Linux ip-172-26-2-223 5.4.0-1018-aws #18-Ubuntu SMP Wed Jun 24 01:15:00 UTC 2020 x86_64
Apache
: 172.26.2.223 | : 3.137.142.253
Cant Read [ /etc/named.conf ]
8.1.13
www
www.github.com/MadExploits
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
BLACK DEFEND!
README
+ Create Folder
+ Create File
/
usr /
local /
maldetect.bk837687 /
logs /
[ HOME SHELL ]
Name
Size
Permission
Action
clamscan_log
7.23
KB
-rw-r-----
event_log
84.85
KB
-rw-r--r--
Delete
Unzip
Zip
${this.title}
Close
Code Editor : event_log
Mar 28 2025 06:30:16 ip-172-26-2-223 maldet(3360052): {sigup} performing signature update check... Mar 28 2025 06:30:16 ip-172-26-2-223 maldet(3360052): {sigup} local signature set is version 20250225482944 Mar 28 2025 06:30:16 ip-172-26-2-223 maldet(3360052): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 28 2025 06:30:17 ip-172-26-2-223 maldet(3360052): {sigup} new signature set 202503282537907 available Mar 28 2025 06:30:17 ip-172-26-2-223 maldet(3360052): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 28 2025 06:30:17 ip-172-26-2-223 maldet(3360052): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 28 2025 06:30:57 ip-172-26-2-223 maldet(3360052): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 28 2025 06:30:57 ip-172-26-2-223 maldet(3360052): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 28 2025 06:30:57 ip-172-26-2-223 maldet(3360052): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 28 2025 06:30:57 ip-172-26-2-223 maldet(3360052): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 28 2025 06:30:57 ip-172-26-2-223 maldet(3360052): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Mar 28 2025 06:30:57 ip-172-26-2-223 maldet(3360052): {sigup} verified md5sum of maldet-clean.tgz Mar 28 2025 06:30:57 ip-172-26-2-223 maldet(3360052): {sigup} unpacked and installed maldet-clean.tgz Mar 28 2025 06:30:57 ip-172-26-2-223 maldet(3359616): {update} completed update v1.6.6 3a1792 => v1.6.6 359d25, running signature updates... Mar 28 2025 06:30:57 ip-172-26-2-223 maldet(3360219): {sigup} performing signature update check... Mar 28 2025 06:30:57 ip-172-26-2-223 maldet(3360219): {sigup} local signature set is version 20250225482944 Mar 28 2025 06:30:58 ip-172-26-2-223 maldet(3360219): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 28 2025 06:30:58 ip-172-26-2-223 maldet(3360219): {sigup} new signature set 202503282537907 available Mar 28 2025 06:30:58 ip-172-26-2-223 maldet(3360219): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 28 2025 06:30:59 ip-172-26-2-223 maldet(3360219): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 28 2025 06:30:59 ip-172-26-2-223 maldet(3360219): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 28 2025 06:30:59 ip-172-26-2-223 maldet(3360219): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 28 2025 06:30:59 ip-172-26-2-223 maldet(3360219): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 28 2025 06:30:59 ip-172-26-2-223 maldet(3360219): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 28 2025 06:30:59 ip-172-26-2-223 maldet(3360219): {sigup} verified md5sum of maldet-sigpack.tgz Mar 28 2025 06:30:59 ip-172-26-2-223 maldet(3360219): {sigup} unpacked and installed maldet-sigpack.tgz Mar 28 2025 06:30:59 ip-172-26-2-223 maldet(3360219): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Mar 28 2025 06:30:59 ip-172-26-2-223 maldet(3360219): {sigup} signature set update completed Mar 28 2025 06:30:59 ip-172-26-2-223 maldet(3360219): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 28 2025 06:31:00 ip-172-26-2-223 maldet(3359616): {update} update and config import completed Mar 28 2025 06:31:00 ip-172-26-2-223 maldet(3360414): {sigup} performing signature update check... Mar 28 2025 06:31:00 ip-172-26-2-223 maldet(3360414): {sigup} local signature set is version 202503282537907 Mar 28 2025 06:31:00 ip-172-26-2-223 maldet(3360414): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 28 2025 06:31:00 ip-172-26-2-223 maldet(3360414): {sigup} latest signature set already installed Mar 28 2025 06:31:00 ip-172-26-2-223 maldet(3360498): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 28 2025 06:31:01 ip-172-26-2-223 maldet(3360498): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 28 2025 06:31:01 ip-172-26-2-223 maldet(3360498): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 28 2025 06:31:01 ip-172-26-2-223 maldet(3360498): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 28 2025 06:31:02 ip-172-26-2-223 maldet(3360498): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 28 2025 06:31:08 ip-172-26-2-223 maldet(3360498): {scan} file list completed in 7s, found 9253 files... Mar 28 2025 06:31:08 ip-172-26-2-223 maldet(3360498): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Mar 28 2025 06:31:08 ip-172-26-2-223 maldet(3360498): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (9253 files) in progress... Mar 28 2025 06:34:58 ip-172-26-2-223 maldet(3360498): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 9253, malware hits 0, cleaned hits 0, time 238s Mar 28 2025 06:34:58 ip-172-26-2-223 maldet(3360498): {scan} scan report saved, to view run: maldet --report 250328-0631.3360498 Mar 29 2025 06:37:51 ip-172-26-2-223 maldet(3435702): {update} checking for available updates... Mar 29 2025 06:39:40 ip-172-26-2-223 maldet(3435702): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 29 2025 06:39:40 ip-172-26-2-223 maldet(3435702): {update} hashing install files and checking against server... Mar 29 2025 06:40:00 ip-172-26-2-223 maldet(3435702): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 29 2025 06:40:00 ip-172-26-2-223 maldet(3435702): {update} latest version already installed. Mar 29 2025 06:40:00 ip-172-26-2-223 maldet(3435911): {sigup} performing signature update check... Mar 29 2025 06:40:00 ip-172-26-2-223 maldet(3435911): {sigup} local signature set is version 202503282537907 Mar 29 2025 06:40:39 ip-172-26-2-223 maldet(3435911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 29 2025 06:40:39 ip-172-26-2-223 maldet(3435911): {sigup} new signature set error code: 522 available Mar 29 2025 06:40:39 ip-172-26-2-223 maldet(3435911): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 29 2025 06:42:42 ip-172-26-2-223 maldet(3435911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 29 2025 06:45:42 ip-172-26-2-223 maldet(3435911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 29 2025 06:45:42 ip-172-26-2-223 maldet(3435911): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 29 2025 06:47:32 ip-172-26-2-223 maldet(3435911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 29 2025 06:47:55 ip-172-26-2-223 maldet(3435911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 29 2025 06:47:55 ip-172-26-2-223 maldet(3435911): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Mar 29 2025 06:47:55 ip-172-26-2-223 maldet(3435911): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Mar 29 2025 06:47:55 ip-172-26-2-223 maldet(3436556): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 29 2025 06:47:56 ip-172-26-2-223 maldet(3436556): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 29 2025 06:47:56 ip-172-26-2-223 maldet(3436556): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 29 2025 06:47:56 ip-172-26-2-223 maldet(3436556): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 29 2025 06:47:56 ip-172-26-2-223 maldet(3436556): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 29 2025 06:48:01 ip-172-26-2-223 maldet(3436556): {scan} file list completed in 5s, found 9406 files... Mar 29 2025 06:48:01 ip-172-26-2-223 maldet(3436556): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Mar 29 2025 06:48:01 ip-172-26-2-223 maldet(3436556): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (9406 files) in progress... Mar 29 2025 06:52:05 ip-172-26-2-223 maldet(3436556): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 29 2025 06:52:05 ip-172-26-2-223 maldet(3436556): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 9406, malware hits 0, cleaned hits 0, time 250s Mar 29 2025 06:52:05 ip-172-26-2-223 maldet(3436556): {scan} scan report saved, to view run: maldet --report 250329-0647.3436556 Mar 30 2025 04:36:42 ip-172-26-2-223 maldet(643): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/ Mar 30 2025 04:42:27 ip-172-26-2-223 