327.3187824 Jun 29 2025 03:11:57 server2 maldet(3398908): {update} checking for available updates... Jun 29 2025 03:12:26 server2 maldet(3398908): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 29 2025 03:12:26 server2 maldet(3398908): {update} hashing install files and checking against server... Jun 29 2025 03:13:10 server2 maldet(3398908): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 29 2025 03:13:10 server2 maldet(3398908): {update} latest version already installed. Jun 29 2025 03:13:10 server2 maldet(3399312): {sigup} performing signature update check... Jun 29 2025 03:13:10 server2 maldet(3399312): {sigup} local signature set is version 202506253712170 Jun 29 2025 03:13:33 server2 maldet(3399312): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 29 2025 03:13:33 server2 maldet(3399312): {sigup} latest signature set already installed Jun 29 2025 03:13:33 server2 maldet(3399419): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 29 2025 03:13:35 server2 maldet(3399419): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 29 2025 03:13:35 server2 maldet(3399419): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 29 2025 03:13:35 server2 maldet(3399419): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 29 2025 03:13:35 server2 maldet(3399419): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 29 2025 03:13:54 server2 maldet(3399419): {scan} file list completed in 19s, found 671 files... Jun 29 2025 03:13:54 server2 maldet(3399419): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 29 2025 03:13:54 server2 maldet(3399419): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (671 files) in progress... Jun 29 2025 03:14:35 server2 maldet(3399419): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 671, malware hits 0, cleaned hits 0, time 62s Jun 29 2025 03:14:35 server2 maldet(3399419): {scan} scan report saved, to view run: maldet --report 250629-0313.3399419 Jun 30 2025 03:41:27 server2 maldet(3603693): {update} checking for available updates... Jun 30 2025 03:41:27 server2 maldet(3603693): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 30 2025 03:41:27 server2 maldet(3603693): {update} hashing install files and checking against server... Jun 30 2025 03:41:27 server2 maldet(3603693): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 30 2025 03:41:27 server2 maldet(3603693): {update} latest version already installed. Jun 30 2025 03:41:27 server2 maldet(3603802): {sigup} performing signature update check... Jun 30 2025 03:41:27 server2 maldet(3603802): {sigup} local signature set is version 202506253712170 Jun 30 2025 03:41:28 server2 maldet(3603802): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 30 2025 03:41:28 server2 maldet(3603802): {sigup} latest signature set already installed Jun 30 2025 03:41:28 server2 maldet(3603890): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 30 2025 03:41:29 server2 maldet(3603890): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 30 2025 03:41:29 server2 maldet(3603890): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 30 2025 03:41:29 server2 maldet(3603890): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 30 2025 03:41:29 server2 maldet(3603890): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 30 2025 03:41:44 server2 maldet(3603890): {scan} file list completed in 15s, found 761 files... Jun 30 2025 03:41:44 server2 maldet(3603890): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 30 2025 03:41:44 server2 maldet(3603890): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (761 files) in progress... Jun 30 2025 03:42:25 server2 maldet(3603890): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 761, malware hits 0, cleaned hits 0, time 57s Jun 30 2025 03:42:25 server2 maldet(3603890): {scan} scan report saved, to view run: maldet --report 250630-0341.3603890 Jul 01 2025 03:16:43 server2 maldet(3804900): {update} checking for available updates... Jul 01 2025 03:17:31 server2 maldet(3804900): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 01 2025 03:17:31 server2 maldet(3804900): {update} hashing install files and checking against server... Jul 01 2025 03:17:32 server2 maldet(3804900): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 01 2025 03:17:32 server2 maldet(3804900): {update} latest version already installed. Jul 01 2025 03:17:32 server2 maldet(3805084): {sigup} performing signature update check... Jul 01 2025 03:17:32 server2 maldet(3805084): {sigup} local signature set is version 202506253712170 Jul 01 2025 03:18:05 server2 maldet(3805084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 01 2025 03:18:05 server2 maldet(3805084): {sigup} new signature set 20250701819448 available Jul 01 2025 03:18:05 server2 