HEX

File: //usr/local/maldetect.bk251241/logs/event_log
Nov 09 2025 04:35:12 web1 maldet(1666460): {sigup} performing signature update check...
Nov 09 2025 04:35:12 web1 maldet(1666460): {sigup} local signature set is version 20250225482944
Nov 09 2025 04:35:12 web1 maldet(1666460): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 09 2025 04:35:12 web1 maldet(1666460): {sigup} new signature set 202511071572609 available
Nov 09 2025 04:35:12 web1 maldet(1666460): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Nov 09 2025 04:35:13 web1 maldet(1666460): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Nov 09 2025 04:35:13 web1 maldet(1666460): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Nov 09 2025 04:35:13 web1 maldet(1666460): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Nov 09 2025 04:35:13 web1 maldet(1666460): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Nov 09 2025 04:35:13 web1 maldet(1666460): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Nov 09 2025 04:35:13 web1 maldet(1666460): {sigup} verified md5sum of maldet-sigpack.tgz
Nov 09 2025 04:35:13 web1 maldet(1666460): {sigup} unpacked and installed maldet-sigpack.tgz
Nov 09 2025 04:35:13 web1 maldet(1666460): {sigup} verified md5sum of maldet-clean.tgz
Nov 09 2025 04:35:13 web1 maldet(1666460): {sigup} unpacked and installed maldet-clean.tgz
Nov 09 2025 04:35:13 web1 maldet(1666460): {sigup} signature set update completed
Nov 09 2025 04:35:13 web1 maldet(1666460): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 09 2025 04:35:13 web1 maldet(1666133): {update} completed update v1.6.6 3a1792 => v1.6.6 359d25, running signature updates...
Nov 09 2025 04:35:13 web1 maldet(1666668): {sigup} performing signature update check...
Nov 09 2025 04:35:13 web1 maldet(1666668): {sigup} local signature set is version 202511071572609
Nov 09 2025 04:35:14 web1 maldet(1666668): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 09 2025 04:35:14 web1 maldet(1666668): {sigup} latest signature set already installed
Nov 09 2025 04:35:14 web1 maldet(1666133): {update} update and config import completed
Nov 09 2025 04:35:14 web1 maldet(1666760): {sigup} performing signature update check...
Nov 09 2025 04:35:14 web1 maldet(1666760): {sigup} local signature set is version 202511071572609
Nov 09 2025 04:35:14 web1 maldet(1666760): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 09 2025 04:35:14 web1 maldet(1666760): {sigup} latest signature set already installed
Nov 09 2025 04:35:14 web1 maldet(1666848): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 09 2025 04:35:14 web1 maldet(1666848): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 09 2025 04:35:14 web1 maldet(1666848): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 09 2025 04:35:14 web1 maldet(1666848): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 09 2025 04:35:14 web1 maldet(1666848): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 09 2025 04:36:00 web1 maldet(1666848): {scan} file list completed in 46s, found 1523 files...
Nov 09 2025 04:36:00 web1 maldet(1666848): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 09 2025 04:36:00 web1 maldet(1666848): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1523 files) in progress...
Nov 09 2025 04:36:20 web1 maldet(1666848): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1523, malware hits 0, cleaned hits 0, time 66s
Nov 09 2025 04:36:20 web1 maldet(1666848): {scan} scan report saved, to view run: maldet --report 251109-0435.1666848
Nov 10 2025 02:58:10 web1 maldet(1162): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Nov 10 2025 04:20:02 web1 maldet(23449): {update} checking for available updates...
Nov 10 2025 04:20:02 web1 maldet(23449): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 10 2025 04:20:02 web1 maldet(23449): {update} hashing install files and checking against server...
Nov 10 2025 04:20:02 web1 maldet(23449): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 10 2025 04:20:02 web1 maldet(23449): {update} latest version already installed.
Nov 10 2025 04:20:02 web1 maldet(23558): {sigup} performing signature update check...
Nov 10 2025 04:20:02 web1 maldet(23558): {sigup} local signature set is version 202511071572609
Nov 10 2025 04:20:02 web1 maldet(23558): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 10 2025 04:20:02 web1 maldet(23558): {sigup} new signature set 20251110477208 available
Nov 10 2025 04:20:02 web1 maldet(23558): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Nov 10 2025 04:20:03 web1 maldet(23558): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Nov 10 2025 04:20:03 web1 maldet(23558): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Nov 10 2025 04:20:03 web1 maldet(23558): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Nov 10 2025 04:20:03 web1 maldet(23558): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Nov 10 2025 04:20:03 web1 maldet(23558): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Nov 10 2025 04:20:03 web1 maldet(23558): {sigup} verified md5sum of maldet-sigpack.tgz
Nov 10 2025 04:20:03 web1 maldet(23558): {sigup} unpacked and installed maldet-sigpack.tgz
Nov 10 2025 04:20:03 web1 maldet(23558): {sigup} verified md5sum of maldet-clean.tgz
Nov 10 2025 04:20:03 web1 maldet(23558): {sigup} unpacked and installed maldet-clean.tgz
Nov 10 2025 04:20:03 web1 maldet(23558): {sigup} signature set update completed
Nov 10 2025 04:20:03 web1 maldet(23558): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 10 2025 04:20:03 web1 maldet(23765): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 10 2025 04:20:04 web1 maldet(23765): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 10 2025 04:20:04 web1 maldet(23765): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 10 2025 04:20:04 web1 maldet(23765): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 10 2025 04:20:04 web1 maldet(23765): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 10 2025 04:20:44 web1 maldet(23765): {scan} file list completed in 40s, found 8136 files...
Nov 10 2025 04:20:44 web1 maldet(23765): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 10 2025 04:20:44 web1 maldet(23765): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (8136 files) in progress...
Nov 10 2025 04:21:35 web1 maldet(23765): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 8136, malware hits 0, cleaned hits 0, time 92s
Nov 10 2025 04:21:35 web1 maldet(23765): {scan} scan report saved, to view run: maldet --report 251110-0420.23765
Nov 11 2025 04:02:29 web1 maldet(438357): {update} checking for available updates...
Nov 11 2025 04:02:29 web1 maldet(438357): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 11 2025 04:02:29 web1 maldet(438357): {update} hashing install files and checking against server...
Nov 11 2025 04:02:29 web1 maldet(438357): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 11 2025 04:02:29 web1 maldet(438357): {update} latest version already installed.
Nov 11 2025 04:02:29 web1 maldet(438473): {sigup} performing signature update check...
Nov 11 2025 04:02:29 web1 maldet(438473): {sigup} local signature set is version 20251110477208
Nov 11 2025 04:02:29 web1 maldet(438473): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 11 2025 04:02:29 web1 maldet(438473): {sigup} latest signature set already installed
Nov 11 2025 04:02:29 web1 maldet(438561): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 11 2025 04:02:30 web1 maldet(438561): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 11 2025 04:02:30 web1 maldet(438561): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 11 2025 04:02:30 web1 maldet(438561): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 11 2025 04:02:30 web1 maldet(438561): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 11 2025 04:03:08 web1 maldet(438561): {scan} file list completed in 38s, found 12725 files...
Nov 11 2025 04:03:08 web1 maldet(438561): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 11 2025 04:03:08 web1 maldet(438561): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (12725 files) in progress...
Nov 11 2025 04:04:46 web1 maldet(438561): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 12725, malware hits 0, cleaned hits 0, time 136s
Nov 11 2025 04:04:46 web1 maldet(438561): {scan} scan report saved, to view run: maldet --report 251111-0402.438561
Nov 11 2025 05:39:58 web1 maldet(1144): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Nov 12 2025 04:09:55 web1 maldet(466350): {update} checking for available updates...
Nov 12 2025 04:09:56 web1 maldet(466350): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 12 2025 04:09:56 web1 maldet(466350): {update} hashing install files and checking against server...
Nov 12 2025 04:09:56 web1 maldet(466350): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 12 2025 04:09:56 web1 maldet(466350): {update} latest version already installed.
Nov 12 2025 04:09:56 web1 maldet(466462): {sigup} performing signature update check...
Nov 12 2025 04:09:56 web1 maldet(466462): {sigup} local signature set is version 20251110477208
Nov 12 2025 04:09:56 web1 maldet(466462): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 12 2025 04:09:56 web1 maldet(466462): {sigup} latest signature set already installed
Nov 12 2025 04:09:56 web1 maldet(466550): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 12 2025 04:09:56 web1 maldet(466550): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 12 2025 04:09:56 web1 maldet(466550): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 12 2025 04:09:56 web1 maldet(466550): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 12 2025 04:09:56 web1 maldet(466550): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 12 2025 04:10:43 web1 maldet(466550): {scan} file list completed in 47s, found 9279 files...
Nov 12 2025 04:10:43 web1 maldet(466550): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 12 2025 04:10:43 web1 maldet(466550): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (9279 files) in progress...
Nov 12 2025 04:12:22 web1 maldet(466550): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 9279, malware hits 0, cleaned hits 0, time 146s
Nov 12 2025 04:12:22 web1 maldet(466550): {scan} scan report saved, to view run: maldet --report 251112-0409.466550
Nov 13 2025 03:46:08 web1 maldet(869171): {update} checking for available updates...
Nov 13 2025 03:46:08 web1 maldet(869171): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 13 2025 03:46:09 web1 maldet(869171): {update} hashing install files and checking against server...
Nov 13 2025 03:46:09 web1 maldet(869171): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 13 2025 03:46:09 web1 maldet(869171): {update} latest version already installed.
Nov 13 2025 03:46:09 web1 maldet(869281): {sigup} performing signature update check...
Nov 13 2025 03:46:09 web1 maldet(869281): {sigup} local signature set is version 20251110477208
Nov 13 2025 03:46:09 web1 maldet(869281): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 13 2025 03:46:09 web1 maldet(869281): {sigup} new signature set 202511131448686 available
Nov 13 2025 03:46:09 web1 maldet(869281): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Nov 13 2025 03:46:09 web1 maldet(869281): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Nov 13 2025 03:46:09 web1 maldet(869281): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Nov 13 2025 03:46:09 web1 maldet(869281): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Nov 13 2025 03:46:09 web1 maldet(869281): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Nov 13 2025 03:46:09 web1 maldet(869281): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Nov 13 2025 03:46:09 web1 maldet(869281): {sigup} verified md5sum of maldet-sigpack.tgz
Nov 13 2025 03:46:10 web1 maldet(869281): {sigup} unpacked and installed maldet-sigpack.tgz
Nov 13 2025 03:46:10 web1 maldet(869281): {sigup} verified md5sum of maldet-clean.tgz
Nov 13 2025 03:46:10 web1 maldet(869281): {sigup} unpacked and installed maldet-clean.tgz
Nov 13 2025 03:46:10 web1 maldet(869281): {sigup} signature set update completed
Nov 13 2025 03:46:10 web1 maldet(869281): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 13 2025 03:46:10 web1 maldet(869484): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 13 2025 03:46:10 web1 maldet(869484): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 13 2025 03:46:10 web1 maldet(869484): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 13 2025 03:46:10 web1 maldet(869484): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 13 2025 03:46:10 web1 maldet(869484): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 13 2025 03:46:54 web1 maldet(869484): {scan} file list completed in 44s, found 15333 files...
Nov 13 2025 03:46:54 web1 maldet(869484): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 13 2025 03:46:54 web1 maldet(869484): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (15333 files) in progress...
Nov 13 2025 03:49:15 web1 maldet(869484): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 15333, malware hits 0, cleaned hits 0, time 185s
Nov 13 2025 03:49:15 web1 maldet(869484): {scan} scan report saved, to view run: maldet --report 251113-0346.869484
Nov 13 2025 22:54:26 web1 maldet(1136): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Nov 14 2025 04:26:09 web1 maldet(89215): {update} checking for available updates...
Nov 14 2025 04:26:10 web1 maldet(89215): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 14 2025 04:26:10 web1 maldet(89215): {update} hashing install files and checking against server...
Nov 14 2025 04:26:10 web1 maldet(89215): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 14 2025 04:26:10 web1 maldet(89215): {update} latest version already installed.
Nov 14 2025 04:26:10 web1 maldet(89324): {sigup} performing signature update check...
Nov 14 2025 04:26:10 web1 maldet(89324): {sigup} local signature set is version 202511131448686
Nov 14 2025 04:26:10 web1 maldet(89324): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 14 2025 04:26:10 web1 maldet(89324): {sigup} latest signature set already installed
Nov 14 2025 04:26:10 web1 maldet(89412): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 14 2025 04:26:10 web1 maldet(89412): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 14 2025 04:26:10 web1 maldet(89412): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 14 2025 04:26:10 web1 maldet(89412): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 14 2025 04:26:10 web1 maldet(89412): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 14 2025 04:26:47 web1 maldet(89412): {scan} file list completed in 37s, found 20545 files...