maldet(621): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/ Mar 30 2025 04:52:49 ip-172-26-2-223 maldet(618): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/ Mar 30 2025 06:29:24 ip-172-26-2-223 maldet(9183): {update} checking for available updates... Mar 30 2025 06:29:44 ip-172-26-2-223 maldet(9183): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 30 2025 06:29:44 ip-172-26-2-223 maldet(9183): {update} hashing install files and checking against server... Mar 30 2025 06:30:23 ip-172-26-2-223 maldet(9183): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 30 2025 06:30:23 ip-172-26-2-223 maldet(9183): {update} version check shows latest but hash check failed, forcing update... Mar 30 2025 06:30:23 ip-172-26-2-223 maldet(9183): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Mar 30 2025 06:32:13 ip-172-26-2-223 maldet(9183): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Mar 30 2025 06:32:13 ip-172-26-2-223 maldet(9183): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Mar 30 2025 06:32:13 ip-172-26-2-223 maldet(9493): {sigup} performing signature update check... Mar 30 2025 06:32:13 ip-172-26-2-223 maldet(9493): {sigup} local signature set is version 202503282537907 Mar 30 2025 06:32:13 ip-172-26-2-223 maldet(9493): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 30 2025 06:32:13 ip-172-26-2-223 maldet(9493): {sigup} latest signature set already installed Mar 30 2025 06:32:13 ip-172-26-2-223 maldet(9577): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 30 2025 06:32:14 ip-172-26-2-223 maldet(9577): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 30 2025 06:32:14 ip-172-26-2-223 maldet(9577): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 30 2025 06:32:14 ip-172-26-2-223 maldet(9577): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 30 2025 06:32:14 ip-172-26-2-223 maldet(9577): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 30 2025 06:32:15 ip-172-26-2-223 maldet(9577): {scan} file list completed in 1s, found 199023 files... Mar 30 2025 06:32:15 ip-172-26-2-223 maldet(9577): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Mar 30 2025 06:32:15 ip-172-26-2-223 maldet(9577): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (199023 files) in progress... Mar 30 2025 06:41:48 ip-172-26-2-223 maldet(9577): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 199023, malware hits 0, cleaned hits 0, time 575s Mar 30 2025 06:41:48 ip-172-26-2-223 maldet(9577): {scan} scan report saved, to view run: maldet --report 250330-0632.9577 Mar 31 2025 06:27:27 ip-172-26-2-223 maldet(61913): {update} checking for available updates... Mar 31 2025 06:28:57 ip-172-26-2-223 maldet(61913): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 31 2025 06:28:57 ip-172-26-2-223 maldet(61913): {update} hashing install files and checking against server... Mar 31 2025 06:30:46 ip-172-26-2-223 maldet(61913): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 31 2025 06:30:46 ip-172-26-2-223 maldet(61913): {update} version check shows latest but hash check failed, forcing update... Mar 31 2025 06:30:46 ip-172-26-2-223 maldet(61913): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Mar 31 2025 06:32:36 ip-172-26-2-223 maldet(61913): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Mar 31 2025 06:32:36 ip-172-26-2-223 maldet(61913): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Mar 31 2025 06:32:36 ip-172-26-2-223 maldet(62164): {sigup} performing signature update check... Mar 31 2025 06:32:36 ip-172-26-2-223 maldet(62164): {sigup} local signature set is version 202503282537907 Mar 31 2025 06:34:26 ip-172-26-2-223 maldet(62164): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 31 2025 06:34:26 ip-172-26-2-223 maldet(62164): {sigup} new signature set error code: 522 available Mar 31 2025 06:34:26 ip-172-26-2-223 maldet(62164): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 31 2025 06:35:16 ip-172-26-2-223 maldet(62164): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 31 2025 06:35:36 ip-172-26-2-223 maldet(62164): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 31 2025 06:35:36 ip-172-26-2-223 maldet(62164): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 31 2025 06:36:15 ip-172-26-2-223 maldet(62164): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 31 2025 06:36:54 ip-172-26-2-223 maldet(62164): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 31 2025 06:36:54 ip-172-26-2-223 maldet(62164): {sigup} verified md5sum of maldet-sigpack.tgz Mar 31 2025 06:36:54 ip-172-26-2-223 maldet(62164): {sigup} unpacked and installed maldet-sigpack.tgz Mar 31 2025 06:36:54 ip-172-26-2-223 maldet(62164): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Mar 31 2025 06:36:54 ip-172-26-2-223 maldet(62164): {sigup} signature set update completed Mar 31 2025 06:36:54 ip-172-26-2-223 maldet(62164): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 31 2025 06:36:54 ip-172-26-2-223 maldet(62462): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 31 2025 06:36:54 ip-172-26-2-223 maldet(62462): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 31 2025 06:36:54 ip-172-26-2-223 maldet(62462): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 31 2025 06:36:54 ip-172-26-2-223 maldet(62462): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 31 2025 06:36:54 ip-172-26-2-223 maldet(62462): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 31 2025 06:36:55 ip-172-26-2-223 maldet(62462): {scan} file list completed in 1s, found 11085 files... Mar 31 2025 06:36:55 ip-172-26-2-223 maldet(62462): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Mar 31 2025 06:36:55 ip-172-26-2-223 maldet(62462): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (11085 files) in progress... Mar 31 2025 06:38:30 ip-172-26-2-223 maldet(62462): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 11085, malware hits 0, cleaned hits 0, time 96s Mar 31 2025 06:38:30 ip-172-26-2-223 maldet(62462): {scan} scan report saved, to view run: maldet --report 250331-0636.62462 Apr 01 2025 06:28:00 ip-172-26-2-223 maldet(108324): {update} checking for available updates... Apr 01 2025 06:28:00 ip-172-26-2-223 maldet(108324): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 01 2025 06:28:00 ip-172-26-2-223 maldet(108324): {update} hashing install files and checking against server... Apr 01 2025 06:28:57 ip-172-26-2-223 maldet(108324): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 01 2025 06:28:57 ip-172-26-2-223 maldet(108324): {update} latest version already installed. Apr 01 2025 06:28:57 ip-172-26-2-223 maldet(108466): {sigup} performing signature update check... Apr 01 2025 06:28:57 ip-172-26-2-223 maldet(108466): {sigup} local signature set is version 202503282537907 Apr 01 2025 06:29:36 ip-172-26-2-223 maldet(108466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 01 2025 06:29:36 ip-172-26-2-223 maldet(108466): {sigup} new signature set error code: 522 available Apr 01 2025 06:29:36 ip-172-26-2-223 maldet(108466): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 01 2025 06:30:45 ip-172-26-2-223 maldet(108466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108466): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108466): {sigup} verified md5sum of maldet-sigpack.tgz Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108466): {sigup} unpacked and installed maldet-sigpack.tgz Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108466): {sigup} verified md5sum of maldet-clean.tgz Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108466): {sigup} unpacked and installed maldet-clean.tgz Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108466): {sigup} signature set update completed Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108466): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108779): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108779): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108779): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108779): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108779): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108779): {scan} file list completed in 0s, found 10521 files... Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108779): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Apr 01 2025 06:30:46 ip-172-26-2-223 maldet(108779): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (10521 files) in progress... Apr 01 2025 06:32:30 ip-172-26-2-223 maldet(108779): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 10521, malware hits 0, cleaned hits 0, time 104s Apr 01 2025 06:32:30 ip-172-26-2-223 maldet(108779): {scan} scan report saved, to view run: maldet --report 250401-0630.108779 Apr 02 2025 06:38:58 ip-172-26-2-223 maldet(162161): {update} checking for available updates... Apr 02 2025 06:39:18 ip-172-26-2-223 maldet(162161): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 02 2025 06:39:18 ip-172-26-2-223 maldet(162161): {update} hashing install files and checking against server... Apr 02 2025 06:40:20 ip-172-26-2-223 maldet(162161): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 02 2025 06:40:20 ip-172-26-2-223 maldet(162161): {update} latest version already installed. Apr 02 2025 06:40:20 ip-172-26-2-223 maldet(162320): {sigup} performing signature update check... Apr 02 2025 06:40:20 ip-172-26-2-223 maldet(162320): {sigup} local signature set is version 202503313275323 Apr 02 2025 06:42:10 ip-172-26-2-223 maldet(162320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 02 2025 06:42:10 ip-172-26-2-223 maldet(162320): {sigup} new signature set error code: 522 available Apr 02 2025 06:42:10 ip-172-26-2-223 maldet(162320): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 02 2025 06:43:40 ip-172-26-2-223 maldet(162320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 02 2025 06:44:22 ip-172-26-2-223 maldet(162320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 02 2025 06:44:22 ip-172-26-2-223 maldet(162320): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 02 2025 06:44:22 ip-172-26-2-223 maldet(162320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 02 2025 06:44:44 ip-172-26-2-223 maldet(162320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 02 2025 06:44:44 ip-172-26-2-223 maldet(162320): {sigup} verified md5sum of maldet-sigpack.tgz Apr 02 2025 06:44:44 ip-172-26-2-223 maldet(162320): {sigup} unpacked and installed maldet-sigpack.tgz Apr 02 2025 06:44:45 ip-172-26-2-223 maldet(162320): {sigup} verified md5sum of maldet-clean.tgz Apr 02 2025 06:44:45 ip-172-26-2-223 maldet(162320): {sigup} unpacked and installed maldet-clean.tgz Apr 02 2025 06:44:45 ip-172-26-2-223 maldet(162320): {sigup} signature set update completed Apr 02 2025 06:44:45 ip-172-26-2-223 maldet(162320): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 02 2025 06:44:45 ip-172-26-2-223 maldet(162596): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 02 2025 06:44:45 ip-172-26-2-223 maldet(162596): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 02 2025 06:44:45 ip-172-26-2-223 maldet(162596): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 02 2025 06:44:45 ip-172-26-2-223 maldet(162596): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 02 2025 06:44:45 ip-172-26-2-223 maldet(162596): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 02 2025 06:44:45 ip-172-26-2-223 maldet(162596): {scan} file list completed in 0s, found 8572 files... Apr 02 2025 06:44:45 ip-172-26-2-223 maldet(162596): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Apr 02 2025 06:44:45 ip-172-26-2-223 maldet(162596): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (8572 files) in progress... Apr 02 2025 06:46:21 ip-172-26-2-223 maldet(162596): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 8572, malware hits 0, cleaned hits 0, time 96s Apr 02 2025 06:46:21 ip-172-26-2-223 maldet(162596): {scan} scan report saved, to view run: maldet --report 250402-0644.162596 Apr 03 2025 06:26:55 ip-172-26-2-223 maldet(204026): {update} checking for available updates... Apr 03 2025 06:27:18 ip-172-26-2-223 maldet(204026): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 03 2025 06:27:18 ip-172-26-2-223 maldet(204026): {update} hashing install files and checking against server... Apr 03 2025 06:28:17 ip-172-26-2-223 maldet(204026): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 03 2025 06:28:17 ip-172-26-2-223 maldet(204026): {update} latest version already installed. Apr 03 2025 06:28:17 ip-172-26-2-223 maldet(204160): {sigup} performing signature update check... Apr 03 2025 06:28:17 ip-172-26-2-223 maldet(204160): {sigup} local signature set is version 202504013916532 Apr 03 2025 06:28:57 ip-172-26-2-223 maldet(204160): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 03 2025 06:28:57 ip-172-26-2-223 maldet(204160): {sigup} latest signature set already installed Apr 03 2025 06:28:57 ip-172-26-2-223 maldet(204255): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 03 2025 06:28:57 ip-172-26-2-223 maldet(204255): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 03 2025 06:28:57 ip-172-26-2-223 maldet(204255): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 03 2025 06:28:57 ip-172-26-2-223 maldet(204255): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 03 2025 06:28:57 ip-172-26-2-223 maldet(204255): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 03 2025 06:28:58 ip-172-26-2-223 maldet(204255): {scan} file list completed in 1s, found 8402 files... Apr 03 2025 06:28:58 ip-172-26-2-223 maldet(204255): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Apr 03 2025 06:28:58 ip-172-26-2-223 maldet(204255): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (8402 files) in progress... Apr 03 2025 06:30:07 ip-172-26-2-223 maldet(204255): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 8402, malware hits 0, cleaned hits 0, time 70s Apr 03 2025 06:30:07 ip-172-26-2-223 maldet(204255): {scan} scan report saved, to view run: maldet --report 250403-0628.204255 Apr 04 2025 06:29:41 ip-172-26-2-223 maldet(245873): {update} checking for available updates... Apr 04 2025 06:30:20 ip-172-26-2-223 maldet(245873): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 04 2025 06:30:20 ip-172-26-2-223 maldet(245873): {update} hashing install files and checking against server... Apr 04 2025 06:30:59 ip-172-26-2-223 maldet(245873): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 04 2025 06:30:59 ip-172-26-2-223 maldet(245873): {update} version check shows latest but hash check failed, forcing update... Apr 04 2025 06:30:59 ip-172-26-2-223 maldet(245873): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Apr 04 2025 06:31:38 ip-172-26-2-223 maldet(245873): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Apr 04 2025 06:31:38 ip-172-26-2-223 maldet(245873): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Apr 04 2025 06:31:38 ip-172-26-2-223 maldet(246070): {sigup} performing signature update check... Apr 04 2025 06:31:38 ip-172-26-2-223 maldet(246070): {sigup} local signature set is version 202504013916532 Apr 04 2025 06:33:27 ip-172-26-2-223 maldet(246070): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 04 2025 06:33:27 ip-172-26-2-223 maldet(246070): {sigup} new signature set error code: 522 available Apr 04 2025 06:33:27 ip-172-26-2-223 maldet(246070): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 04 2025 06:34:42 ip-172-26-2-223 maldet(246070): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 04 2025 06:36:31 ip-172-26-2-223 maldet(246070): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 04 2025 06:36:31 ip-172-26-2-223 maldet(246070): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 04 2025 06:38:26 ip-172-26-2-223 maldet(246070): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 04 2025 06:39:49 ip-172-26-2-223 maldet(246070): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 04 2025 06:39:49 ip-172-26-2-223 maldet(246070): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Apr 04 2025 06:39:49 ip-172-26-2-223 maldet(246070): {sigup} verified md5sum of maldet-clean.tgz Apr 04 2025 06:39:49 ip-172-26-2-223 maldet(246070): {sigup} unpacked and installed maldet-clean.tgz Apr 04 2025 06:39:49 ip-172-26-2-223 maldet(246394): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 04 2025 06:39:49 ip-172-26-2-223 maldet(246394): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 04 2025 06:39:49 ip-172-26-2-223 maldet(246394): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 04 2025 06:39:49 ip-172-26-2-223 maldet(246394): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 04 2025 06:39:49 ip-172-26-2-223 maldet(246394): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 