maldet(3805084): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 01 2025 03:18:34 server2 maldet(3805084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 01 2025 03:19:13 server2 maldet(3805084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 01 2025 03:19:13 server2 maldet(3805084): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 01 2025 03:19:57 server2 maldet(3805084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 01 2025 03:19:57 server2 maldet(3805084): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 01 2025 03:19:57 server2 maldet(3805084): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] Jul 01 2025 03:19:57 server2 maldet(3805084): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact [email protected] Jul 01 2025 03:19:57 server2 maldet(3805569): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 01 2025 03:19:59 server2 maldet(3805569): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 01 2025 03:19:59 server2 maldet(3805569): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 01 2025 03:19:59 server2 maldet(3805569): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 01 2025 03:19:59 server2 maldet(3805569): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 01 2025 03:20:23 server2 maldet(3805569): {scan} file list completed in 24s, found 862 files... Jul 01 2025 03:20:23 server2 maldet(3805569): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 01 2025 03:20:23 server2 maldet(3805569): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (862 files) in progress... Jul 01 2025 03:21:13 server2 maldet(3805569): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 862, malware hits 0, cleaned hits 0, time 75s Jul 01 2025 03:21:13 server2 maldet(3805569): {scan} scan report saved, to view run: maldet --report 250701-0319.3805569 Jul 02 2025 03:21:44 server2 maldet(3995178): {update} checking for available updates... Jul 02 2025 03:22:24 server2 maldet(3995178): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 02 2025 03:22:25 server2 maldet(3995178): {update} hashing install files and checking against server... Jul 02 2025 03:23:05 server2 maldet(3995178): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 02 2025 03:23:05 server2 maldet(3995178): {update} version check shows latest but hash check failed, forcing update... Jul 02 2025 03:23:05 server2 maldet(3995178): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Jul 02 2025 03:23:33 server2 maldet(3995178): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Jul 02 2025 03:23:33 server2 maldet(3995178): {update} verified md5sum of maldetect-current.tar.gz Jul 02 2025 03:23:33 server2 maldet(3995178): {update} completed update v1.6.6 3a1792 => verror code: 525 359d25, running signature updates... Jul 02 2025 03:23:33 server2 maldet(3995590): {sigup} performing signature update check... Jul 02 2025 03:23:33 server2 maldet(3995590): {sigup} local signature set is version 202506253712170 Jul 02 2025 03:24:08 server2 maldet(3995590): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 02 2025 03:24:08 server2 maldet(3995590): {sigup} new signature set 20250701819448 available Jul 02 2025 03:24:08 server2 maldet(3995590): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 02 2025 03:24:28 server2 maldet(3995590): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 02 2025 03:24:47 server2 maldet(3995590): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 02 2025 03:24:47 server2 maldet(3995590): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 02 2025 03:25:34 server2 maldet(3995590): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 02 2025 03:26:07 server2 maldet(3995590): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 02 2025 03:26:07 server2 maldet(3995590): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] Jul 02 2025 03:26:07 server2 maldet(3995590): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact [email protected] Jul 02 2025 03:26:07 server2 maldet(3995178): {update} update and config import completed Jul 02 2025 03:26:07 server2 maldet(3995992): {sigup} performing signature update check... Jul 02 2025 03:26:07 server2 maldet(3995992): {sigup} local signature set is version 202506253712170 Jul 02 2025 03:26:33 server2 maldet(3995992): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 02 2025 03:26:33 server2 maldet(3995992): {sigup} new signature set 20250701819448 available Jul 02 2025 03:26:33 server2 maldet(3995992): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 02 2025 03:27:27 server2 maldet(3995992): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 02 2025 03:28:18 server2 maldet(3995992): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 02 2025 03:28:18 server2 