Nov 14 2025 04:26:47 web1 maldet(89412): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 14 2025 04:26:47 web1 maldet(89412): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (20545 files) in progress...
Nov 14 2025 04:28:36 web1 maldet(89412): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 20545, malware hits 0, cleaned hits 0, time 146s
Nov 14 2025 04:28:36 web1 maldet(89412): {scan} scan report saved, to view run: maldet --report 251114-0426.89412
Nov 14 2025 16:02:11 web1 maldet(1129): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Nov 15 2025 04:13:56 web1 maldet(184617): {update} checking for available updates...
Nov 15 2025 04:13:56 web1 maldet(184617): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 15 2025 04:13:56 web1 maldet(184617): {update} hashing install files and checking against server...
Nov 15 2025 04:13:57 web1 maldet(184617): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 15 2025 04:13:57 web1 maldet(184617): {update} latest version already installed.
Nov 15 2025 04:13:57 web1 maldet(184726): {sigup} performing signature update check...
Nov 15 2025 04:13:57 web1 maldet(184726): {sigup} local signature set is version 202511131448686
Nov 15 2025 04:13:57 web1 maldet(184726): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 15 2025 04:13:57 web1 maldet(184726): {sigup} latest signature set already installed
Nov 15 2025 04:13:57 web1 maldet(184814): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 15 2025 04:13:57 web1 maldet(184814): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 15 2025 04:13:57 web1 maldet(184814): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 15 2025 04:13:57 web1 maldet(184814): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 15 2025 04:13:57 web1 maldet(184814): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 15 2025 04:14:34 web1 maldet(184814): {scan} file list completed in 37s, found 5280 files...
Nov 15 2025 04:14:34 web1 maldet(184814): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 15 2025 04:14:34 web1 maldet(184814): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5280 files) in progress...
Nov 15 2025 04:15:27 web1 maldet(184814): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5280, malware hits 0, cleaned hits 0, time 90s
Nov 15 2025 04:15:27 web1 maldet(184814): {scan} scan report saved, to view run: maldet --report 251115-0413.184814
Nov 16 2025 04:33:09 web1 maldet(550965): {update} checking for available updates...
Nov 16 2025 04:33:09 web1 maldet(550965): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 16 2025 04:33:09 web1 maldet(550965): {update} hashing install files and checking against server...
Nov 16 2025 04:33:10 web1 maldet(550965): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 16 2025 04:33:10 web1 maldet(550965): {update} latest version already installed.
Nov 16 2025 04:33:10 web1 maldet(551075): {sigup} performing signature update check...
Nov 16 2025 04:33:10 web1 maldet(551075): {sigup} local signature set is version 202511131448686
Nov 16 2025 04:33:10 web1 maldet(551075): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 16 2025 04:33:10 web1 maldet(551075): {sigup} new signature set 202511162420078 available
Nov 16 2025 04:33:10 web1 maldet(551075): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Nov 16 2025 04:33:10 web1 maldet(551075): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Nov 16 2025 04:33:10 web1 maldet(551075): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Nov 16 2025 04:33:10 web1 maldet(551075): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Nov 16 2025 04:33:10 web1 maldet(551075): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Nov 16 2025 04:33:10 web1 maldet(551075): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Nov 16 2025 04:33:10 web1 maldet(551075): {sigup} verified md5sum of maldet-sigpack.tgz
Nov 16 2025 04:33:10 web1 maldet(551075): {sigup} unpacked and installed maldet-sigpack.tgz
Nov 16 2025 04:33:10 web1 maldet(551075): {sigup} verified md5sum of maldet-clean.tgz
Nov 16 2025 04:33:11 web1 maldet(551075): {sigup} unpacked and installed maldet-clean.tgz
Nov 16 2025 04:33:11 web1 maldet(551075): {sigup} signature set update completed
Nov 16 2025 04:33:11 web1 maldet(551075): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 16 2025 04:33:11 web1 maldet(551282): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 16 2025 04:33:11 web1 maldet(551282): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 16 2025 04:33:11 web1 maldet(551282): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 16 2025 04:33:11 web1 maldet(551282): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 16 2025 04:33:11 web1 maldet(551282): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 16 2025 04:33:55 web1 maldet(551282): {scan} file list completed in 44s, found 1254 files...
Nov 16 2025 04:33:55 web1 maldet(551282): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 16 2025 04:33:55 web1 maldet(551282): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1254 files) in progress...
Nov 16 2025 04:34:16 web1 maldet(551282): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1254, malware hits 0, cleaned hits 0, time 65s
Nov 16 2025 04:34:16 web1 maldet(551282): {scan} scan report saved, to view run: maldet --report 251116-0433.551282
Nov 16 2025 10:22:05 web1 maldet(1127): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Nov 16 2025 17:07:35 web1 maldet(1171): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Nov 17 2025 04:06:58 web1 maldet(179136): {update} checking for available updates...
Nov 17 2025 04:06:58 web1 maldet(179136): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 17 2025 04:06:59 web1 maldet(179136): {update} hashing install files and checking against server...
Nov 17 2025 04:06:59 web1 maldet(179136): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 17 2025 04:06:59 web1 maldet(179136): {update} latest version already installed.
Nov 17 2025 04:06:59 web1 maldet(179245): {sigup} performing signature update check...
Nov 17 2025 04:06:59 web1 maldet(179245): {sigup} local signature set is version 202511162420078
Nov 17 2025 04:06:59 web1 maldet(179245): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 17 2025 04:06:59 web1 maldet(179245): {sigup} latest signature set already installed
Nov 17 2025 04:06:59 web1 maldet(179333): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 17 2025 04:06:59 web1 maldet(179333): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 17 2025 04:06:59 web1 maldet(179333): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 17 2025 04:06:59 web1 maldet(179333): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 17 2025 04:06:59 web1 maldet(179333): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 17 2025 04:07:38 web1 maldet(179333): {scan} file list completed in 39s, found 1605 files...
Nov 17 2025 04:07:38 web1 maldet(179333): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 17 2025 04:07:38 web1 maldet(179333): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1605 files) in progress...
Nov 17 2025 04:08:18 web1 maldet(179333): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1605, malware hits 0, cleaned hits 0, time 79s
Nov 17 2025 04:08:18 web1 maldet(179333): {scan} scan report saved, to view run: maldet --report 251117-0406.179333
Nov 17 2025 04:40:44 web1 maldet(1136): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Nov 17 2025 07:09:30 web1 maldet(1130): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Nov 17 2025 10:22:31 web1 maldet(1159): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Nov 17 2025 17:54:15 web1 maldet(1138): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Nov 17 2025 18:18:31 web1 maldet(1129): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Nov 18 2025 04:37:49 web1 maldet(159507): {update} checking for available updates...
Nov 18 2025 04:37:49 web1 maldet(159507): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 18 2025 04:37:49 web1 maldet(159507): {update} hashing install files and checking against server...
Nov 18 2025 04:37:49 web1 maldet(159507): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 18 2025 04:37:49 web1 maldet(159507): {update} latest version already installed.
Nov 18 2025 04:37:49 web1 maldet(159616): {sigup} performing signature update check...
Nov 18 2025 04:37:49 web1 maldet(159616): {sigup} local signature set is version 202511162420078
Nov 18 2025 04:37:49 web1 maldet(159616): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 18 2025 04:37:49 web1 maldet(159616): {sigup} latest signature set already installed
Nov 18 2025 04:37:50 web1 maldet(159704): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 18 2025 04:37:50 web1 maldet(159704): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 18 2025 04:37:50 web1 maldet(159704): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 18 2025 04:37:50 web1 maldet(159704): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 18 2025 04:37:50 web1 maldet(159704): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 18 2025 04:38:27 web1 maldet(159704): {scan} file list completed in 37s, found 14556 files...
Nov 18 2025 04:38:27 web1 maldet(159704): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 18 2025 04:38:27 web1 maldet(159704): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (14556 files) in progress...
Nov 18 2025 04:40:19 web1 maldet(159704): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 14556, malware hits 0, cleaned hits 0, time 149s
Nov 18 2025 04:40:19 web1 maldet(159704): {scan} scan report saved, to view run: maldet --report 251118-0437.159704
Nov 19 2025 04:12:13 web1 maldet(541590): {update} checking for available updates...
Nov 19 2025 04:12:13 web1 maldet(541590): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 19 2025 04:12:13 web1 maldet(541590): {update} hashing install files and checking against server...
Nov 19 2025 04:12:13 web1 maldet(541590): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 19 2025 04:12:13 web1 maldet(541590): {update} latest version already installed.
Nov 19 2025 04:12:13 web1 maldet(541702): {sigup} performing signature update check...
Nov 19 2025 04:12:13 web1 maldet(541702): {sigup} local signature set is version 202511162420078
Nov 19 2025 04:12:13 web1 maldet(541702): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 19 2025 04:12:13 web1 maldet(541702): {sigup} latest signature set already installed
Nov 19 2025 04:12:13 web1 maldet(541790): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 19 2025 04:12:14 web1 maldet(541790): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 19 2025 04:12:14 web1 maldet(541790): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 19 2025 04:12:14 web1 maldet(541790): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 19 2025 04:12:14 web1 maldet(541790): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 19 2025 04:12:53 web1 maldet(541790): {scan} file list completed in 39s, found 12756 files...
Nov 19 2025 04:12:53 web1 maldet(541790): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 19 2025 04:12:53 web1 maldet(541790): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (12756 files) in progress...
Nov 19 2025 04:15:03 web1 maldet(541790): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 12756, malware hits 0, cleaned hits 0, time 170s
Nov 19 2025 04:15:03 web1 maldet(541790): {scan} scan report saved, to view run: maldet --report 251119-0412.541790
Nov 20 2025 03:52:40 web1 maldet(1110857): {update} checking for available updates...
Nov 20 2025 03:52:40 web1 maldet(1110857): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 20 2025 03:52:40 web1 maldet(1110857): {update} hashing install files and checking against server...
Nov 20 2025 03:52:40 web1 maldet(1110857): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 20 2025 03:52:40 web1 maldet(1110857): {update} latest version already installed.
Nov 20 2025 03:52:40 web1 maldet(1110977): {sigup} performing signature update check...
Nov 20 2025 03:52:40 web1 maldet(1110977): {sigup} local signature set is version 202511162420078
Nov 20 2025 03:52:40 web1 maldet(1110977): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 20 2025 03:52:40 web1 maldet(1110977): {sigup} latest signature set already installed
Nov 20 2025 03:52:40 web1 maldet(1111078): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 20 2025 03:52:40 web1 maldet(1111078): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 20 2025 03:52:40 web1 maldet(1111078): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 20 2025 03:52:41 web1 maldet(1111078): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 20 2025 03:52:41 web1 maldet(1111078): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 20 2025 03:53:23 web1 maldet(1111078): {scan} file list completed in 42s, found 14112 files...
Nov 20 2025 03:53:23 web1 maldet(1111078): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 20 2025 03:53:23 web1 maldet(1111078): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (14112 files) in progress...
Nov 20 2025 03:56:07 web1 maldet(1111078): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 14112, malware hits 0, cleaned hits 0, time 207s
Nov 20 2025 03:56:07 web1 maldet(1111078): {scan} scan report saved, to view run: maldet --report 251120-0352.1111078
Nov 20 2025 06:24:34 web1 maldet(1155): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Nov 21 2025 03:37:48 web1 maldet(1141): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Nov 21 2025 05:28:23 web1 maldet(39177): {update} checking for available updates...
Nov 21 2025 05:28:24 web1 maldet(39177): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 21 2025 05:28:24 web1 maldet(39177): {update} hashing install files and checking against server...
Nov 21 2025 05:28:24 web1 maldet(39177): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 21 2025 05:28:24 web1 maldet(39177): {update} latest version already installed.
Nov 21 2025 05:28:24 web1 maldet(39287): {sigup} performing signature update check...
Nov 21 2025 05:28:24 web1 maldet(39287): {sigup} local signature set is version 202511162420078
Nov 21 2025 05:28:24 web1 maldet(39287): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 21 2025 05:28:24 web1 maldet(39287): {sigup} latest signature set already installed
Nov 21 2025 05:28:24 web1 maldet(39375): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 21 2025 05:28:24 web1 maldet(39375): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 21 2025 05:28:24 web1 maldet(39375): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 21 2025 05:28:24 web1 maldet(39375): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 21 2025 05:28:24 web1 maldet(39375): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 21 2025 05:29:03 web1 maldet(39375): {scan} file list completed in 39s, found 22091 files...