04 2025 06:39:49 ip-172-26-2-223 maldet(246394): {scan} file list completed in 0s, found 10503 files... Apr 04 2025 06:39:49 ip-172-26-2-223 maldet(246394): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Apr 04 2025 06:39:49 ip-172-26-2-223 maldet(246394): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (10503 files) in progress... Apr 04 2025 06:41:21 ip-172-26-2-223 maldet(246394): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Apr 04 2025 06:41:21 ip-172-26-2-223 maldet(246394): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 10503, malware hits 0, cleaned hits 0, time 92s Apr 04 2025 06:41:21 ip-172-26-2-223 maldet(246394): {scan} scan report saved, to view run: maldet --report 250404-0639.246394 Apr 05 2025 06:27:48 ip-172-26-2-223 maldet(288877): {update} checking for available updates... Apr 05 2025 06:28:26 ip-172-26-2-223 maldet(288877): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 05 2025 06:28:26 ip-172-26-2-223 maldet(288877): {update} hashing install files and checking against server... Apr 05 2025 06:30:15 ip-172-26-2-223 maldet(288877): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 05 2025 06:30:15 ip-172-26-2-223 maldet(288877): {update} version check shows latest but hash check failed, forcing update... Apr 05 2025 06:30:15 ip-172-26-2-223 maldet(288877): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Apr 05 2025 06:30:54 ip-172-26-2-223 maldet(288877): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Apr 05 2025 06:30:55 ip-172-26-2-223 maldet(288877): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Apr 05 2025 06:30:55 ip-172-26-2-223 maldet(289139): {sigup} performing signature update check... Apr 05 2025 06:30:55 ip-172-26-2-223 maldet(289139): {sigup} local signature set is version 202504013916532 Apr 05 2025 06:31:24 ip-172-26-2-223 maldet(289139): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 05 2025 06:31:24 ip-172-26-2-223 maldet(289139): {sigup} new signature set 20250404517655 available Apr 05 2025 06:31:24 ip-172-26-2-223 maldet(289139): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 05 2025 06:34:24 ip-172-26-2-223 maldet(289139): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 05 2025 06:37:24 ip-172-26-2-223 maldet(289139): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 05 2025 06:37:24 ip-172-26-2-223 maldet(289139): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 05 2025 06:39:14 ip-172-26-2-223 maldet(289139): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 05 2025 06:41:03 ip-172-26-2-223 maldet(289139): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 05 2025 06:41:03 ip-172-26-2-223 maldet(289139): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Apr 05 2025 06:41:03 ip-172-26-2-223 maldet(289139): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Apr 05 2025 06:41:04 ip-172-26-2-223 maldet(289568): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 05 2025 06:41:04 ip-172-26-2-223 maldet(289568): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 05 2025 06:41:04 ip-172-26-2-223 maldet(289568): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 05 2025 06:41:04 ip-172-26-2-223 maldet(289568): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 05 2025 06:41:04 ip-172-26-2-223 maldet(289568): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 05 2025 06:41:04 ip-172-26-2-223 maldet(289568): {scan} file list completed in 0s, found 7992 files... Apr 05 2025 06:41:04 ip-172-26-2-223 maldet(289568): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Apr 05 2025 06:41:04 ip-172-26-2-223 maldet(289568): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (7992 files) in progress... Apr 05 2025 06:42:03 ip-172-26-2-223 maldet(289568): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 7992, malware hits 0, cleaned hits 0, time 59s Apr 05 2025 06:42:03 ip-172-26-2-223 maldet(289568): {scan} scan report saved, to view run: maldet --report 250405-0641.289568 Apr 06 2025 06:27:59 ip-172-26-2-223 maldet(330988): {update} checking for available updates... Apr 06 2025 06:29:49 ip-172-26-2-223 maldet(330988): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 06 2025 06:29:49 ip-172-26-2-223 maldet(330988): {update} hashing install files and checking against server... Apr 06 2025 06:30:32 ip-172-26-2-223 maldet(330988): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 06 2025 06:30:32 ip-172-26-2-223 maldet(330988): {update} latest version already installed. Apr 06 2025 06:30:33 ip-172-26-2-223 maldet(331168): {sigup} performing signature update check... Apr 06 2025 06:30:33 ip-172-26-2-223 maldet(331168): {sigup} local signature set is version 202504013916532 Apr 06 2025 06:31:12 ip-172-26-2-223 maldet(331168): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 06 2025 06:31:12 ip-172-26-2-223 maldet(331168): {sigup} new signature set error code: 522 available Apr 06 2025 06:31:12 ip-172-26-2-223 maldet(331168): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 06 2025 06:33:01 ip-172-26-2-223 maldet(331168): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 06 2025 06:34:51 ip-172-26-2-223 maldet(331168): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 06 2025 06:34:51 ip-172-26-2-223 maldet(331168): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 06 2025 06:35:16 ip-172-26-2-223 maldet(331168): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 06 2025 06:36:56 ip-172-26-2-223 maldet(331168): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 06 2025 06:36:56 ip-172-26-2-223 maldet(331168): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Apr 06 2025 06:36:56 ip-172-26-2-223 maldet(331168): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Apr 06 2025 06:36:56 ip-172-26-2-223 maldet(331448): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 06 2025 06:36:56 ip-172-26-2-223 maldet(331448): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 06 2025 06:36:56 ip-172-26-2-223 maldet(331448): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 06 2025 06:36:56 ip-172-26-2-223 maldet(331448): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 06 2025 06:36:56 ip-172-26-2-223 maldet(331448): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 06 2025 06:36:56 ip-172-26-2-223 maldet(331448): {scan} file list completed in 0s, found 7590 files... Apr 06 2025 06:36:56 ip-172-26-2-223 maldet(331448): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Apr 06 2025 06:36:56 ip-172-26-2-223 maldet(331448): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (7590 files) in progress... Apr 06 2025 06:37:51 ip-172-26-2-223 maldet(331448): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 7590, malware hits 0, cleaned hits 0, time 55s Apr 06 2025 06:37:51 ip-172-26-2-223 maldet(331448): {scan} scan report saved, to view run: maldet --report 250406-0636.331448 Apr 07 2025 06:28:42 ip-172-26-2-223 maldet(372066): {update} checking for available updates... Apr 07 2025 06:29:49 ip-172-26-2-223 maldet(372066): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 07 2025 06:29:49 ip-172-26-2-223 maldet(372066): {update} hashing install files and checking against server... Apr 07 2025 06:30:29 ip-172-26-2-223 maldet(372066): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 07 2025 06:30:29 ip-172-26-2-223 maldet(372066): {update} version check shows latest but hash check failed, forcing update... Apr 07 2025 06:30:29 ip-172-26-2-223 maldet(372066): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Apr 07 2025 06:32:18 ip-172-26-2-223 maldet(372066): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Apr 07 2025 06:32:18 ip-172-26-2-223 maldet(372066): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Apr 07 2025 06:32:18 ip-172-26-2-223 maldet(372336): {sigup} performing signature update check... Apr 07 2025 06:32:18 ip-172-26-2-223 maldet(372336): {sigup} local signature set is version 202504013916532 Apr 07 2025 06:35:07 ip-172-26-2-223 maldet(372336): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 07 2025 06:35:07 ip-172-26-2-223 maldet(372336): {sigup} new signature set 202504071198007 available Apr 07 2025 06:35:07 ip-172-26-2-223 maldet(372336): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 07 2025 06:36:57 ip-172-26-2-223 maldet(372336): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 07 2025 06:38:12 ip-172-26-2-223 