maldet(3995992): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 02 2025 03:28:18 server2 maldet(3995992): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 02 2025 03:28:52 server2 maldet(3995992): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 02 2025 03:28:52 server2 maldet(3995992): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] Jul 02 2025 03:28:52 server2 maldet(3995992): {sigup} verified md5sum of maldet-clean.tgz Jul 02 2025 03:28:52 server2 maldet(3995992): {sigup} unpacked and installed maldet-clean.tgz Jul 02 2025 03:28:53 server2 maldet(3996483): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 02 2025 03:28:55 server2 maldet(3996483): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 02 2025 03:28:55 server2 maldet(3996483): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 02 2025 03:28:55 server2 maldet(3996483): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 02 2025 03:28:55 server2 maldet(3996483): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 02 2025 03:29:21 server2 maldet(3996483): {scan} file list completed in 26s, found 528 files... Jul 02 2025 03:29:22 server2 maldet(3996483): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 02 2025 03:29:22 server2 maldet(3996483): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (528 files) in progress... Jul 02 2025 03:29:54 server2 maldet(3996483): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 528, malware hits 0, cleaned hits 0, time 61s Jul 02 2025 03:29:54 server2 maldet(3996483): {scan} scan report saved, to view run: maldet --report 250702-0328.3996483 Jul 03 2025 03:33:45 server2 maldet(4190264): {update} checking for available updates... Jul 03 2025 03:33:46 server2 maldet(4190264): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 03 2025 03:33:46 server2 maldet(4190264): {update} hashing install files and checking against server... Jul 03 2025 03:33:46 server2 maldet(4190264): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 03 2025 03:33:46 server2 maldet(4190264): {update} latest version already installed. Jul 03 2025 03:33:46 server2 maldet(4190373): {sigup} performing signature update check... Jul 03 2025 03:33:46 server2 maldet(4190373): {sigup} local signature set is version 202506253712170 Jul 03 2025 03:33:46 server2 maldet(4190373): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 03 2025 03:33:46 server2 maldet(4190373): {sigup} new signature set 20250701819448 available Jul 03 2025 03:33:46 server2 maldet(4190373): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 03 2025 03:33:46 server2 maldet(4190373): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 03 2025 03:33:46 server2 maldet(4190373): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 03 2025 03:33:46 server2 maldet(4190373): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 03 2025 03:33:46 server2 maldet(4190373): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 03 2025 03:33:47 server2 maldet(4190373): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 03 2025 03:33:47 server2 maldet(4190373): {sigup} verified md5sum of maldet-sigpack.tgz Jul 03 2025 03:33:47 server2 maldet(4190373): {sigup} unpacked and installed maldet-sigpack.tgz Jul 03 2025 03:33:47 server2 maldet(4190373): {sigup} verified md5sum of maldet-clean.tgz Jul 03 2025 03:33:47 server2 maldet(4190373): {sigup} unpacked and installed maldet-clean.tgz Jul 03 2025 03:33:47 server2 maldet(4190373): {sigup} signature set update completed Jul 03 2025 03:33:47 server2 maldet(4190373): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 03 2025 03:33:47 server2 maldet(4190575): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 03 2025 03:33:48 server2 maldet(4190575): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 03 2025 03:33:48 server2 maldet(4190575): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 03 2025 03:33:48 server2 maldet(4190575): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 03 2025 03:33:48 server2 maldet(4190575): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 03 2025 03:34:06 server2 maldet(4190575): {scan} file list completed in 18s, found 852 files... Jul 03 2025 03:34:06 server2 maldet(4190575): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 03 2025 03:34:06 server2 maldet(4190575): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (852 files) in progress... Jul 03 2025 03:34:42 server2 maldet(4190575): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 852, malware hits 0, cleaned hits 0, time 55s Jul 03 2025 03:34:42 server2 maldet(4190575): {scan} scan report saved, to view run: maldet --report 250703-0333.4190575 Jul 04 2025 03:59:10 server2 maldet(198575): {update} checking for available updates... Jul 