Nov 21 2025 05:29:03 web1 maldet(39375): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 21 2025 05:29:03 web1 maldet(39375): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (22091 files) in progress...
Nov 21 2025 05:32:23 web1 maldet(39375): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 22091, malware hits 0, cleaned hits 0, time 239s
Nov 21 2025 05:32:23 web1 maldet(39375): {scan} scan report saved, to view run: maldet --report 251121-0528.39375
Nov 22 2025 03:43:28 web1 maldet(463397): {update} checking for available updates...
Nov 22 2025 03:43:29 web1 maldet(463397): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 22 2025 03:43:29 web1 maldet(463397): {update} hashing install files and checking against server...
Nov 22 2025 03:43:29 web1 maldet(463397): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 22 2025 03:43:29 web1 maldet(463397): {update} latest version already installed.
Nov 22 2025 03:43:29 web1 maldet(463507): {sigup} performing signature update check...
Nov 22 2025 03:43:29 web1 maldet(463507): {sigup} local signature set is version 202511162420078
Nov 22 2025 03:43:29 web1 maldet(463507): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 22 2025 03:43:29 web1 maldet(463507): {sigup} new signature set 20251122699816 available
Nov 22 2025 03:43:29 web1 maldet(463507): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Nov 22 2025 03:43:29 web1 maldet(463507): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Nov 22 2025 03:43:29 web1 maldet(463507): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Nov 22 2025 03:43:29 web1 maldet(463507): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Nov 22 2025 03:43:30 web1 maldet(463507): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Nov 22 2025 03:43:30 web1 maldet(463507): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Nov 22 2025 03:43:30 web1 maldet(463507): {sigup} verified md5sum of maldet-sigpack.tgz
Nov 22 2025 03:43:30 web1 maldet(463507): {sigup} unpacked and installed maldet-sigpack.tgz
Nov 22 2025 03:43:30 web1 maldet(463507): {sigup} verified md5sum of maldet-clean.tgz
Nov 22 2025 03:43:30 web1 maldet(463507): {sigup} unpacked and installed maldet-clean.tgz
Nov 22 2025 03:43:30 web1 maldet(463507): {sigup} signature set update completed
Nov 22 2025 03:43:30 web1 maldet(463507): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 22 2025 03:43:30 web1 maldet(463713): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 22 2025 03:43:30 web1 maldet(463713): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 22 2025 03:43:30 web1 maldet(463713): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 22 2025 03:43:30 web1 maldet(463713): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 22 2025 03:43:30 web1 maldet(463713): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 22 2025 03:44:13 web1 maldet(463713): {scan} file list completed in 43s, found 15405 files...
Nov 22 2025 03:44:13 web1 maldet(463713): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 22 2025 03:44:13 web1 maldet(463713): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (15405 files) in progress...
Nov 22 2025 03:46:45 web1 maldet(463713): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 15405, malware hits 0, cleaned hits 0, time 195s
Nov 22 2025 03:46:45 web1 maldet(463713): {scan} scan report saved, to view run: maldet --report 251122-0343.463713
Nov 23 2025 04:54:26 web1 maldet(1088222): {update} checking for available updates...
Nov 23 2025 04:54:26 web1 maldet(1088222): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 23 2025 04:54:26 web1 maldet(1088222): {update} hashing install files and checking against server...
Nov 23 2025 04:54:26 web1 maldet(1088222): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 23 2025 04:54:26 web1 maldet(1088222): {update} latest version already installed.
Nov 23 2025 04:54:27 web1 maldet(1088333): {sigup} performing signature update check...
Nov 23 2025 04:54:27 web1 maldet(1088333): {sigup} local signature set is version 20251122699816
Nov 23 2025 04:54:27 web1 maldet(1088333): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 23 2025 04:54:27 web1 maldet(1088333): {sigup} latest signature set already installed
Nov 23 2025 04:54:27 web1 maldet(1088421): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 23 2025 04:54:27 web1 maldet(1088421): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 23 2025 04:54:27 web1 maldet(1088421): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 23 2025 04:54:27 web1 maldet(1088421): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 23 2025 04:54:27 web1 maldet(1088421): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 23 2025 04:55:07 web1 maldet(1088421): {scan} file list completed in 40s, found 8489 files...
Nov 23 2025 04:55:07 web1 maldet(1088421): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 23 2025 04:55:07 web1 maldet(1088421): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (8489 files) in progress...
Nov 23 2025 04:56:26 web1 maldet(1088421): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 8489, malware hits 0, cleaned hits 0, time 119s
Nov 23 2025 04:56:26 web1 maldet(1088421): {scan} scan report saved, to view run: maldet --report 251123-0454.1088421
Nov 24 2025 04:12:11 web1 maldet(1563443): {update} checking for available updates...
Nov 24 2025 04:12:11 web1 maldet(1563443): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 24 2025 04:12:11 web1 maldet(1563443): {update} hashing install files and checking against server...
Nov 24 2025 04:12:11 web1 maldet(1563443): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 24 2025 04:12:11 web1 maldet(1563443): {update} latest version already installed.
Nov 24 2025 04:12:11 web1 maldet(1563552): {sigup} performing signature update check...
Nov 24 2025 04:12:11 web1 maldet(1563552): {sigup} local signature set is version 20251122699816
Nov 24 2025 04:12:12 web1 maldet(1563552): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 24 2025 04:12:12 web1 maldet(1563552): {sigup} latest signature set already installed
Nov 24 2025 04:12:12 web1 maldet(1563643): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 24 2025 04:12:12 web1 maldet(1563643): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 24 2025 04:12:12 web1 maldet(1563643): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 24 2025 04:12:12 web1 maldet(1563643): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 24 2025 04:12:12 web1 maldet(1563643): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 24 2025 04:12:52 web1 maldet(1563643): {scan} file list completed in 39s, found 11422 files...
Nov 24 2025 04:12:52 web1 maldet(1563643): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 24 2025 04:12:52 web1 maldet(1563643): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (11422 files) in progress...
Nov 24 2025 04:14:08 web1 maldet(1563643): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 11422, malware hits 0, cleaned hits 0, time 116s
Nov 24 2025 04:14:08 web1 maldet(1563643): {scan} scan report saved, to view run: maldet --report 251124-0412.1563643
Nov 24 2025 13:35:05 web1 maldet(1195): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Nov 25 2025 04:27:08 web1 maldet(260166): {update} checking for available updates...
Nov 25 2025 04:27:08 web1 maldet(260166): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 25 2025 04:27:08 web1 maldet(260166): {update} hashing install files and checking against server...
Nov 25 2025 04:27:09 web1 maldet(260166): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 25 2025 04:27:09 web1 maldet(260166): {update} latest version already installed.
Nov 25 2025 04:27:09 web1 maldet(260275): {sigup} performing signature update check...
Nov 25 2025 04:27:09 web1 maldet(260275): {sigup} local signature set is version 20251122699816
Nov 25 2025 04:27:09 web1 maldet(260275): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 25 2025 04:27:09 web1 maldet(260275): {sigup} new signature set 202511251727973 available
Nov 25 2025 04:27:09 web1 maldet(260275): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Nov 25 2025 04:27:09 web1 maldet(260275): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Nov 25 2025 04:27:09 web1 maldet(260275): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Nov 25 2025 04:27:09 web1 maldet(260275): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Nov 25 2025 04:27:09 web1 maldet(260275): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Nov 25 2025 04:27:09 web1 maldet(260275): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Nov 25 2025 04:27:09 web1 maldet(260275): {sigup} verified md5sum of maldet-sigpack.tgz
Nov 25 2025 04:27:09 web1 maldet(260275): {sigup} unpacked and installed maldet-sigpack.tgz
Nov 25 2025 04:27:09 web1 maldet(260275): {sigup} verified md5sum of maldet-clean.tgz
Nov 25 2025 04:27:10 web1 maldet(260275): {sigup} unpacked and installed maldet-clean.tgz
Nov 25 2025 04:27:10 web1 maldet(260275): {sigup} signature set update completed
Nov 25 2025 04:27:10 web1 maldet(260275): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 25 2025 04:27:10 web1 maldet(260481): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 25 2025 04:27:10 web1 maldet(260481): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 25 2025 04:27:10 web1 maldet(260481): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 25 2025 04:27:10 web1 maldet(260481): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 25 2025 04:27:10 web1 maldet(260481): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 25 2025 04:27:50 web1 maldet(260481): {scan} file list completed in 40s, found 3849 files...
Nov 25 2025 04:27:50 web1 maldet(260481): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 25 2025 04:27:50 web1 maldet(260481): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3849 files) in progress...
Nov 25 2025 04:28:50 web1 maldet(260481): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3849, malware hits 0, cleaned hits 0, time 100s
Nov 25 2025 04:28:50 web1 maldet(260481): {scan} scan report saved, to view run: maldet --report 251125-0427.260481
Nov 26 2025 04:13:44 web1 maldet(734243): {update} checking for available updates...
Nov 26 2025 04:13:44 web1 maldet(734243): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 26 2025 04:13:44 web1 maldet(734243): {update} hashing install files and checking against server...
Nov 26 2025 04:13:44 web1 maldet(734243): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 26 2025 04:13:44 web1 maldet(734243): {update} latest version already installed.
Nov 26 2025 04:13:44 web1 maldet(734352): {sigup} performing signature update check...
Nov 26 2025 04:13:44 web1 maldet(734352): {sigup} local signature set is version 202511251727973
Nov 26 2025 04:13:45 web1 maldet(734352): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 26 2025 04:13:45 web1 maldet(734352): {sigup} latest signature set already installed
Nov 26 2025 04:13:45 web1 maldet(734440): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 26 2025 04:13:45 web1 maldet(734440): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 26 2025 04:13:45 web1 maldet(734440): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 26 2025 04:13:45 web1 maldet(734440): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 26 2025 04:13:45 web1 maldet(734440): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 26 2025 04:14:22 web1 maldet(734440): {scan} file list completed in 37s, found 5842 files...
Nov 26 2025 04:14:22 web1 maldet(734440): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 26 2025 04:14:22 web1 maldet(734440): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5842 files) in progress...
Nov 26 2025 04:16:01 web1 maldet(734440): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5842, malware hits 0, cleaned hits 0, time 136s
Nov 26 2025 04:16:01 web1 maldet(734440): {scan} scan report saved, to view run: maldet --report 251126-0413.734440
Nov 26 2025 07:33:51 web1 maldet(1256): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Nov 27 2025 04:03:33 web1 maldet(355092): {update} checking for available updates...
Nov 27 2025 04:03:34 web1 maldet(355092): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 27 2025 04:03:34 web1 maldet(355092): {update} hashing install files and checking against server...
Nov 27 2025 04:03:34 web1 maldet(355092): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 27 2025 04:03:34 web1 maldet(355092): {update} latest version already installed.
Nov 27 2025 04:03:34 web1 maldet(355201): {sigup} performing signature update check...
Nov 27 2025 04:03:34 web1 maldet(355201): {sigup} local signature set is version 202511251727973
Nov 27 2025 04:03:34 web1 maldet(355201): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 27 2025 04:03:34 web1 maldet(355201): {sigup} latest signature set already installed
Nov 27 2025 04:03:34 web1 maldet(355290): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 27 2025 04:03:34 web1 maldet(355290): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 27 2025 04:03:34 web1 maldet(355290): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 27 2025 04:03:34 web1 maldet(355290): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 27 2025 04:03:34 web1 maldet(355290): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 27 2025 04:04:13 web1 maldet(355290): {scan} file list completed in 39s, found 10014 files...
Nov 27 2025 04:04:13 web1 maldet(355290): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 27 2025 04:04:13 web1 maldet(355290): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (10014 files) in progress...
Nov 27 2025 04:05:32 web1 maldet(355290): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 10014, malware hits 0, cleaned hits 0, time 118s
Nov 27 2025 04:05:32 web1 maldet(355290): {scan} scan report saved, to view run: maldet --report 251127-0403.355290
Nov 28 2025 03:50:55 web1 maldet(778628): {update} checking for available updates...
Nov 28 2025 03:50:56 web1 maldet(778628): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 28 2025 03:50:56 web1 maldet(778628): {update} hashing install files and checking against server...