maldet(372336): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 07 2025 06:38:12 ip-172-26-2-223 maldet(372336): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 07 2025 06:40:35 ip-172-26-2-223 maldet(372336): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 07 2025 06:41:48 ip-172-26-2-223 maldet(372336): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 07 2025 06:41:48 ip-172-26-2-223 maldet(372336): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Apr 07 2025 06:41:48 ip-172-26-2-223 maldet(372336): {sigup} verified md5sum of maldet-clean.tgz Apr 07 2025 06:41:48 ip-172-26-2-223 maldet(372336): {sigup} unpacked and installed maldet-clean.tgz Apr 07 2025 06:41:48 ip-172-26-2-223 maldet(372832): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 07 2025 06:41:49 ip-172-26-2-223 maldet(372832): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 07 2025 06:41:49 ip-172-26-2-223 maldet(372832): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 07 2025 06:41:49 ip-172-26-2-223 maldet(372832): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 07 2025 06:41:49 ip-172-26-2-223 maldet(372832): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 07 2025 06:41:49 ip-172-26-2-223 maldet(372832): {scan} file list completed in 0s, found 11106 files... Apr 07 2025 06:41:49 ip-172-26-2-223 maldet(372832): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Apr 07 2025 06:41:49 ip-172-26-2-223 maldet(372832): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (11106 files) in progress... Apr 07 2025 06:43:10 ip-172-26-2-223 maldet(372832): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 11106, malware hits 0, cleaned hits 0, time 82s Apr 07 2025 06:43:10 ip-172-26-2-223 maldet(372832): {scan} scan report saved, to view run: maldet --report 250407-0641.372832 Apr 08 2025 06:30:21 ip-172-26-2-223 maldet(413685): {update} checking for available updates... Apr 08 2025 06:30:43 ip-172-26-2-223 maldet(413685): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 08 2025 06:30:43 ip-172-26-2-223 maldet(413685): {update} hashing install files and checking against server... Apr 08 2025 06:32:33 ip-172-26-2-223 maldet(413685): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 08 2025 06:32:33 ip-172-26-2-223 maldet(413685): {update} version check shows latest but hash check failed, forcing update... Apr 08 2025 06:32:33 ip-172-26-2-223 maldet(413685): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Apr 08 2025 06:33:12 ip-172-26-2-223 maldet(413685): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Apr 08 2025 06:33:12 ip-172-26-2-223 maldet(413685): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Apr 08 2025 06:33:12 ip-172-26-2-223 maldet(413848): {sigup} performing signature update check... Apr 08 2025 06:33:12 ip-172-26-2-223 maldet(413848): {sigup} local signature set is version 202504013916532 Apr 08 2025 06:33:57 ip-172-26-2-223 maldet(413848): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 08 2025 06:33:57 ip-172-26-2-223 maldet(413848): {sigup} new signature set 202504071198007 available Apr 08 2025 06:33:57 ip-172-26-2-223 maldet(413848): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 08 2025 06:35:47 ip-172-26-2-223 maldet(413848): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 08 2025 06:35:47 ip-172-26-2-223 maldet(413848): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 08 2025 06:35:47 ip-172-26-2-223 maldet(413848): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 08 2025 06:36:06 ip-172-26-2-223 maldet(413848): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 08 2025 06:36:37 ip-172-26-2-223 maldet(413848): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 08 2025 06:36:37 ip-172-26-2-223 maldet(413848): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Apr 08 2025 06:36:37 ip-172-26-2-223 maldet(413848): {sigup} verified md5sum of maldet-clean.tgz Apr 08 2025 06:36:37 ip-172-26-2-223 maldet(413848): {sigup} unpacked and installed maldet-clean.tgz Apr 08 2025 06:36:37 ip-172-26-2-223 maldet(414092): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 08 2025 06:36:37 ip-172-26-2-223 maldet(414092): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 08 2025 06:36:37 ip-172-26-2-223 maldet(414092): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 08 2025 06:36:37 ip-172-26-2-223 maldet(414092): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 08 2025 06:36:37 ip-172-26-2-223 maldet(414092): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 08 2025 06:36:38 ip-172-26-2-223 maldet(414092): {scan} file list completed in 1s, found 7593 files... Apr 08 2025 06:36:38 ip-172-26-2-223 maldet(414092): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Apr 08 2025 06:36:38 ip-172-26-2-223 maldet(414092): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (7593 files) in progress... Apr 08 2025 06:37:37 ip-172-26-2-223 maldet(414092): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 7593, malware hits 0, cleaned hits 0, time 60s Apr 08 2025 06:37:37 ip-172-26-2-223 maldet(414092): {scan} scan report saved, to view run: maldet --report 250408-0636.414092 Apr 09 2025 06:26:47 ip-172-26-2-223 maldet(462022): {update} checking for available updates... Apr 09 2025 06:26:52 ip-172-26-2-223 maldet(462022): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 09 2025 06:26:52 ip-172-26-2-223 maldet(462022): {update} hashing install files and checking against server... Apr 09 2025 06:27:08 ip-172-26-2-223 maldet(462022): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 09 2025 06:27:08 ip-172-26-2-223 maldet(462022): {update} latest version already installed. Apr 09 2025 06:27:08 ip-172-26-2-223 maldet(462127): {sigup} performing signature update check... Apr 09 2025 06:27:08 ip-172-26-2-223 maldet(462127): {sigup} local signature set is version 202504013916532 Apr 09 2025 06:27:39 ip-172-26-2-223 maldet(462127): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 09 2025 06:27:39 ip-172-26-2-223 maldet(462127): {sigup} new signature set 202504071198007 available Apr 09 2025 06:27:39 ip-172-26-2-223 maldet(462127): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 09 2025 06:30:40 ip-172-26-2-223 maldet(462127): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 09 2025 06:31:19 ip-172-26-2-223 maldet(462127): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 09 2025 06:31:19 ip-172-26-2-223 maldet(462127): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 09 2025 06:31:58 ip-172-26-2-223 maldet(462127): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 09 2025 06:32:37 ip-172-26-2-223 maldet(462127): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 09 2025 06:32:37 ip-172-26-2-223 maldet(462127): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Apr 09 2025 06:32:37 ip-172-26-2-223 maldet(462127): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Apr 09 2025 06:32:37 ip-172-26-2-223 maldet(462405): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 09 2025 06:32:37 ip-172-26-2-223 maldet(462405): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 09 2025 06:32:37 ip-172-26-2-223 maldet(462405): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 09 2025 06:32:37 ip-172-26-2-223 maldet(462405): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 09 2025 06:32:37 ip-172-26-2-223 maldet(462405): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 09 2025 06:32:38 ip-172-26-2-223 maldet(462405): {scan} file list completed in 1s, found 8011 files... Apr 09 2025 06:32:38 ip-172-26-2-223 maldet(462405): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Apr 09 2025 06:32:38 ip-172-26-2-223 maldet(462405): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (8011 files) in progress... Apr 09 2025 06:33:44 ip-172-26-2-223 maldet(462405): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 8011, malware hits 0, cleaned hits 0, time 67s Apr 09 2025 06:33:44 ip-172-26-2-223 maldet(462405): {scan} scan report saved, to view run: maldet --report 250409-0632.462405 Apr 10 2025 06:27:51 ip-172-26-2-223 maldet(505363): {update} checking for available updates... Apr 10 2025 06:28:39 ip-172-26-2-223 maldet(505363): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 10 2025 06:28:39 ip-172-26-2-223 maldet(505363): {update} hashing install files and checking against server... Apr 10 2025 06:28:39 