04 2025 03:59:41 server2 maldet(198575): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 04 2025 03:59:41 server2 maldet(198575): {update} hashing install files and checking against server... Jul 04 2025 04:00:15 server2 maldet(198575): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 04 2025 04:00:15 server2 maldet(198575): {update} latest version already installed. Jul 04 2025 04:00:15 server2 maldet(198943): {sigup} performing signature update check... Jul 04 2025 04:00:15 server2 maldet(198943): {sigup} local signature set is version 20250701819448 Jul 04 2025 04:00:49 server2 maldet(198943): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 04 2025 04:00:49 server2 maldet(198943): {sigup} new signature set 202507041798016 available Jul 04 2025 04:00:49 server2 maldet(198943): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 04 2025 04:01:34 server2 maldet(198943): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 04 2025 04:01:53 server2 maldet(198943): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 04 2025 04:01:53 server2 maldet(198943): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 04 2025 04:02:39 server2 maldet(198943): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 04 2025 04:03:23 server2 maldet(198943): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 04 2025 04:03:23 server2 maldet(198943): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] Jul 04 2025 04:03:23 server2 maldet(198943): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact [email protected] Jul 04 2025 04:03:23 server2 maldet(199601): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 04 2025 04:03:24 server2 maldet(199601): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 04 2025 04:03:24 server2 maldet(199601): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 04 2025 04:03:24 server2 maldet(199601): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 04 2025 04:03:24 server2 maldet(199601): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 04 2025 04:03:40 server2 maldet(199601): {scan} file list completed in 16s, found 1218 files... Jul 04 2025 04:03:40 server2 maldet(199601): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 04 2025 04:03:40 server2 maldet(199601): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1218 files) in progress... Jul 04 2025 04:04:50 server2 maldet(199601): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1218, malware hits 0, cleaned hits 0, time 87s Jul 04 2025 04:04:50 server2 maldet(199601): {scan} scan report saved, to view run: maldet --report 250704-0403.199601 Jul 05 2025 03:59:56 server2 maldet(450871): {update} checking for available updates... Jul 05 2025 03:59:57 server2 maldet(450871): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 05 2025 03:59:57 server2 maldet(450871): {update} hashing install files and checking against server... Jul 05 2025 03:59:57 server2 maldet(450871): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 05 2025 03:59:57 server2 maldet(450871): {update} latest version already installed. Jul 05 2025 03:59:57 server2 maldet(450982): {sigup} performing signature update check... Jul 05 2025 03:59:57 server2 maldet(450982): {sigup} local signature set is version 20250701819448 Jul 05 2025 03:59:57 server2 maldet(450982): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 05 2025 03:59:57 server2 maldet(450982): {sigup} new signature set 202507041798016 available Jul 05 2025 03:59:57 server2 maldet(450982): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 05 2025 03:59:57 server2 maldet(450982): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 05 2025 03:59:58 server2 maldet(450982): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 05 2025 03:59:58 server2 maldet(450982): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 05 2025 03:59:58 server2 maldet(450982): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 05 2025 03:59:58 server2 maldet(450982): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 05 2025 03:59:58 server2 maldet(450982): {sigup} verified md5sum of maldet-sigpack.tgz Jul 05 2025 03:59:58 server2 maldet(450982): {sigup} unpacked and installed maldet-sigpack.tgz Jul 05 2025 03:59:58 server2 maldet(450982): {sigup} verified md5sum of maldet-clean.tgz Jul 05 2025 03:59:58 server2 maldet(450982): {sigup} unpacked and installed maldet-clean.tgz Jul 05 2025 03:59:58 server2 maldet(450982): {sigup} signature set update completed Jul 05 2025 03:59:58 server2 maldet(450982): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 05 2025 03:59:58 server2 maldet(451184): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 05 2025 04:00:00 server2 maldet(451184): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 