Nov 28 2025 03:50:56 web1 maldet(778628): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 28 2025 03:50:56 web1 maldet(778628): {update} latest version already installed.
Nov 28 2025 03:50:56 web1 maldet(778738): {sigup} performing signature update check...
Nov 28 2025 03:50:56 web1 maldet(778738): {sigup} local signature set is version 202511251727973
Nov 28 2025 03:50:56 web1 maldet(778738): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 28 2025 03:50:56 web1 maldet(778738): {sigup} new signature set 202511282700055 available
Nov 28 2025 03:50:56 web1 maldet(778738): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Nov 28 2025 03:50:56 web1 maldet(778738): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Nov 28 2025 03:50:56 web1 maldet(778738): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Nov 28 2025 03:50:56 web1 maldet(778738): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Nov 28 2025 03:50:56 web1 maldet(778738): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Nov 28 2025 03:50:56 web1 maldet(778738): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Nov 28 2025 03:50:57 web1 maldet(778738): {sigup} verified md5sum of maldet-sigpack.tgz
Nov 28 2025 03:50:57 web1 maldet(778738): {sigup} unpacked and installed maldet-sigpack.tgz
Nov 28 2025 03:50:57 web1 maldet(778738): {sigup} verified md5sum of maldet-clean.tgz
Nov 28 2025 03:50:57 web1 maldet(778738): {sigup} unpacked and installed maldet-clean.tgz
Nov 28 2025 03:50:57 web1 maldet(778738): {sigup} signature set update completed
Nov 28 2025 03:50:57 web1 maldet(778738): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 28 2025 03:50:57 web1 maldet(778940): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 28 2025 03:50:57 web1 maldet(778940): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 28 2025 03:50:57 web1 maldet(778940): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 28 2025 03:50:57 web1 maldet(778940): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 28 2025 03:50:57 web1 maldet(778940): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 28 2025 03:51:35 web1 maldet(778940): {scan} file list completed in 38s, found 6643 files...
Nov 28 2025 03:51:35 web1 maldet(778940): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 28 2025 03:51:35 web1 maldet(778940): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6643 files) in progress...
Nov 28 2025 03:52:21 web1 maldet(778940): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6643, malware hits 0, cleaned hits 0, time 84s
Nov 28 2025 03:52:21 web1 maldet(778940): {scan} scan report saved, to view run: maldet --report 251128-0350.778940
Nov 29 2025 04:44:51 web1 maldet(1339283): {update} checking for available updates...
Nov 29 2025 04:44:51 web1 maldet(1339283): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 29 2025 04:44:52 web1 maldet(1339283): {update} hashing install files and checking against server...
Nov 29 2025 04:44:52 web1 maldet(1339283): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 29 2025 04:44:52 web1 maldet(1339283): {update} latest version already installed.
Nov 29 2025 04:44:52 web1 maldet(1339393): {sigup} performing signature update check...
Nov 29 2025 04:44:52 web1 maldet(1339393): {sigup} local signature set is version 202511282700055
Nov 29 2025 04:44:52 web1 maldet(1339393): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 29 2025 04:44:52 web1 maldet(1339393): {sigup} latest signature set already installed
Nov 29 2025 04:44:52 web1 maldet(1339481): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 29 2025 04:44:52 web1 maldet(1339481): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 29 2025 04:44:52 web1 maldet(1339481): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 29 2025 04:44:52 web1 maldet(1339481): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 29 2025 04:44:52 web1 maldet(1339481): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 29 2025 04:45:28 web1 maldet(1339481): {scan} file list completed in 36s, found 5489 files...
Nov 29 2025 04:45:28 web1 maldet(1339481): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 29 2025 04:45:28 web1 maldet(1339481): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5489 files) in progress...
Nov 29 2025 04:46:50 web1 maldet(1339481): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5489, malware hits 0, cleaned hits 0, time 118s
Nov 29 2025 04:46:50 web1 maldet(1339481): {scan} scan report saved, to view run: maldet --report 251129-0444.1339481
Nov 29 2025 11:56:30 web1 maldet(1205): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Nov 30 2025 04:05:08 web1 maldet(255431): {update} checking for available updates...
Nov 30 2025 04:05:09 web1 maldet(255431): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Nov 30 2025 04:05:09 web1 maldet(255431): {update} hashing install files and checking against server...
Nov 30 2025 04:05:09 web1 maldet(255431): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Nov 30 2025 04:05:09 web1 maldet(255431): {update} latest version already installed.
Nov 30 2025 04:05:09 web1 maldet(255540): {sigup} performing signature update check...
Nov 30 2025 04:05:09 web1 maldet(255540): {sigup} local signature set is version 202511282700055
Nov 30 2025 04:05:09 web1 maldet(255540): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Nov 30 2025 04:05:09 web1 maldet(255540): {sigup} latest signature set already installed
Nov 30 2025 04:05:09 web1 maldet(255628): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Nov 30 2025 04:05:09 web1 maldet(255628): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Nov 30 2025 04:05:09 web1 maldet(255628): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Nov 30 2025 04:05:09 web1 maldet(255628): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Nov 30 2025 04:05:09 web1 maldet(255628): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Nov 30 2025 04:05:44 web1 maldet(255628): {scan} file list completed in 35s, found 6147 files...
Nov 30 2025 04:05:44 web1 maldet(255628): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Nov 30 2025 04:05:44 web1 maldet(255628): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6147 files) in progress...
Nov 30 2025 04:06:40 web1 maldet(255628): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6147, malware hits 0, cleaned hits 0, time 91s
Nov 30 2025 04:06:40 web1 maldet(255628): {scan} scan report saved, to view run: maldet --report 251130-0405.255628
Dec 01 2025 03:30:43 web1 maldet(680635): {update} checking for available updates...
Dec 01 2025 03:30:43 web1 maldet(680635): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 01 2025 03:30:43 web1 maldet(680635): {update} hashing install files and checking against server...
Dec 01 2025 03:30:43 web1 maldet(680635): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 01 2025 03:30:43 web1 maldet(680635): {update} latest version already installed.
Dec 01 2025 03:30:43 web1 maldet(680746): {sigup} performing signature update check...
Dec 01 2025 03:30:43 web1 maldet(680746): {sigup} local signature set is version 202511282700055
Dec 01 2025 03:30:44 web1 maldet(680746): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 01 2025 03:30:44 web1 maldet(680746): {sigup} new signature set 202512013675489 available
Dec 01 2025 03:30:44 web1 maldet(680746): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 01 2025 03:30:44 web1 maldet(680746): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 01 2025 03:30:44 web1 maldet(680746): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Dec 01 2025 03:30:44 web1 maldet(680746): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 01 2025 03:30:44 web1 maldet(680746): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 01 2025 03:30:44 web1 maldet(680746): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Dec 01 2025 03:30:44 web1 maldet(680746): {sigup} verified md5sum of maldet-sigpack.tgz
Dec 01 2025 03:30:44 web1 maldet(680746): {sigup} unpacked and installed maldet-sigpack.tgz
Dec 01 2025 03:30:44 web1 maldet(680746): {sigup} verified md5sum of maldet-clean.tgz
Dec 01 2025 03:30:44 web1 maldet(680746): {sigup} unpacked and installed maldet-clean.tgz
Dec 01 2025 03:30:44 web1 maldet(680746): {sigup} signature set update completed
Dec 01 2025 03:30:44 web1 maldet(680746): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 01 2025 03:30:44 web1 maldet(680948): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 01 2025 03:30:45 web1 maldet(680948): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 01 2025 03:30:45 web1 maldet(680948): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 01 2025 03:30:45 web1 maldet(680948): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 01 2025 03:30:45 web1 maldet(680948): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 01 2025 03:31:25 web1 maldet(680948): {scan} file list completed in 40s, found 8464 files...
Dec 01 2025 03:31:25 web1 maldet(680948): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 01 2025 03:31:25 web1 maldet(680948): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (8464 files) in progress...
Dec 01 2025 03:32:23 web1 maldet(680948): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 8464, malware hits 0, cleaned hits 0, time 99s
Dec 01 2025 03:32:23 web1 maldet(680948): {scan} scan report saved, to view run: maldet --report 251201-0330.680948
Dec 01 2025 11:09:23 web1 maldet(1176): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 02 2025 03:53:09 web1 maldet(327601): {update} checking for available updates...
Dec 02 2025 03:53:09 web1 maldet(327601): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 02 2025 03:53:09 web1 maldet(327601): {update} hashing install files and checking against server...
Dec 02 2025 03:53:09 web1 maldet(327601): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 02 2025 03:53:09 web1 maldet(327601): {update} latest version already installed.
Dec 02 2025 03:53:09 web1 maldet(327710): {sigup} performing signature update check...
Dec 02 2025 03:53:09 web1 maldet(327710): {sigup} local signature set is version 202512013675489
Dec 02 2025 03:53:09 web1 maldet(327710): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 02 2025 03:53:10 web1 maldet(327710): {sigup} latest signature set already installed
Dec 02 2025 03:53:10 web1 maldet(327798): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 02 2025 03:53:10 web1 maldet(327798): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 02 2025 03:53:10 web1 maldet(327798): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 02 2025 03:53:10 web1 maldet(327798): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 02 2025 03:53:10 web1 maldet(327798): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 02 2025 03:53:47 web1 maldet(327798): {scan} file list completed in 37s, found 7080 files...
Dec 02 2025 03:53:47 web1 maldet(327798): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 02 2025 03:53:47 web1 maldet(327798): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (7080 files) in progress...
Dec 02 2025 03:55:03 web1 maldet(327798): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 7080, malware hits 0, cleaned hits 0, time 113s
Dec 02 2025 03:55:03 web1 maldet(327798): {scan} scan report saved, to view run: maldet --report 251202-0353.327798
Dec 03 2025 03:51:27 web1 maldet(720099): {update} checking for available updates...
Dec 03 2025 03:51:27 web1 maldet(720099): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 03 2025 03:51:27 web1 maldet(720099): {update} hashing install files and checking against server...
Dec 03 2025 03:51:27 web1 maldet(720099): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 03 2025 03:51:27 web1 maldet(720099): {update} latest version already installed.
Dec 03 2025 03:51:27 web1 maldet(720208): {sigup} performing signature update check...
Dec 03 2025 03:51:27 web1 maldet(720208): {sigup} local signature set is version 202512013675489
Dec 03 2025 03:51:27 web1 maldet(720208): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 03 2025 03:51:27 web1 maldet(720208): {sigup} latest signature set already installed
Dec 03 2025 03:51:27 web1 maldet(720296): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 03 2025 03:51:27 web1 maldet(720296): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 03 2025 03:51:27 web1 maldet(720296): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 03 2025 03:51:27 web1 maldet(720296): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 03 2025 03:51:27 web1 maldet(720296): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 03 2025 03:52:06 web1 maldet(720296): {scan} file list completed in 39s, found 17508 files...
Dec 03 2025 03:52:06 web1 maldet(720296): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 03 2025 03:52:06 web1 maldet(720296): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (17508 files) in progress...
Dec 03 2025 03:54:50 web1 maldet(720296): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 17508, malware hits 0, cleaned hits 0, time 203s
Dec 03 2025 03:54:50 web1 maldet(720296): {scan} scan report saved, to view run: maldet --report 251203-0351.720296
Dec 04 2025 03:14:59 web1 maldet(1114224): {update} checking for available updates...
Dec 04 2025 03:14:59 web1 maldet(1114224): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 04 2025 03:14:59 web1 maldet(1114224): {update} hashing install files and checking against server...
Dec 04 2025 03:15:00 web1 maldet(1114224): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 04 2025 03:15:00 web1 maldet(1114224): {update} latest version already installed.
Dec 04 2025 03:15:00 web1 maldet(1114345): {sigup} performing signature update check...