ip-172-26-2-223 maldet(505363): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 10 2025 06:28:39 ip-172-26-2-223 maldet(505363): {update} latest version already installed. Apr 10 2025 06:28:40 ip-172-26-2-223 maldet(505491): {sigup} performing signature update check... Apr 10 2025 06:28:40 ip-172-26-2-223 maldet(505491): {sigup} local signature set is version 202504013916532 Apr 10 2025 06:30:29 ip-172-26-2-223 maldet(505491): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 10 2025 06:30:29 ip-172-26-2-223 maldet(505491): {sigup} new signature set error code: 522 available Apr 10 2025 06:30:29 ip-172-26-2-223 maldet(505491): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 10 2025 06:31:09 ip-172-26-2-223 maldet(505491): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 10 2025 06:31:48 ip-172-26-2-223 maldet(505491): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 10 2025 06:31:48 ip-172-26-2-223 maldet(505491): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 10 2025 06:32:25 ip-172-26-2-223 maldet(505491): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 10 2025 06:34:15 ip-172-26-2-223 maldet(505491): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 10 2025 06:34:15 ip-172-26-2-223 maldet(505491): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Apr 10 2025 06:34:15 ip-172-26-2-223 maldet(505491): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Apr 10 2025 06:34:15 ip-172-26-2-223 maldet(505761): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 10 2025 06:34:15 ip-172-26-2-223 maldet(505761): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 10 2025 06:34:15 ip-172-26-2-223 maldet(505761): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 10 2025 06:34:15 ip-172-26-2-223 maldet(505761): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 10 2025 06:34:15 ip-172-26-2-223 maldet(505761): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 10 2025 06:34:16 ip-172-26-2-223 maldet(505761): {scan} file list completed in 1s, found 7451 files... Apr 10 2025 06:34:16 ip-172-26-2-223 maldet(505761): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Apr 10 2025 06:34:16 ip-172-26-2-223 maldet(505761): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (7451 files) in progress... Apr 10 2025 06:35:16 ip-172-26-2-223 maldet(505761): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 7451, malware hits 0, cleaned hits 0, time 61s Apr 10 2025 06:35:16 ip-172-26-2-223 maldet(505761): {scan} scan report saved, to view run: maldet --report 250410-0634.505761 Apr 11 2025 06:29:34 ip-172-26-2-223 maldet(545143): {update} checking for available updates... Apr 11 2025 06:29:34 ip-172-26-2-223 maldet(545143): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 11 2025 06:29:34 ip-172-26-2-223 maldet(545143): {update} hashing install files and checking against server... Apr 11 2025 06:30:13 ip-172-26-2-223 maldet(545143): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 11 2025 06:30:13 ip-172-26-2-223 maldet(545143): {update} version check shows latest but hash check failed, forcing update... Apr 11 2025 06:30:13 ip-172-26-2-223 maldet(545143): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Apr 11 2025 06:33:13 ip-172-26-2-223 maldet(545143): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Apr 11 2025 06:33:13 ip-172-26-2-223 maldet(545143): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Apr 11 2025 06:33:13 ip-172-26-2-223 maldet(545367): {sigup} performing signature update check... Apr 11 2025 06:33:13 ip-172-26-2-223 maldet(545367): {sigup} local signature set is version 202504013916532 Apr 11 2025 06:33:52 ip-172-26-2-223 maldet(545367): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 11 2025 06:33:52 ip-172-26-2-223 maldet(545367): {sigup} new signature set error code: 522 available Apr 11 2025 06:33:52 ip-172-26-2-223 maldet(545367): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 11 2025 06:34:31 ip-172-26-2-223 maldet(545367): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 11 2025 06:35:10 ip-172-26-2-223 maldet(545367): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 11 2025 06:35:10 ip-172-26-2-223 maldet(545367): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 11 2025 06:35:53 ip-172-26-2-223 maldet(545367): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 11 2025 06:36:33 ip-172-26-2-223 maldet(545367): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 11 2025 06:36:33 ip-172-26-2-223 maldet(545367): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Apr 11 2025 06:36:33 ip-172-26-2-223 maldet(545367): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Apr 11 2025 06:36:33 ip-172-26-2-223 maldet(545604): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 11 2025 06:36:33 ip-172-26-2-223 maldet(545604): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 11 2025 06:36:33 ip-172-26-2-223 maldet(545604): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 11 2025 06:36:33 ip-172-26-2-223 maldet(545604): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 11 2025 06:36:33 ip-172-26-2-223 maldet(545604): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 11 2025 06:36:33 ip-172-26-2-223 maldet(545604): {scan} file list completed in 0s, found 7562 files... Apr 11 2025 06:36:33 ip-172-26-2-223 maldet(545604): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Apr 11 2025 06:36:33 ip-172-26-2-223 maldet(545604): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (7562 files) in progress... Apr 11 2025 06:37:30 ip-172-26-2-223 maldet(545604): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Apr 11 2025 06:37:31 ip-172-26-2-223 maldet(545604): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 7562, malware hits 0, cleaned hits 0, time 57s Apr 11 2025 06:37:31 ip-172-26-2-223 maldet(545604): {scan} scan report saved, to view run: maldet --report 250411-0636.545604 Apr 12 2025 06:26:57 ip-172-26-2-223 maldet(585981): {update} checking for available updates... Apr 12 2025 06:27:19 ip-172-26-2-223 maldet(585981): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 12 2025 06:27:19 ip-172-26-2-223 maldet(585981): {update} hashing install files and checking against server... Apr 12 2025 06:29:09 ip-172-26-2-223 maldet(585981): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 12 2025 06:29:09 ip-172-26-2-223 maldet(585981): {update} version check shows latest but hash check failed, forcing update... Apr 12 2025 06:29:09 ip-172-26-2-223 maldet(585981): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Apr 12 2025 06:30:59 ip-172-26-2-223 maldet(585981): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Apr 12 2025 06:30:59 ip-172-26-2-223 maldet(585981): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Apr 12 2025 06:30:59 ip-172-26-2-223 maldet(586303): {sigup} performing signature update check... Apr 12 2025 06:30:59 ip-172-26-2-223 maldet(586303): {sigup} local signature set is version 202504013916532 Apr 12 2025 06:31:18 ip-172-26-2-223 maldet(586303): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 12 2025 06:31:18 ip-172-26-2-223 maldet(586303): {sigup} new signature set 202504101870578 available Apr 12 2025 06:31:18 ip-172-26-2-223 maldet(586303): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 12 2025 06:32:09 ip-172-26-2-223 maldet(586303): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 12 2025 06:32:54 ip-172-26-2-223 maldet(586303): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 12 2025 06:32:54 ip-172-26-2-223 maldet(586303): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 12 2025 06:33:27 ip-172-26-2-223 maldet(586303): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 12 2025 06:34:06 ip-172-26-2-223 maldet(586303): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 12 2025 06:34:06 ip-172-26-2-223 maldet(586303): {sigup} verified md5sum of maldet-sigpack.tgz Apr 12 2025 06:34:06 ip-172-26-2-223 maldet(586303): {sigup} unpacked and installed maldet-sigpack.tgz Apr 12 2025 06:34:06 ip-172-26-2-223 maldet(586303): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Apr 12 2025 06:34:06 ip-172-26-2-223 maldet(586303): {sigup} signature set update completed Apr 12 2025 06:34:06 ip-172-26-2-223 maldet(586303): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 12 2025 06:34:06 ip-172-26-2-223 maldet(586536): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 