05 2025 04:00:00 server2 maldet(451184): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 05 2025 04:00:00 server2 maldet(451184): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 05 2025 04:00:00 server2 maldet(451184): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 05 2025 04:00:31 server2 maldet(451184): {scan} file list completed in 31s, found 863 files... Jul 05 2025 04:00:31 server2 maldet(451184): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 05 2025 04:00:31 server2 maldet(451184): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (863 files) in progress... Jul 05 2025 04:01:15 server2 maldet(451184): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 863, malware hits 0, cleaned hits 0, time 77s Jul 05 2025 04:01:15 server2 maldet(451184): {scan} scan report saved, to view run: maldet --report 250705-0359.451184 Jul 06 2025 03:43:11 server2 maldet(653795): {update} checking for available updates... Jul 06 2025 03:43:11 server2 maldet(653795): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 06 2025 03:43:11 server2 maldet(653795): {update} hashing install files and checking against server... Jul 06 2025 03:43:12 server2 maldet(653795): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 06 2025 03:43:12 server2 maldet(653795): {update} latest version already installed. Jul 06 2025 03:43:12 server2 maldet(653904): {sigup} performing signature update check... Jul 06 2025 03:43:12 server2 maldet(653904): {sigup} local signature set is version 202507041798016 Jul 06 2025 03:43:12 server2 maldet(653904): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 06 2025 03:43:12 server2 maldet(653904): {sigup} latest signature set already installed Jul 06 2025 03:43:12 server2 maldet(653992): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 06 2025 03:43:14 server2 maldet(653992): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 06 2025 03:43:14 server2 maldet(653992): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 06 2025 03:43:14 server2 maldet(653992): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 06 2025 03:43:14 server2 maldet(653992): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 06 2025 03:43:32 server2 maldet(653992): {scan} file list completed in 18s, found 550 files... Jul 06 2025 03:43:32 server2 maldet(653992): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 06 2025 03:43:32 server2 maldet(653992): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (550 files) in progress... Jul 06 2025 03:44:03 server2 maldet(653992): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 550, malware hits 0, cleaned hits 0, time 51s Jul 06 2025 03:44:03 server2 maldet(653992): {scan} scan report saved, to view run: maldet --report 250706-0343.653992 Jul 07 2025 03:23:40 server2 maldet(841463): {update} checking for available updates... Jul 07 2025 03:24:22 server2 maldet(841463): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 07 2025 03:24:22 server2 maldet(841463): {update} hashing install files and checking against server... Jul 07 2025 03:24:49 server2 maldet(841463): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 07 2025 03:24:49 server2 maldet(841463): {update} latest version already installed. Jul 07 2025 03:24:49 server2 maldet(841677): {sigup} performing signature update check... Jul 07 2025 03:24:49 server2 maldet(841677): {sigup} local signature set is version 202507041798016 Jul 07 2025 03:25:08 server2 maldet(841677): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 07 2025 03:25:08 server2 maldet(841677): {sigup} new signature set error code: 522 available Jul 07 2025 03:25:08 server2 maldet(841677): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 07 2025 03:25:41 server2 maldet(841677): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 07 2025 03:26:00 server2 maldet(841677): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 07 2025 03:26:00 server2 maldet(841677): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 07 2025 03:26:20 server2 maldet(841677): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 07 2025 03:26:51 server2 maldet(841677): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 07 2025 03:26:51 server2 maldet(841677): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact [email protected] Jul 07 2025 03:26:51 server2 maldet(841677): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact [email protected] Jul 07 2025 03:26:51 server2 maldet(842207): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 07 2025 03:26:52 server2 maldet(842207): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 07 2025 03:26:52 server2 maldet(842207): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 07 2025 03:26:52 