Dec 04 2025 03:15:00 web1 maldet(1114345): {sigup} local signature set is version 202512013675489
Dec 04 2025 03:15:00 web1 maldet(1114345): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 04 2025 03:15:00 web1 maldet(1114345): {sigup} new signature set 20251204452786 available
Dec 04 2025 03:15:00 web1 maldet(1114345): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 04 2025 03:15:00 web1 maldet(1114345): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 04 2025 03:15:00 web1 maldet(1114345): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Dec 04 2025 03:15:00 web1 maldet(1114345): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 04 2025 03:15:00 web1 maldet(1114345): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 04 2025 03:15:00 web1 maldet(1114345): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Dec 04 2025 03:15:00 web1 maldet(1114345): {sigup} verified md5sum of maldet-sigpack.tgz
Dec 04 2025 03:15:01 web1 maldet(1114345): {sigup} unpacked and installed maldet-sigpack.tgz
Dec 04 2025 03:15:01 web1 maldet(1114345): {sigup} verified md5sum of maldet-clean.tgz
Dec 04 2025 03:15:01 web1 maldet(1114345): {sigup} unpacked and installed maldet-clean.tgz
Dec 04 2025 03:15:01 web1 maldet(1114345): {sigup} signature set update completed
Dec 04 2025 03:15:01 web1 maldet(1114345): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 04 2025 03:15:01 web1 maldet(1114558): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 04 2025 03:15:01 web1 maldet(1114558): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 04 2025 03:15:01 web1 maldet(1114558): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 04 2025 03:15:01 web1 maldet(1114558): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 04 2025 03:15:01 web1 maldet(1114558): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 04 2025 03:15:48 web1 maldet(1114558): {scan} file list completed in 47s, found 59294 files...
Dec 04 2025 03:15:48 web1 maldet(1114558): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 04 2025 03:15:48 web1 maldet(1114558): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (59294 files) in progress...
Dec 04 2025 03:20:14 web1 maldet(1114558): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 59294, malware hits 0, cleaned hits 0, time 313s
Dec 04 2025 03:20:14 web1 maldet(1114558): {scan} scan report saved, to view run: maldet --report 251204-0315.1114558
Dec 05 2025 03:55:50 web1 maldet(1517133): {update} checking for available updates...
Dec 05 2025 03:55:51 web1 maldet(1517133): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 05 2025 03:55:51 web1 maldet(1517133): {update} hashing install files and checking against server...
Dec 05 2025 03:55:51 web1 maldet(1517133): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 05 2025 03:55:51 web1 maldet(1517133): {update} latest version already installed.
Dec 05 2025 03:55:51 web1 maldet(1517242): {sigup} performing signature update check...
Dec 05 2025 03:55:51 web1 maldet(1517242): {sigup} local signature set is version 20251204452786
Dec 05 2025 03:55:51 web1 maldet(1517242): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 05 2025 03:55:51 web1 maldet(1517242): {sigup} latest signature set already installed
Dec 05 2025 03:55:51 web1 maldet(1517330): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 05 2025 03:55:51 web1 maldet(1517330): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 05 2025 03:55:51 web1 maldet(1517330): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 05 2025 03:55:51 web1 maldet(1517330): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 05 2025 03:55:51 web1 maldet(1517330): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 05 2025 03:56:35 web1 maldet(1517330): {scan} file list completed in 44s, found 26723 files...
Dec 05 2025 03:56:35 web1 maldet(1517330): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 05 2025 03:56:35 web1 maldet(1517330): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (26723 files) in progress...
Dec 05 2025 03:59:52 web1 maldet(1517330): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 26723, malware hits 0, cleaned hits 0, time 241s
Dec 05 2025 03:59:52 web1 maldet(1517330): {scan} scan report saved, to view run: maldet --report 251205-0355.1517330
Dec 05 2025 12:51:45 web1 maldet(1174): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 05 2025 17:06:53 web1 maldet(1161): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 05 2025 19:06:27 web1 maldet(1178): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 05 2025 19:23:53 web1 maldet(1169): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 05 2025 19:40:38 web1 maldet(1173): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 06 2025 03:31:50 web1 maldet(156467): {update} checking for available updates...
Dec 06 2025 03:31:50 web1 maldet(156467): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 06 2025 03:31:50 web1 maldet(156467): {update} hashing install files and checking against server...
Dec 06 2025 03:31:50 web1 maldet(156467): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 06 2025 03:31:51 web1 maldet(156467): {update} latest version already installed.
Dec 06 2025 03:31:51 web1 maldet(156576): {sigup} performing signature update check...
Dec 06 2025 03:31:51 web1 maldet(156576): {sigup} local signature set is version 20251204452786
Dec 06 2025 03:31:51 web1 maldet(156576): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 06 2025 03:31:51 web1 maldet(156576): {sigup} latest signature set already installed
Dec 06 2025 03:31:51 web1 maldet(156664): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 06 2025 03:31:51 web1 maldet(156664): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 06 2025 03:31:51 web1 maldet(156664): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 06 2025 03:31:51 web1 maldet(156664): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 06 2025 03:31:51 web1 maldet(156664): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 06 2025 03:32:55 web1 maldet(156664): {scan} file list completed in 64s, found 15228 files...
Dec 06 2025 03:32:55 web1 maldet(156664): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 06 2025 03:32:55 web1 maldet(156664): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (15228 files) in progress...
Dec 06 2025 03:36:53 web1 maldet(156664): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 15228, malware hits 0, cleaned hits 0, time 302s
Dec 06 2025 03:36:53 web1 maldet(156664): {scan} scan report saved, to view run: maldet --report 251206-0331.156664
Dec 06 2025 11:07:15 web1 maldet(1167): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 06 2025 12:53:43 web1 maldet(1158): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 06 2025 13:44:33 web1 maldet(1275): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 07 2025 04:08:47 web1 maldet(325692): {update} checking for available updates...
Dec 07 2025 04:08:47 web1 maldet(325692): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 07 2025 04:08:47 web1 maldet(325692): {update} hashing install files and checking against server...
Dec 07 2025 04:08:47 web1 maldet(325692): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 07 2025 04:08:47 web1 maldet(325692): {update} latest version already installed.
Dec 07 2025 04:08:47 web1 maldet(325805): {sigup} performing signature update check...
Dec 07 2025 04:08:47 web1 maldet(325805): {sigup} local signature set is version 20251204452786
Dec 07 2025 04:08:47 web1 maldet(325805): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 07 2025 04:08:47 web1 maldet(325805): {sigup} new signature set 202512071424671 available
Dec 07 2025 04:08:47 web1 maldet(325805): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 07 2025 04:08:48 web1 maldet(325805): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 07 2025 04:08:48 web1 maldet(325805): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Dec 07 2025 04:08:48 web1 maldet(325805): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 07 2025 04:08:48 web1 maldet(325805): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 07 2025 04:08:48 web1 maldet(325805): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Dec 07 2025 04:08:48 web1 maldet(325805): {sigup} verified md5sum of maldet-sigpack.tgz
Dec 07 2025 04:08:48 web1 maldet(325805): {sigup} unpacked and installed maldet-sigpack.tgz
Dec 07 2025 04:08:48 web1 maldet(325805): {sigup} verified md5sum of maldet-clean.tgz
Dec 07 2025 04:08:48 web1 maldet(325805): {sigup} unpacked and installed maldet-clean.tgz
Dec 07 2025 04:08:48 web1 maldet(325805): {sigup} signature set update completed
Dec 07 2025 04:08:48 web1 maldet(325805): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 07 2025 04:08:48 web1 maldet(326011): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 07 2025 04:08:48 web1 maldet(326011): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 07 2025 04:08:48 web1 maldet(326011): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 07 2025 04:08:48 web1 maldet(326011): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 07 2025 04:08:48 web1 maldet(326011): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 07 2025 04:09:27 web1 maldet(326011): {scan} file list completed in 39s, found 4187 files...
Dec 07 2025 04:09:27 web1 maldet(326011): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 07 2025 04:09:27 web1 maldet(326011): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4187 files) in progress...
Dec 07 2025 04:10:29 web1 maldet(326011): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4187, malware hits 0, cleaned hits 0, time 101s
Dec 07 2025 04:10:29 web1 maldet(326011): {scan} scan report saved, to view run: maldet --report 251207-0408.326011
Dec 08 2025 04:15:12 web1 maldet(774990): {update} checking for available updates...
Dec 08 2025 04:15:12 web1 maldet(774990): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 08 2025 04:15:12 web1 maldet(774990): {update} hashing install files and checking against server...
Dec 08 2025 04:15:13 web1 maldet(774990): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 08 2025 04:15:13 web1 maldet(774990): {update} latest version already installed.
Dec 08 2025 04:15:13 web1 maldet(775106): {sigup} performing signature update check...
Dec 08 2025 04:15:13 web1 maldet(775106): {sigup} local signature set is version 202512071424671
Dec 08 2025 04:15:13 web1 maldet(775106): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 08 2025 04:15:13 web1 maldet(775106): {sigup} latest signature set already installed
Dec 08 2025 04:15:13 web1 maldet(775195): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 08 2025 04:15:13 web1 maldet(775195): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 08 2025 04:15:13 web1 maldet(775195): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 08 2025 04:15:13 web1 maldet(775195): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 08 2025 04:15:13 web1 maldet(775195): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 08 2025 04:15:47 web1 maldet(775195): {scan} file list completed in 34s, found 30865 files...
Dec 08 2025 04:15:47 web1 maldet(775195): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 08 2025 04:15:47 web1 maldet(775195): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (30865 files) in progress...
Dec 08 2025 04:19:03 web1 maldet(775195): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 30865, malware hits 0, cleaned hits 0, time 230s
Dec 08 2025 04:19:03 web1 maldet(775195): {scan} scan report saved, to view run: maldet --report 251208-0415.775195
Dec 09 2025 03:29:54 web1 maldet(1255878): {update} checking for available updates...
Dec 09 2025 03:29:54 web1 maldet(1255878): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 09 2025 03:29:54 web1 maldet(1255878): {update} hashing install files and checking against server...
Dec 09 2025 03:29:54 web1 maldet(1255878): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 09 2025 03:29:54 web1 maldet(1255878): {update} latest version already installed.
Dec 09 2025 03:29:54 web1 maldet(1255991): {sigup} performing signature update check...
Dec 09 2025 03:29:54 web1 maldet(1255991): {sigup} local signature set is version 202512071424671
Dec 09 2025 03:29:55 web1 maldet(1255991): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 09 2025 03:29:55 web1 maldet(1255991): {sigup} latest signature set already installed
Dec 09 2025 03:29:55 web1 maldet(1256079): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 09 2025 03:29:55 web1 maldet(1256079): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 09 2025 03:29:55 web1 maldet(1256079): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 09 2025 03:29:55 web1 maldet(1256079): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 09 2025 03:29:55 web1 maldet(1256079): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 09 2025 03:30:30 web1 maldet(1256079): {scan} file list completed in 35s, found 5959 files...
Dec 09 2025 03:30:30 web1 maldet(1256079): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 09 2025 03:30:30 web1 maldet(1256079): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5959 files) in progress...
Dec 09 2025 03:31:58 web1 maldet(1256079): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5959, malware hits 0, cleaned hits 0, time 123s
Dec 09 2025 03:31:58 web1 maldet(1256079): {scan} scan report saved, to view run: maldet --report 251209-0329.1256079
Dec 10 2025 04:57:20 web1 maldet(1784604): {update} checking for available updates...
Dec 10 2025 04:57:20 web1 maldet(1784604): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 10 2025 04:57:20 web1 maldet(1784604): {update} hashing install files and checking against server...
Dec 10 2025 04:57:21 web1 maldet(1784604): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 10 2025 04:57:21 web1 maldet(1784604): {update} latest version already installed.
Dec 10 2025 04:57:21 web1 maldet(1784713): {sigup} performing signature update check...
Dec 10 2025 04:57:21 web1 maldet(1784713): {sigup} local signature set is version 202512071424671
Dec 10 2025 04:57:21 web1 maldet(1784713): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 10 2025 04:57:21 web1 maldet(1784713): {sigup} new signature set 202512102395847 available
Dec 10 2025 04:57:21 web1 maldet(1784713): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 10 2025 04:57:21 web1 maldet(1784713): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 10 2025 04:57:21 web1 maldet(1784713): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Dec 10 2025 04:57:21 web1 maldet(1784713): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 10 2025 04:57:22 web1 maldet(1784713): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 10 2025 04:57:22 web1 maldet(1784713): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Dec 10 2025 04:57:22 web1 maldet(1784713): {sigup} verified md5sum of maldet-sigpack.tgz
Dec 10 2025 04:57:22 web1 maldet(1784713): {sigup} unpacked and installed maldet-sigpack.tgz
Dec 10 2025 04:57:22 web1 maldet(1784713): {sigup} verified md5sum of maldet-clean.tgz
Dec 10 2025 04:57:22 web1 maldet(1784713): {sigup} unpacked and installed maldet-clean.tgz
Dec 10 2025 04:57:22 web1 maldet(1784713): {sigup} signature set update completed
Dec 10 2025 04:57:22 web1 maldet(1784713): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 10 2025 04:57:22 web1 maldet(1784915): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 10 2025 04:57:22 web1 maldet(1784915): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 10 2025 04:57:22 web1 maldet(1784915): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 10 2025 04:57:22 web1 maldet(1784915): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 10 2025 04:57:22 web1 maldet(1784915): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 10 2025 04:57:58 web1 maldet(1784915): {scan} file list completed in 36s, found 32931 files...