12 2025 06:34:06 ip-172-26-2-223 maldet(586536): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 12 2025 06:34:06 ip-172-26-2-223 maldet(586536): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 12 2025 06:34:06 ip-172-26-2-223 maldet(586536): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 12 2025 06:34:06 ip-172-26-2-223 maldet(586536): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 12 2025 06:34:07 ip-172-26-2-223 maldet(586536): {scan} file list completed in 1s, found 6796 files... Apr 12 2025 06:34:07 ip-172-26-2-223 maldet(586536): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Apr 12 2025 06:34:07 ip-172-26-2-223 maldet(586536): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6796 files) in progress... Apr 12 2025 06:35:08 ip-172-26-2-223 maldet(586536): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6796, malware hits 0, cleaned hits 0, time 62s Apr 12 2025 06:35:08 ip-172-26-2-223 maldet(586536): {scan} scan report saved, to view run: maldet --report 250412-0634.586536 Apr 13 2025 06:28:04 ip-172-26-2-223 maldet(626248): {update} checking for available updates... Apr 13 2025 06:28:43 ip-172-26-2-223 maldet(626248): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 13 2025 06:28:43 ip-172-26-2-223 maldet(626248): {update} hashing install files and checking against server... Apr 13 2025 06:29:32 ip-172-26-2-223 maldet(626248): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 13 2025 06:29:32 ip-172-26-2-223 maldet(626248): {update} latest version already installed. Apr 13 2025 06:29:32 ip-172-26-2-223 maldet(626374): {sigup} performing signature update check... Apr 13 2025 06:29:32 ip-172-26-2-223 maldet(626374): {sigup} local signature set is version 202504101870578 Apr 13 2025 06:31:22 ip-172-26-2-223 maldet(626374): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 13 2025 06:31:22 ip-172-26-2-223 maldet(626374): {sigup} new signature set error code: 522 available Apr 13 2025 06:31:22 ip-172-26-2-223 maldet(626374): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 13 2025 06:33:12 ip-172-26-2-223 maldet(626374): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 13 2025 06:35:01 ip-172-26-2-223 maldet(626374): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 13 2025 06:35:01 ip-172-26-2-223 maldet(626374): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 13 2025 06:36:51 ip-172-26-2-223 maldet(626374): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 13 2025 06:38:40 ip-172-26-2-223 maldet(626374): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 13 2025 06:38:40 ip-172-26-2-223 maldet(626374): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Apr 13 2025 06:38:40 ip-172-26-2-223 maldet(626374): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Apr 13 2025 06:38:41 ip-172-26-2-223 maldet(626812): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 13 2025 06:38:41 ip-172-26-2-223 maldet(626812): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 13 2025 06:38:41 ip-172-26-2-223 maldet(626812): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 13 2025 06:38:41 ip-172-26-2-223 maldet(626812): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 13 2025 06:38:41 ip-172-26-2-223 maldet(626812): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 13 2025 06:38:41 ip-172-26-2-223 maldet(626812): {scan} file list completed in 0s, found 6767 files... Apr 13 2025 06:38:41 ip-172-26-2-223 maldet(626812): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Apr 13 2025 06:38:42 ip-172-26-2-223 maldet(626812): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6767 files) in progress... Apr 13 2025 06:39:31 ip-172-26-2-223 maldet(626812): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6767, malware hits 0, cleaned hits 0, time 50s Apr 13 2025 06:39:31 ip-172-26-2-223 maldet(626812): {scan} scan report saved, to view run: maldet --report 250413-0638.626812 Apr 14 2025 06:28:32 ip-172-26-2-223 maldet(666841): {update} checking for available updates... Apr 14 2025 06:30:22 ip-172-26-2-223 maldet(666841): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 14 2025 06:30:22 ip-172-26-2-223 maldet(666841): {update} hashing install files and checking against server... Apr 14 2025 06:31:31 ip-172-26-2-223 maldet(666841): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 14 2025 06:31:31 ip-172-26-2-223 maldet(666841): {update} latest version already installed. Apr 14 2025 06:31:31 ip-172-26-2-223 maldet(667025): {sigup} performing signature update check... Apr 14 2025 06:31:31 ip-172-26-2-223 maldet(667025): {sigup} local signature set is version 202504101870578 Apr 14 2025 06:32:11 ip-172-26-2-223 maldet(667025): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 14 2025 06:32:11 ip-172-26-2-223 maldet(667025): {sigup} new signature set error code: 522 available Apr 14 2025 06:32:11 ip-172-26-2-223 maldet(667025): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 14 2025 06:34:00 ip-172-26-2-223 maldet(667025): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 14 2025 06:35:30 ip-172-26-2-223 maldet(667025): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 14 2025 06:35:30 ip-172-26-2-223 maldet(667025): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 14 2025 06:37:20 ip-172-26-2-223 maldet(667025): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 14 2025 06:40:20 ip-172-26-2-223 maldet(667025): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 14 2025 06:40:20 ip-172-26-2-223 maldet(667025): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Apr 14 2025 06:40:20 ip-172-26-2-223 maldet(667025): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Apr 14 2025 06:40:20 ip-172-26-2-223 maldet(667388): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 14 2025 06:40:20 ip-172-26-2-223 maldet(667388): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 14 2025 06:40:20 ip-172-26-2-223 maldet(667388): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 14 2025 06:40:20 ip-172-26-2-223 maldet(667388): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 14 2025 06:40:20 ip-172-26-2-223 maldet(667388): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 14 2025 06:40:21 ip-172-26-2-223 maldet(667388): {scan} file list completed in 1s, found 6630 files... Apr 14 2025 06:40:21 ip-172-26-2-223 maldet(667388): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Apr 14 2025 06:40:21 ip-172-26-2-223 maldet(667388): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6630 files) in progress... Apr 14 2025 06:41:08 ip-172-26-2-223 maldet(667388): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6630, malware hits 0, cleaned hits 0, time 48s Apr 14 2025 06:41:08 ip-172-26-2-223 maldet(667388): {scan} scan report saved, to view run: maldet --report 250414-0640.667388 Apr 15 2025 06:27:57 ip-172-26-2-223 maldet(709752): {update} checking for available updates... Apr 15 2025 06:28:21 ip-172-26-2-223 maldet(709752): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 15 2025 06:28:21 ip-172-26-2-223 maldet(709752): {update} hashing install files and checking against server... Apr 15 2025 06:28:21 ip-172-26-2-223 maldet(709752): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 15 2025 06:28:21 ip-172-26-2-223 maldet(709752): {update} latest version already installed. Apr 15 2025 06:28:21 ip-172-26-2-223 maldet(709858): {sigup} performing signature update check... Apr 15 2025 06:28:21 ip-172-26-2-223 maldet(709858): {sigup} local signature set is version 202504101870578 Apr 15 2025 06:28:21 ip-172-26-2-223 maldet(709858): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 15 2025 06:28:22 ip-172-26-2-223 maldet(709858): {sigup} new signature set 202504132544993 available Apr 15 2025 06:28:22 ip-172-26-2-223 maldet(709858): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 15 2025 06:29:01 ip-172-26-2-223 maldet(709858): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 15 2025 06:29:40 ip-172-26-2-223 maldet(709858): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 15 2025 06:29:40 ip-172-26-2-223 maldet(709858): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 15 2025 06:29:40 ip-172-26-2-223 maldet(709858): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 15 2025 06:32:40 ip-172-26-2-223 maldet(709858): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 