server2 maldet(842207): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 07 2025 03:26:52 server2 maldet(842207): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 07 2025 03:27:07 server2 maldet(842207): {scan} file list completed in 15s, found 877 files... Jul 07 2025 03:27:07 server2 maldet(842207): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 07 2025 03:27:07 server2 maldet(842207): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (877 files) in progress... Jul 07 2025 03:27:49 server2 maldet(842207): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 877, malware hits 0, cleaned hits 0, time 58s Jul 07 2025 03:27:49 server2 maldet(842207): {scan} scan report saved, to view run: maldet --report 250707-0326.842207 Jul 07 2025 22:14:46 server2 maldet(1239): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/ Jul 08 2025 03:48:27 server2 maldet(93909): {update} checking for available updates... Jul 08 2025 03:48:27 server2 maldet(93909): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 08 2025 03:48:27 server2 maldet(93909): {update} hashing install files and checking against server... Jul 08 2025 03:48:28 server2 maldet(93909): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 08 2025 03:48:28 server2 maldet(93909): {update} latest version already installed. Jul 08 2025 03:48:28 server2 maldet(94019): {sigup} performing signature update check... Jul 08 2025 03:48:28 server2 maldet(94019): {sigup} local signature set is version 202507041798016 Jul 08 2025 03:48:28 server2 maldet(94019): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 08 2025 03:48:28 server2 maldet(94019): {sigup} new signature set 202507072770854 available Jul 08 2025 03:48:28 server2 maldet(94019): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 08 2025 03:48:28 server2 maldet(94019): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 08 2025 03:48:28 server2 maldet(94019): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 08 2025 03:48:28 server2 maldet(94019): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 08 2025 03:48:28 server2 maldet(94019): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 08 2025 03:48:28 server2 maldet(94019): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 08 2025 03:48:28 server2 maldet(94019): {sigup} verified md5sum of maldet-sigpack.tgz Jul 08 2025 03:48:28 server2 maldet(94019): {sigup} unpacked and installed maldet-sigpack.tgz Jul 08 2025 03:48:28 server2 maldet(94019): {sigup} verified md5sum of maldet-clean.tgz Jul 08 2025 03:48:28 server2 maldet(94019): {sigup} unpacked and installed maldet-clean.tgz Jul 08 2025 03:48:28 server2 maldet(94019): {sigup} signature set update completed Jul 08 2025 03:48:28 server2 maldet(94019): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 08 2025 03:48:29 server2 maldet(94221): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 08 2025 03:48:29 server2 maldet(94221): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 08 2025 03:48:29 server2 maldet(94221): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 08 2025 03:48:29 server2 maldet(94221): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 08 2025 03:48:29 server2 maldet(94221): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 08 2025 03:48:47 server2 maldet(94221): {scan} file list completed in 18s, found 14410 files... Jul 08 2025 03:48:47 server2 maldet(94221): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 08 2025 03:48:47 server2 maldet(94221): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (14410 files) in progress... Jul 08 2025 03:53:58 server2 maldet(94221): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 14410, malware hits 0, cleaned hits 0, time 328s Jul 08 2025 03:53:58 server2 maldet(94221): {scan} scan report saved, to view run: maldet --report 250708-0348.94221 Jul 09 2025 03:46:39 server2 maldet(307161): {update} checking for available updates... Jul 09 2025 03:46:39 server2 maldet(307161): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 09 2025 03:46:39 server2 maldet(307161): {update} hashing install files and checking against server... Jul 09 2025 03:46:39 server2 maldet(307161): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 09 2025 03:46:39 server2 maldet(307161): {update} latest version already installed. Jul 09 2025 03:46:39 server2 maldet(307270): {sigup} performing signature update check... Jul 09 2025 03:46:39 server2 maldet(307270): {sigup} local signature set is version 202507072770854 Jul 09 2025 03:46:39 server2 maldet(307270): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 09 2025 03:46:39 server2 maldet(307270): {sigup} latest signature set already installed Jul 09 2025 03:46:40 server2 