Dec 10 2025 04:57:58 web1 maldet(1784915): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 10 2025 04:57:58 web1 maldet(1784915): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (32931 files) in progress...
Dec 10 2025 05:01:38 web1 maldet(1784915): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 32931, malware hits 0, cleaned hits 0, time 256s
Dec 10 2025 05:01:38 web1 maldet(1784915): {scan} scan report saved, to view run: maldet --report 251210-0457.1784915
Dec 11 2025 00:59:30 web1 maldet(1221): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 11 2025 03:25:21 web1 maldet(41513): {update} checking for available updates...
Dec 11 2025 03:25:21 web1 maldet(41513): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 11 2025 03:25:21 web1 maldet(41513): {update} hashing install files and checking against server...
Dec 11 2025 03:25:21 web1 maldet(41513): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 11 2025 03:25:21 web1 maldet(41513): {update} latest version already installed.
Dec 11 2025 03:25:21 web1 maldet(41625): {sigup} performing signature update check...
Dec 11 2025 03:25:21 web1 maldet(41625): {sigup} local signature set is version 202512102395847
Dec 11 2025 03:25:22 web1 maldet(41625): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 11 2025 03:25:22 web1 maldet(41625): {sigup} latest signature set already installed
Dec 11 2025 03:25:22 web1 maldet(41713): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 11 2025 03:25:22 web1 maldet(41713): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 11 2025 03:25:22 web1 maldet(41713): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 11 2025 03:25:22 web1 maldet(41713): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 11 2025 03:25:22 web1 maldet(41713): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 11 2025 03:25:50 web1 maldet(41713): {scan} file list completed in 28s, found 18312 files...
Dec 11 2025 03:25:50 web1 maldet(41713): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 11 2025 03:25:50 web1 maldet(41713): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (18312 files) in progress...
Dec 11 2025 03:28:52 web1 maldet(41713): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 18312, malware hits 0, cleaned hits 0, time 209s
Dec 11 2025 03:28:52 web1 maldet(41713): {scan} scan report saved, to view run: maldet --report 251211-0325.41713
Dec 11 2025 14:44:49 web1 maldet(1153): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 12 2025 04:03:48 web1 maldet(196325): {update} checking for available updates...
Dec 12 2025 04:03:49 web1 maldet(196325): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 12 2025 04:03:49 web1 maldet(196325): {update} hashing install files and checking against server...
Dec 12 2025 04:03:49 web1 maldet(196325): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 12 2025 04:03:49 web1 maldet(196325): {update} latest version already installed.
Dec 12 2025 04:03:49 web1 maldet(196434): {sigup} performing signature update check...
Dec 12 2025 04:03:49 web1 maldet(196434): {sigup} local signature set is version 202512102395847
Dec 12 2025 04:03:49 web1 maldet(196434): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 12 2025 04:03:49 web1 maldet(196434): {sigup} latest signature set already installed
Dec 12 2025 04:03:49 web1 maldet(196522): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 12 2025 04:03:49 web1 maldet(196522): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 12 2025 04:03:49 web1 maldet(196522): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 12 2025 04:03:49 web1 maldet(196522): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 12 2025 04:03:49 web1 maldet(196522): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 12 2025 04:04:20 web1 maldet(196522): {scan} file list completed in 31s, found 6229 files...
Dec 12 2025 04:04:20 web1 maldet(196522): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 12 2025 04:04:20 web1 maldet(196522): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6229 files) in progress...
Dec 12 2025 04:06:06 web1 maldet(196522): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6229, malware hits 0, cleaned hits 0, time 137s
Dec 12 2025 04:06:06 web1 maldet(196522): {scan} scan report saved, to view run: maldet --report 251212-0403.196522
Dec 13 2025 04:08:26 web1 maldet(574135): {update} checking for available updates...
Dec 13 2025 04:08:26 web1 maldet(574135): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 13 2025 04:08:26 web1 maldet(574135): {update} hashing install files and checking against server...
Dec 13 2025 04:08:26 web1 maldet(574135): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 13 2025 04:08:26 web1 maldet(574135): {update} latest version already installed.
Dec 13 2025 04:08:26 web1 maldet(574245): {sigup} performing signature update check...
Dec 13 2025 04:08:26 web1 maldet(574245): {sigup} local signature set is version 202512102395847
Dec 13 2025 04:08:27 web1 maldet(574245): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 13 2025 04:08:27 web1 maldet(574245): {sigup} new signature set 20251213586061 available
Dec 13 2025 04:08:27 web1 maldet(574245): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 13 2025 04:08:27 web1 maldet(574245): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 13 2025 04:08:27 web1 maldet(574245): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Dec 13 2025 04:08:27 web1 maldet(574245): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 13 2025 04:08:27 web1 maldet(574245): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 13 2025 04:08:27 web1 maldet(574245): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Dec 13 2025 04:08:27 web1 maldet(574245): {sigup} verified md5sum of maldet-sigpack.tgz
Dec 13 2025 04:08:27 web1 maldet(574245): {sigup} unpacked and installed maldet-sigpack.tgz
Dec 13 2025 04:08:27 web1 maldet(574245): {sigup} verified md5sum of maldet-clean.tgz
Dec 13 2025 04:08:27 web1 maldet(574245): {sigup} unpacked and installed maldet-clean.tgz
Dec 13 2025 04:08:27 web1 maldet(574245): {sigup} signature set update completed
Dec 13 2025 04:08:28 web1 maldet(574245): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 13 2025 04:08:28 web1 maldet(574450): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 13 2025 04:08:28 web1 maldet(574450): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 13 2025 04:08:28 web1 maldet(574450): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 13 2025 04:08:28 web1 maldet(574450): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 13 2025 04:08:28 web1 maldet(574450): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 13 2025 04:09:01 web1 maldet(574450): {scan} file list completed in 33s, found 36312 files...
Dec 13 2025 04:09:01 web1 maldet(574450): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 13 2025 04:09:01 web1 maldet(574450): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (36312 files) in progress...
Dec 13 2025 04:12:12 web1 maldet(574450): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 36312, malware hits 0, cleaned hits 0, time 224s
Dec 13 2025 04:12:12 web1 maldet(574450): {scan} scan report saved, to view run: maldet --report 251213-0408.574450
Dec 14 2025 01:06:11 web1 maldet(1149): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 14 2025 03:27:32 web1 maldet(46702): {update} checking for available updates...
Dec 14 2025 03:27:32 web1 maldet(46702): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 14 2025 03:27:32 web1 maldet(46702): {update} hashing install files and checking against server...
Dec 14 2025 03:27:33 web1 maldet(46702): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 14 2025 03:27:33 web1 maldet(46702): {update} latest version already installed.
Dec 14 2025 03:27:33 web1 maldet(46812): {sigup} performing signature update check...
Dec 14 2025 03:27:33 web1 maldet(46812): {sigup} local signature set is version 20251213586061
Dec 14 2025 03:27:33 web1 maldet(46812): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 14 2025 03:27:33 web1 maldet(46812): {sigup} latest signature set already installed
Dec 14 2025 03:27:33 web1 maldet(46900): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 14 2025 03:27:33 web1 maldet(46900): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 14 2025 03:27:33 web1 maldet(46900): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 14 2025 03:27:33 web1 maldet(46900): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 14 2025 03:27:33 web1 maldet(46900): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 14 2025 03:28:00 web1 maldet(46900): {scan} file list completed in 27s, found 1845 files...
Dec 14 2025 03:28:00 web1 maldet(46900): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 14 2025 03:28:00 web1 maldet(46900): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1845 files) in progress...
Dec 14 2025 03:28:27 web1 maldet(46900): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1845, malware hits 0, cleaned hits 0, time 54s
Dec 14 2025 03:28:27 web1 maldet(46900): {scan} scan report saved, to view run: maldet --report 251214-0327.46900
Dec 14 2025 14:54:52 web1 maldet(1160): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 15 2025 04:09:06 web1 maldet(283503): {update} checking for available updates...
Dec 15 2025 04:09:06 web1 maldet(283503): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 15 2025 04:09:06 web1 maldet(283503): {update} hashing install files and checking against server...
Dec 15 2025 04:09:07 web1 maldet(283503): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 15 2025 04:09:07 web1 maldet(283503): {update} latest version already installed.
Dec 15 2025 04:09:07 web1 maldet(283623): {sigup} performing signature update check...
Dec 15 2025 04:09:07 web1 maldet(283623): {sigup} local signature set is version 20251213586061
Dec 15 2025 04:09:07 web1 maldet(283623): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 15 2025 04:09:07 web1 maldet(283623): {sigup} latest signature set already installed
Dec 15 2025 04:09:07 web1 maldet(283711): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 15 2025 04:09:07 web1 maldet(283711): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 15 2025 04:09:07 web1 maldet(283711): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 15 2025 04:09:07 web1 maldet(283711): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 15 2025 04:09:07 web1 maldet(283711): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 15 2025 04:09:39 web1 maldet(283711): {scan} file list completed in 32s, found 16500 files...
Dec 15 2025 04:09:39 web1 maldet(283711): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 15 2025 04:09:39 web1 maldet(283711): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (16500 files) in progress...
Dec 15 2025 04:13:10 web1 maldet(283711): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 16500, malware hits 0, cleaned hits 0, time 243s
Dec 15 2025 04:13:10 web1 maldet(283711): {scan} scan report saved, to view run: maldet --report 251215-0409.283711
Dec 15 2025 12:21:22 web1 maldet(1161): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 15 2025 22:33:46 web1 maldet(1159): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 16 2025 03:59:30 web1 maldet(91076): {update} checking for available updates...
Dec 16 2025 03:59:30 web1 maldet(91076): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 16 2025 03:59:30 web1 maldet(91076): {update} hashing install files and checking against server...
Dec 16 2025 03:59:30 web1 maldet(91076): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 16 2025 03:59:30 web1 maldet(91076): {update} latest version already installed.
Dec 16 2025 03:59:30 web1 maldet(91185): {sigup} performing signature update check...
Dec 16 2025 03:59:30 web1 maldet(91185): {sigup} local signature set is version 20251213586061
Dec 16 2025 03:59:30 web1 maldet(91185): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 16 2025 03:59:31 web1 maldet(91185): {sigup} new signature set 202512161556343 available
Dec 16 2025 03:59:31 web1 maldet(91185): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 16 2025 03:59:31 web1 maldet(91185): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 16 2025 03:59:31 web1 maldet(91185): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Dec 16 2025 03:59:31 web1 maldet(91185): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 16 2025 03:59:31 web1 maldet(91185): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 16 2025 03:59:31 web1 maldet(91185): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Dec 16 2025 03:59:31 web1 maldet(91185): {sigup} verified md5sum of maldet-sigpack.tgz
Dec 16 2025 03:59:31 web1 maldet(91185): {sigup} unpacked and installed maldet-sigpack.tgz
Dec 16 2025 03:59:31 web1 maldet(91185): {sigup} verified md5sum of maldet-clean.tgz
Dec 16 2025 03:59:31 web1 maldet(91185): {sigup} unpacked and installed maldet-clean.tgz
Dec 16 2025 03:59:31 web1 maldet(91185): {sigup} signature set update completed
Dec 16 2025 03:59:31 web1 maldet(91185): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 16 2025 03:59:31 web1 maldet(91395): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 16 2025 03:59:32 web1 maldet(91395): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 16 2025 03:59:32 web1 maldet(91395): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 16 2025 03:59:32 web1 maldet(91395): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 16 2025 03:59:32 web1 maldet(91395): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 16 2025 04:00:03 web1 maldet(91395): {scan} file list completed in 31s, found 12395 files...
Dec 16 2025 04:00:03 web1 maldet(91395): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 16 2025 04:00:03 web1 maldet(91395): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (12395 files) in progress...
Dec 16 2025 04:02:24 web1 maldet(91395): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 12395, malware hits 0, cleaned hits 0, time 173s
Dec 16 2025 04:02:24 web1 maldet(91395): {scan} scan report saved, to view run: maldet --report 251216-0359.91395
Dec 16 2025 13:26:16 web1 maldet(1175): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 16 2025 14:45:23 web1 maldet(1162): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 16 2025 22:59:17 web1 maldet(1161): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 17 2025 04:06:26 web1 maldet(83772): {update} checking for available updates...