15 2025 06:32:40 ip-172-26-2-223 maldet(709858): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Apr 15 2025 06:32:40 ip-172-26-2-223 maldet(709858): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Apr 15 2025 06:32:40 ip-172-26-2-223 maldet(710110): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 15 2025 06:32:40 ip-172-26-2-223 maldet(710110): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 15 2025 06:32:40 ip-172-26-2-223 maldet(710110): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 15 2025 06:32:40 ip-172-26-2-223 maldet(710110): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 15 2025 06:32:40 ip-172-26-2-223 maldet(710110): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 15 2025 06:32:41 ip-172-26-2-223 maldet(710110): {scan} file list completed in 1s, found 11855 files... Apr 15 2025 06:32:41 ip-172-26-2-223 maldet(710110): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Apr 15 2025 06:32:41 ip-172-26-2-223 maldet(710110): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (11855 files) in progress... Apr 15 2025 06:34:21 ip-172-26-2-223 maldet(710110): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 11855, malware hits 0, cleaned hits 0, time 101s Apr 15 2025 06:34:21 ip-172-26-2-223 maldet(710110): {scan} scan report saved, to view run: maldet --report 250415-0632.710110 Apr 16 2025 06:28:22 ip-172-26-2-223 maldet(750947): {update} checking for available updates... Apr 16 2025 06:30:12 ip-172-26-2-223 maldet(750947): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 16 2025 06:30:12 ip-172-26-2-223 maldet(750947): {update} hashing install files and checking against server... Apr 16 2025 06:32:02 ip-172-26-2-223 maldet(750947): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 16 2025 06:32:02 ip-172-26-2-223 maldet(750947): {update} version check shows latest but hash check failed, forcing update... Apr 16 2025 06:32:02 ip-172-26-2-223 maldet(750947): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Apr 16 2025 06:32:41 ip-172-26-2-223 maldet(750947): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Apr 16 2025 06:32:41 ip-172-26-2-223 maldet(750947): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Apr 16 2025 06:32:41 ip-172-26-2-223 maldet(751176): {sigup} performing signature update check... Apr 16 2025 06:32:41 ip-172-26-2-223 maldet(751176): {sigup} local signature set is version 202504101870578 Apr 16 2025 06:34:31 ip-172-26-2-223 maldet(751176): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 16 2025 06:34:31 ip-172-26-2-223 maldet(751176): {sigup} new signature set error code: 522 available Apr 16 2025 06:34:31 ip-172-26-2-223 maldet(751176): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 16 2025 06:35:10 ip-172-26-2-223 maldet(751176): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 16 2025 06:35:37 ip-172-26-2-223 maldet(751176): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 16 2025 06:35:37 ip-172-26-2-223 maldet(751176): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 16 2025 06:36:17 ip-172-26-2-223 maldet(751176): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 16 2025 06:36:56 ip-172-26-2-223 maldet(751176): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 16 2025 06:36:56 ip-172-26-2-223 maldet(751176): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Apr 16 2025 06:36:56 ip-172-26-2-223 maldet(751176): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Apr 16 2025 06:36:56 ip-172-26-2-223 maldet(751416): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 16 2025 06:36:56 ip-172-26-2-223 maldet(751416): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 16 2025 06:36:56 ip-172-26-2-223 maldet(751416): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 16 2025 06:36:56 ip-172-26-2-223 maldet(751416): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 16 2025 06:36:56 ip-172-26-2-223 maldet(751416): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 16 2025 06:36:58 ip-172-26-2-223 maldet(751416): {scan} file list completed in 2s, found 6047 files... Apr 16 2025 06:36:58 ip-172-26-2-223 maldet(751416): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Apr 16 2025 06:36:58 ip-172-26-2-223 maldet(751416): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6047 files) in progress... Apr 16 2025 06:38:04 ip-172-26-2-223 maldet(751416): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6047, malware hits 0, cleaned hits 0, time 68s Apr 16 2025 06:38:04 ip-172-26-2-223 maldet(751416): {scan} scan report saved, to view run: maldet --report 250416-0636.751416 Apr 17 2025 06:28:30 ip-172-26-2-223 maldet(798215): {update} checking for available updates... Apr 17 2025 06:29:08 ip-172-26-2-223 maldet(798215): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 17 2025 06:29:08 ip-172-26-2-223 maldet(798215): {update} hashing install files and checking against server... Apr 17 2025 06:29:53 ip-172-26-2-223 maldet(798215): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 17 2025 06:29:53 ip-172-26-2-223 maldet(798215): {update} latest version already installed. Apr 17 2025 06:29:53 ip-172-26-2-223 maldet(798336): {sigup} performing signature update check... Apr 17 2025 06:29:53 ip-172-26-2-223 maldet(798336): {sigup} local signature set is version 202504101870578 Apr 17 2025 06:30:32 ip-172-26-2-223 maldet(798336): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 17 2025 06:30:32 ip-172-26-2-223 maldet(798336): {sigup} new signature set error code: 522 available Apr 17 2025 06:30:32 ip-172-26-2-223 maldet(798336): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 17 2025 06:31:11 ip-172-26-2-223 maldet(798336): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 17 2025 06:34:01 ip-172-26-2-223 maldet(798336): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 17 2025 06:34:01 ip-172-26-2-223 maldet(798336): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 17 2025 06:34:30 ip-172-26-2-223 maldet(798336): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 17 2025 06:36:20 ip-172-26-2-223 maldet(798336): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 17 2025 06:36:20 ip-172-26-2-223 maldet(798336): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Apr 17 2025 06:36:20 ip-172-26-2-223 maldet(798336): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Apr 17 2025 06:36:20 ip-172-26-2-223 maldet(798646): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 17 2025 06:36:20 ip-172-26-2-223 maldet(798646): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 17 2025 06:36:20 ip-172-26-2-223 maldet(798646): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 17 2025 06:36:20 ip-172-26-2-223 maldet(798646): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 17 2025 06:36:20 ip-172-26-2-223 maldet(798646): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 17 2025 06:36:22 ip-172-26-2-223 maldet(798646): {scan} file list completed in 2s, found 9453 files... Apr 17 2025 06:36:22 ip-172-26-2-223 maldet(798646): {scan} found clamav binary at /bin/clamdscan, using clamav scanner engine... Apr 17 2025 06:36:22 ip-172-26-2-223 maldet(798646): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (9453 files) in progress... Apr 17 2025 06:38:05 ip-172-26-2-223 maldet(798646): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 9453, malware hits 0, cleaned hits 0, time 105s Apr 17 2025 06:38:05 ip-172-26-2-223 maldet(798646): {scan} scan report saved, to view run: maldet --report 250417-0636.798646 Apr 18 2025 06:27:33 ip-172-26-2-223 maldet(837339): {update} checking for available updates... Apr 18 2025 06:28:08 ip-172-26-2-223 maldet(837339): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 18 2025 06:28:08 ip-172-26-2-223 maldet(837339): {update} hashing install files and checking against server... Apr 18 2025 06:29:57 ip-172-26-2-223 maldet(837339): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 18 2025 06:29:57 ip-172-26-2-223 maldet(837339): {update} version check shows latest but hash check failed, forcing update... Apr 18 2025 06:29:57 ip-172-26-2-223 maldet(837339): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Apr 18 2025 06:32:00 ip-172-26-2-223 maldet(837339): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Apr 18 2025 06:32:00 ip-172-26-2-223 maldet(837339): {update} verified md5sum of maldetect-current.tar.gz
Close