maldet(307358): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 09 2025 03:46:42 server2 maldet(307358): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 09 2025 03:46:42 server2 maldet(307358): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 09 2025 03:46:42 server2 maldet(307358): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 09 2025 03:46:42 server2 maldet(307358): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 09 2025 03:47:02 server2 maldet(307358): {scan} file list completed in 20s, found 789 files... Jul 09 2025 03:47:02 server2 maldet(307358): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 09 2025 03:47:02 server2 maldet(307358): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (789 files) in progress... Jul 09 2025 03:47:44 server2 maldet(307358): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 789, malware hits 0, cleaned hits 0, time 64s Jul 09 2025 03:47:44 server2 maldet(307358): {scan} scan report saved, to view run: maldet --report 250709-0346.307358 Jul 10 2025 03:15:00 server2 maldet(510952): {update} checking for available updates... Jul 10 2025 03:15:31 server2 maldet(510952): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 10 2025 03:15:31 server2 maldet(510952): {update} hashing install files and checking against server... Jul 10 2025 03:16:21 server2 maldet(510952): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 10 2025 03:16:21 server2 maldet(510952): {update} latest version already installed. Jul 10 2025 03:16:21 server2 maldet(511424): {sigup} performing signature update check... Jul 10 2025 03:16:21 server2 maldet(511424): {sigup} local signature set is version 202507072770854 Jul 10 2025 03:17:15 server2 maldet(511424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 10 2025 03:17:15 server2 maldet(511424): {sigup} new signature set error code: 525 available Jul 10 2025 03:17:15 server2 maldet(511424): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 10 2025 03:17:55 server2 maldet(511424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 10 2025 03:18:24 server2 maldet(511424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 10 2025 03:18:24 server2 maldet(511424): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 10 2025 03:18:43 server2 maldet(511424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 10 2025 03:19:19 server2 maldet(511424): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 10 2025 03:19:19 server2 maldet(511424): {sigup} verified md5sum of maldet-sigpack.tgz Jul 10 2025 03:19:19 server2 maldet(511424): {sigup} unpacked and installed maldet-sigpack.tgz Jul 10 2025 03:19:19 server2 maldet(511424): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact [email protected] Jul 10 2025 03:19:19 server2 maldet(511424): {sigup} signature set update completed Jul 10 2025 03:19:19 server2 maldet(511424): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 10 2025 03:19:20 server2 maldet(511869): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 10 2025 03:19:20 server2 maldet(511869): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 10 2025 03:19:20 server2 maldet(511869): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 10 2025 03:19:20 server2 maldet(511869): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 10 2025 03:19:20 server2 maldet(511869): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 10 2025 03:19:41 server2 maldet(511869): {scan} file list completed in 21s, found 759 files... Jul 10 2025 03:19:41 server2 maldet(511869): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 10 2025 03:19:41 server2 maldet(511869): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (759 files) in progress... Jul 10 2025 03:20:32 server2 maldet(511869): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 759, malware hits 0, cleaned hits 0, time 72s Jul 10 2025 03:20:32 server2 maldet(511869): {scan} scan report saved, to view run: maldet --report 250710-0319.511869 Jul 11 2025 03:19:02 server2 maldet(738025): {update} checking for available updates... Jul 11 2025 03:19:31 server2 maldet(738025): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 11 2025 03:19:31 server2 maldet(738025): {update} hashing install files and checking against server... Jul 11 2025 03:20:18 server2 maldet(738025): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 11 2025 03:20:18 server2 maldet(738025): {update} version check shows latest but hash check failed, forcing update... Jul 11 2025 03:20:18 server2 maldet(738025): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Jul 11 2025 03:20:54 server2 maldet(738025): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Jul 11 2025 03:20:54 server2 maldet(738025): {update} verified md5sum of maldetect-current.tar.gz