Dec 17 2025 04:06:27 web1 maldet(83772): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 17 2025 04:06:27 web1 maldet(83772): {update} hashing install files and checking against server...
Dec 17 2025 04:06:27 web1 maldet(83772): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 17 2025 04:06:27 web1 maldet(83772): {update} latest version already installed.
Dec 17 2025 04:06:27 web1 maldet(83881): {sigup} performing signature update check...
Dec 17 2025 04:06:27 web1 maldet(83881): {sigup} local signature set is version 202512161556343
Dec 17 2025 04:06:27 web1 maldet(83881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 17 2025 04:06:27 web1 maldet(83881): {sigup} latest signature set already installed
Dec 17 2025 04:06:27 web1 maldet(83969): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 17 2025 04:06:27 web1 maldet(83969): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 17 2025 04:06:27 web1 maldet(83969): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 17 2025 04:06:27 web1 maldet(83969): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 17 2025 04:06:27 web1 maldet(83969): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 17 2025 04:06:59 web1 maldet(83969): {scan} file list completed in 32s, found 10091 files...
Dec 17 2025 04:06:59 web1 maldet(83969): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 17 2025 04:06:59 web1 maldet(83969): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (10091 files) in progress...
Dec 17 2025 04:08:29 web1 maldet(83969): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 10091, malware hits 0, cleaned hits 0, time 122s
Dec 17 2025 04:08:29 web1 maldet(83969): {scan} scan report saved, to view run: maldet --report 251217-0406.83969
Dec 17 2025 10:16:00 web1 maldet(1186): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 17 2025 21:01:02 web1 maldet(1167): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 18 2025 04:19:46 web1 maldet(141481): {update} checking for available updates...
Dec 18 2025 04:19:46 web1 maldet(141481): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 18 2025 04:19:46 web1 maldet(141481): {update} hashing install files and checking against server...
Dec 18 2025 04:19:46 web1 maldet(141481): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 18 2025 04:19:46 web1 maldet(141481): {update} latest version already installed.
Dec 18 2025 04:19:46 web1 maldet(141595): {sigup} performing signature update check...
Dec 18 2025 04:19:46 web1 maldet(141595): {sigup} local signature set is version 202512161556343
Dec 18 2025 04:19:46 web1 maldet(141595): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 18 2025 04:19:46 web1 maldet(141595): {sigup} latest signature set already installed
Dec 18 2025 04:19:46 web1 maldet(141684): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 18 2025 04:19:46 web1 maldet(141684): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 18 2025 04:19:46 web1 maldet(141684): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 18 2025 04:19:46 web1 maldet(141684): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 18 2025 04:19:46 web1 maldet(141684): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 18 2025 04:20:19 web1 maldet(141684): {scan} file list completed in 33s, found 11216 files...
Dec 18 2025 04:20:19 web1 maldet(141684): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 18 2025 04:20:19 web1 maldet(141684): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (11216 files) in progress...
Dec 18 2025 04:21:46 web1 maldet(141684): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 11216, malware hits 0, cleaned hits 0, time 120s
Dec 18 2025 04:21:46 web1 maldet(141684): {scan} scan report saved, to view run: maldet --report 251218-0419.141684
Dec 18 2025 05:13:37 web1 maldet(1187): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 18 2025 23:17:20 web1 maldet(1169): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 19 2025 03:53:22 web1 maldet(68269): {update} checking for available updates...
Dec 19 2025 03:53:22 web1 maldet(68269): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 19 2025 03:53:22 web1 maldet(68269): {update} hashing install files and checking against server...
Dec 19 2025 03:53:22 web1 maldet(68269): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 19 2025 03:53:22 web1 maldet(68269): {update} latest version already installed.
Dec 19 2025 03:53:23 web1 maldet(68382): {sigup} performing signature update check...
Dec 19 2025 03:53:23 web1 maldet(68382): {sigup} local signature set is version 202512161556343
Dec 19 2025 03:53:23 web1 maldet(68382): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 19 2025 03:53:23 web1 maldet(68382): {sigup} new signature set 202512192526679 available
Dec 19 2025 03:53:23 web1 maldet(68382): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 19 2025 03:53:23 web1 maldet(68382): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 19 2025 03:53:23 web1 maldet(68382): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Dec 19 2025 03:53:23 web1 maldet(68382): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 19 2025 03:53:23 web1 maldet(68382): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 19 2025 03:53:24 web1 maldet(68382): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Dec 19 2025 03:53:24 web1 maldet(68382): {sigup} verified md5sum of maldet-sigpack.tgz
Dec 19 2025 03:53:24 web1 maldet(68382): {sigup} unpacked and installed maldet-sigpack.tgz
Dec 19 2025 03:53:24 web1 maldet(68382): {sigup} verified md5sum of maldet-clean.tgz
Dec 19 2025 03:53:24 web1 maldet(68382): {sigup} unpacked and installed maldet-clean.tgz
Dec 19 2025 03:53:24 web1 maldet(68382): {sigup} signature set update completed
Dec 19 2025 03:53:24 web1 maldet(68382): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 19 2025 03:53:24 web1 maldet(68584): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 19 2025 03:53:24 web1 maldet(68584): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 19 2025 03:53:24 web1 maldet(68584): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 19 2025 03:53:24 web1 maldet(68584): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 19 2025 03:53:24 web1 maldet(68584): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 19 2025 03:53:56 web1 maldet(68584): {scan} file list completed in 32s, found 19248 files...
Dec 19 2025 03:53:56 web1 maldet(68584): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 19 2025 03:53:56 web1 maldet(68584): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (19248 files) in progress...
Dec 19 2025 03:57:44 web1 maldet(68584): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 19248, malware hits 0, cleaned hits 0, time 260s
Dec 19 2025 03:57:44 web1 maldet(68584): {scan} scan report saved, to view run: maldet --report 251219-0353.68584
Dec 20 2025 01:40:06 web1 maldet(1200): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 20 2025 03:45:21 web1 maldet(40692): {update} checking for available updates...
Dec 20 2025 03:45:21 web1 maldet(40692): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 20 2025 03:45:21 web1 maldet(40692): {update} hashing install files and checking against server...
Dec 20 2025 03:45:21 web1 maldet(40692): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 20 2025 03:45:21 web1 maldet(40692): {update} latest version already installed.
Dec 20 2025 03:45:21 web1 maldet(40801): {sigup} performing signature update check...
Dec 20 2025 03:45:22 web1 maldet(40801): {sigup} local signature set is version 202512192526679
Dec 20 2025 03:45:22 web1 maldet(40801): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 20 2025 03:45:22 web1 maldet(40801): {sigup} latest signature set already installed
Dec 20 2025 03:45:22 web1 maldet(40889): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 20 2025 03:45:22 web1 maldet(40889): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 20 2025 03:45:22 web1 maldet(40889): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 20 2025 03:45:22 web1 maldet(40889): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 20 2025 03:45:22 web1 maldet(40889): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 20 2025 03:45:51 web1 maldet(40889): {scan} file list completed in 29s, found 22970 files...
Dec 20 2025 03:45:51 web1 maldet(40889): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 20 2025 03:45:51 web1 maldet(40889): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (22970 files) in progress...
Dec 20 2025 03:49:12 web1 maldet(40889): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 22970, malware hits 0, cleaned hits 0, time 230s
Dec 20 2025 03:49:12 web1 maldet(40889): {scan} scan report saved, to view run: maldet --report 251220-0345.40889
Dec 20 2025 11:17:32 web1 maldet(1203): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 20 2025 15:30:33 web1 maldet(1173): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 21 2025 04:16:43 web1 maldet(309540): {update} checking for available updates...
Dec 21 2025 04:16:43 web1 maldet(309540): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 21 2025 04:16:44 web1 maldet(309540): {update} hashing install files and checking against server...
Dec 21 2025 04:16:44 web1 maldet(309540): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 21 2025 04:16:44 web1 maldet(309540): {update} latest version already installed.
Dec 21 2025 04:16:44 web1 maldet(309652): {sigup} performing signature update check...
Dec 21 2025 04:16:44 web1 maldet(309652): {sigup} local signature set is version 202512192526679
Dec 21 2025 04:16:44 web1 maldet(309652): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 21 2025 04:16:44 web1 maldet(309652): {sigup} latest signature set already installed
Dec 21 2025 04:16:44 web1 maldet(309741): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 21 2025 04:16:44 web1 maldet(309741): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 21 2025 04:16:44 web1 maldet(309741): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 21 2025 04:16:44 web1 maldet(309741): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 21 2025 04:16:44 web1 maldet(309741): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 21 2025 04:17:15 web1 maldet(309741): {scan} file list completed in 31s, found 4253 files...
Dec 21 2025 04:17:15 web1 maldet(309741): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 21 2025 04:17:15 web1 maldet(309741): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4253 files) in progress...
Dec 21 2025 04:18:16 web1 maldet(309741): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4253, malware hits 0, cleaned hits 0, time 92s
Dec 21 2025 04:18:16 web1 maldet(309741): {scan} scan report saved, to view run: maldet --report 251221-0416.309741
Dec 21 2025 16:38:28 web1 maldet(1169): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 21 2025 22:44:13 web1 maldet(1167): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 22 2025 03:45:37 web1 maldet(100392): {update} checking for available updates...
Dec 22 2025 03:45:37 web1 maldet(100392): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 22 2025 03:45:37 web1 maldet(100392): {update} hashing install files and checking against server...
Dec 22 2025 03:45:37 web1 maldet(100392): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 22 2025 03:45:37 web1 maldet(100392): {update} latest version already installed.
Dec 22 2025 03:45:37 web1 maldet(100502): {sigup} performing signature update check...
Dec 22 2025 03:45:37 web1 maldet(100502): {sigup} local signature set is version 202512192526679
Dec 22 2025 03:45:37 web1 maldet(100502): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 22 2025 03:45:37 web1 maldet(100502): {sigup} new signature set 202512223496934 available
Dec 22 2025 03:45:37 web1 maldet(100502): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 22 2025 03:45:37 web1 maldet(100502): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 22 2025 03:45:38 web1 maldet(100502): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Dec 22 2025 03:45:38 web1 maldet(100502): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 22 2025 03:45:38 web1 maldet(100502): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 22 2025 03:45:38 web1 maldet(100502): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Dec 22 2025 03:45:38 web1 maldet(100502): {sigup} verified md5sum of maldet-sigpack.tgz
Dec 22 2025 03:45:38 web1 maldet(100502): {sigup} unpacked and installed maldet-sigpack.tgz
Dec 22 2025 03:45:38 web1 maldet(100502): {sigup} verified md5sum of maldet-clean.tgz
Dec 22 2025 03:45:38 web1 maldet(100502): {sigup} unpacked and installed maldet-clean.tgz
Dec 22 2025 03:45:38 web1 maldet(100502): {sigup} signature set update completed
Dec 22 2025 03:45:38 web1 maldet(100502): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 22 2025 03:45:38 web1 maldet(100780): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 22 2025 03:45:39 web1 maldet(100780): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 22 2025 03:45:39 web1 maldet(100780): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 22 2025 03:45:39 web1 maldet(100780): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 22 2025 03:45:39 web1 maldet(100780): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 22 2025 03:46:10 web1 maldet(100780): {scan} file list completed in 31s, found 1739 files...
Dec 22 2025 03:46:10 web1 maldet(100780): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 22 2025 03:46:10 web1 maldet(100780): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1739 files) in progress...
Dec 22 2025 03:46:42 web1 maldet(100780): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1739, malware hits 0, cleaned hits 0, time 64s
Dec 22 2025 03:46:42 web1 maldet(100780): {scan} scan report saved, to view run: maldet --report 251222-0345.100780
Dec 23 2025 03:56:57 web1 maldet(729741): {update} checking for available updates...
Dec 23 2025 03:56:57 web1 maldet(729741): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 23 2025 03:56:57 web1 maldet(729741): {update} hashing install files and checking against server...
Dec 23 2025 03:56:58 web1 maldet(729741): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 23 2025 03:56:58 web1 maldet(729741): {update} latest version already installed.
Dec 23 2025 03:56:58 web1 maldet(729850): {sigup} performing signature update check...
Dec 23 2025 03:56:58 web1 maldet(729850): {sigup} local signature set is version 202512223496934
Dec 23 2025 03:56:58 web1 maldet(729850): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 23 2025 03:56:58 web1 maldet(729850): {sigup} latest signature set already installed
Dec 23 2025 03:56:58 web1 maldet(729938): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 23 2025 03:56:58 web1 maldet(729938): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 23 2025 03:56:58 web1 maldet(729938): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 23 2025 03:56:58 web1 maldet(729938): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 23 2025 03:56:58 web1 maldet(729938): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 23 2025 03:57:27 web1 maldet(729938): {scan} file list completed in 29s, found 16035 files...
Dec 23 2025 03:57:27 web1 maldet(729938): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 23 2025 03:57:27 web1 maldet(729938): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (16035 files) in progress...
Dec 23 2025 03:59:38 web1 maldet(729938): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 16035, malware hits 0, cleaned hits 0, time 160s
Dec 23 2025 03:59:38 web1 maldet(729938): {scan} scan report saved, to view run: maldet --report 251223-0356.729938
Dec 23 2025 11:36:17 web1 maldet(1187): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 23 2025 21:49:55 web1 maldet(1181): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 24 2025 03:46:24 web1 maldet(113543): {update} checking for available updates...
Dec 24 2025 03:46:24 web1 maldet(113543): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 24 2025 03:46:24 web1 maldet(113543): {update} hashing install files and checking against server...
Dec 24 2025 03:46:24 web1 maldet(113543): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 24 2025 03:46:24 web1 maldet(113543): {update} latest version already installed.
Dec 24 2025 03:46:24 web1 maldet(113652): {sigup} performing signature update check...
Dec 24 2025 03:46:24 web1 maldet(113652): {sigup} local signature set is version 202512223496934
Dec 24 2025 03:46:24 web1 maldet(113652): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 24 2025 03:46:24 web1 maldet(113652): {sigup} latest signature set already installed
Dec 24 2025 03:46:24 web1 maldet(113741): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 24 2025 03:46:25 web1 maldet(113741): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 24 2025 03:46:25 web1 maldet(113741): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 24 2025 03:46:25 web1 maldet(113741): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 24 2025 03:46:25 web1 maldet(113741): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 24 2025 03:46:59 web1 maldet(113741): {scan} file list completed in 34s, found 249769 files...
Dec 24 2025 03:46:59 web1 maldet(113741): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 24 2025 03:46:59 web1 maldet(113741): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (249769 files) in progress...
Dec 24 2025 04:58:00 web1 maldet(113741): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details!
Dec 24 2025 04:58:00 web1 maldet(113741): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 249769, malware hits 0, cleaned hits 0, time 4296s
Dec 24 2025 04:58:00 web1 maldet(113741): {scan} scan report saved, to view run: maldet --report 251224-0346.113741
Dec 25 2025 03:40:03 web1 maldet(621635): {update} checking for available updates...
Dec 25 2025 03:40:03 web1 maldet(621635): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 25 2025 03:40:03 web1 maldet(621635): {update} hashing install files and checking against server...
Dec 25 2025 03:40:03 web1 maldet(621635): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 25 2025 03:40:03 web1 maldet(621635): {update} latest version already installed.
Dec 25 2025 03:40:03 web1 maldet(621744): {sigup} performing signature update check...
Dec 25 2025 03:40:03 web1 maldet(621744): {sigup} local signature set is version 202512223496934
Dec 25 2025 03:40:03 web1 maldet(621744): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 25 2025 03:40:03 web1 maldet(621744): {sigup} new signature set 20251225273290 available
Dec 25 2025 03:40:03 web1 maldet(621744): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 25 2025 03:40:04 web1 maldet(621744): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
Dec 25 2025 03:40:04 web1 maldet(621744): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5
Dec 25 2025 03:40:04 web1 maldet(621744): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 25 2025 03:40:04 web1 maldet(621744): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
Dec 25 2025 03:40:04 web1 maldet(621744): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5
Dec 25 2025 03:40:04 web1 maldet(621744): {sigup} verified md5sum of maldet-sigpack.tgz
Dec 25 2025 03:40:04 web1 maldet(621744): {sigup} unpacked and installed maldet-sigpack.tgz
Dec 25 2025 03:40:04 web1 maldet(621744): {sigup} verified md5sum of maldet-clean.tgz
Dec 25 2025 03:40:04 web1 maldet(621744): {sigup} unpacked and installed maldet-clean.tgz
Dec 25 2025 03:40:04 web1 maldet(621744): {sigup} signature set update completed
Dec 25 2025 03:40:04 web1 maldet(621744): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 25 2025 03:40:04 web1 maldet(621950): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 25 2025 03:40:04 web1 maldet(621950): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 25 2025 03:40:04 web1 maldet(621950): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 25 2025 03:40:04 web1 maldet(621950): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 25 2025 03:40:04 web1 maldet(621950): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 25 2025 03:40:32 web1 maldet(621950): {scan} file list completed in 28s, found 19347 files...
Dec 25 2025 03:40:32 web1 maldet(621950): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 25 2025 03:40:32 web1 maldet(621950): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (19347 files) in progress...
Dec 25 2025 03:43:55 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c63f82ebb2.php
Dec 25 2025 03:43:55 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c5e84ee335.php
Dec 25 2025 03:43:55 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c6b5d34883.php
Dec 25 2025 03:43:55 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c63e43ef7b.php
Dec 25 2025 03:43:55 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c5e37c2b19.php
Dec 25 2025 03:43:55 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c6adf05b88.php
Dec 25 2025 03:43:55 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c637729b6b.php
Dec 25 2025 03:43:55 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c6bb1e656d.php
Dec 25 2025 03:43:55 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c5f1cd6811.php
Dec 25 2025 03:43:55 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c63f82ebb2.php
Dec 25 2025 03:43:55 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c5e84ee335.php
Dec 25 2025 03:43:56 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c6b5d34883.php
Dec 25 2025 03:43:56 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c63e43ef7b.php
Dec 25 2025 03:43:56 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c5e37c2b19.php
Dec 25 2025 03:43:56 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c6adf05b88.php
Dec 25 2025 03:43:56 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c637729b6b.php
Dec 25 2025 03:43:56 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c6bb1e656d.php
Dec 25 2025 03:43:56 web1 maldet(621950): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-076531784c6d4034820e997b420205a4-ea-php83-php-fpm.service-ZRSLUg/tmp/run_694c5f1cd6811.php
Dec 25 2025 03:43:56 web1 maldet(621950): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 19347, malware hits 18, cleaned hits 0, time 232s
Dec 25 2025 03:43:56 web1 maldet(621950): {scan} scan report saved, to view run: maldet --report 251225-0340.621950
Dec 25 2025 03:43:56 web1 maldet(621950): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 251225-0340.621950
Dec 26 2025 04:00:25 web1 maldet(1068022): {update} checking for available updates...
Dec 26 2025 04:00:25 web1 maldet(1068022): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 26 2025 04:00:25 web1 maldet(1068022): {update} hashing install files and checking against server...
Dec 26 2025 04:00:25 web1 maldet(1068022): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 26 2025 04:00:25 web1 maldet(1068022): {update} latest version already installed.
Dec 26 2025 04:00:25 web1 maldet(1068131): {sigup} performing signature update check...
Dec 26 2025 04:00:25 web1 maldet(1068131): {sigup} local signature set is version 20251225273290
Dec 26 2025 04:00:25 web1 maldet(1068131): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 26 2025 04:00:25 web1 maldet(1068131): {sigup} latest signature set already installed
Dec 26 2025 04:00:25 web1 maldet(1068221): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 26 2025 04:00:25 web1 maldet(1068221): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 26 2025 04:00:26 web1 maldet(1068221): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 26 2025 04:00:26 web1 maldet(1068221): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 26 2025 04:00:26 web1 maldet(1068221): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 26 2025 04:00:55 web1 maldet(1068221): {scan} file list completed in 29s, found 2075 files...
Dec 26 2025 04:00:55 web1 maldet(1068221): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 26 2025 04:00:55 web1 maldet(1068221): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2075 files) in progress...
Dec 26 2025 04:01:32 web1 maldet(1068221): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2075, malware hits 0, cleaned hits 0, time 67s
Dec 26 2025 04:01:32 web1 maldet(1068221): {scan} scan report saved, to view run: maldet --report 251226-0400.1068221
Dec 26 2025 08:27:07 web1 maldet(1152): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 27 2025 03:46:17 web1 maldet(359987): {update} checking for available updates...
Dec 27 2025 03:46:17 web1 maldet(359987): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 27 2025 03:46:17 web1 maldet(359987): {update} hashing install files and checking against server...
Dec 27 2025 03:46:17 web1 maldet(359987): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 27 2025 03:46:17 web1 maldet(359987): {update} latest version already installed.
Dec 27 2025 03:46:17 web1 maldet(360096): {sigup} performing signature update check...
Dec 27 2025 03:46:17 web1 maldet(360096): {sigup} local signature set is version 20251225273290
Dec 27 2025 03:46:17 web1 maldet(360096): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver
Dec 27 2025 03:46:17 web1 maldet(360096): {sigup} latest signature set already installed
Dec 27 2025 03:46:17 web1 maldet(360184): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress
Dec 27 2025 03:46:18 web1 maldet(360184): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER)
Dec 27 2025 03:46:18 web1 maldet(360184): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile...
Dec 27 2025 03:46:18 web1 maldet(360184): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
Dec 27 2025 03:46:18 web1 maldet(360184): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm  -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c  -not -perm 000   -not -uid 0 -not -gid 0  
Dec 27 2025 03:46:46 web1 maldet(360184): {scan} file list completed in 28s, found 1075 files...
Dec 27 2025 03:46:46 web1 maldet(360184): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine...
Dec 27 2025 03:46:46 web1 maldet(360184): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1075 files) in progress...
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0b0b8551c.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f47ccda2fe.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f606a76515.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f6061aa134.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f4816bbf25.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0b0657f5c.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f48148104a.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f605c9f214.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0807a0763.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0ad419af5.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0b08d8512.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f47c727938.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f606600cd9.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0ad1e94d6.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f4811771fb.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f066fd041a.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f480ec6e23.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f6057df396.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f47ca40cec.php
Dec 27 2025 03:47:09 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f5f7d0ab3c.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f606ed1b5d.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f078079369.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f079915b5a.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f081059605.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f07a47ee41.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0b12ab2e7.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f066138dc8.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0acf1f8ef.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f081905917.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f5f8b55dfd.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f5f8454fb4.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f078cc8170.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0b0f8f244.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f07fdc4107.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f480bebd26.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f47c4d8b27.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0acc53b64.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0b0b8551c.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f47ccda2fe.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f606a76515.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f6061aa134.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f4816bbf25.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0b0657f5c.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f48148104a.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f605c9f214.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0807a0763.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0ad419af5.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0b08d8512.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f47c727938.php
Dec 27 2025 03:47:10 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f606600cd9.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0ad1e94d6.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f4811771fb.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f066fd041a.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f480ec6e23.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f6057df396.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f47ca40cec.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f5f7d0ab3c.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f606ed1b5d.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f078079369.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f079915b5a.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f081059605.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f07a47ee41.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0b12ab2e7.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f066138dc8.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0acf1f8ef.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f081905917.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f5f8b55dfd.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f5f8454fb4.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f078cc8170.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0b0f8f244.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f07fdc4107.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f480bebd26.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f47c4d8b27.php
Dec 27 2025 03:47:11 web1 maldet(360184): {hit} malware hit {HEX}php.nested.base64.652 found for /var/tmp/systemd-private-ef3ea8c4bc9943f2a65d4009b9d9d016-ea-php83-php-fpm.service-olWZdn/tmp/run_694f0acc53b64.php
Dec 27 2025 03:47:11 web1 maldet(360184): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1075, malware hits 74, cleaned hits 0, time 54s
Dec 27 2025 03:47:11 web1 maldet(360184): {scan} scan report saved, to view run: maldet --report 251227-0346.360184
Dec 27 2025 03:47:11 web1 maldet(360184): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 251227-0346.360184
Dec 27 2025 13:26:45 web1 maldet(1167): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/
Dec 28 2025 04:13:26 web1 maldet(251105): {update} checking for available updates...
Dec 28 2025 04:13:26 web1 maldet(251105): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver
Dec 28 2025 04:13:26 web1 maldet(251105): {update} hashing install files and checking against server...
Dec 28 2025 04:13:26 web1 maldet(251105): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash
Dec 28 2025 04:13:26 web1 maldet(251105): {update} version check shows latest but hash check failed, forcing update...
Dec 28 2025 04:13:26 web1 maldet(251105): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz
Dec 28 2025 04:13:26 web1 maldet(251105): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5
Dec 28 2025 04:13:26 web1 maldet(251105): {update} verified md5sum of maldetect-current.tar.gz