⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.81
Server IP:
178.33.27.10
Server:
Linux cpanel.dev-unit.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
Server Software:
Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips
PHP Version:
8.2.25
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
usr
/
local
/
maldetect.last
/
logs
/
View File Name :
event_log
Nov 16 2025 04:00:49 cpanel maldet(25991): {sigup} performing signature update check... Nov 16 2025 04:00:49 cpanel maldet(25991): {sigup} local signature set is version 20250225482944 Nov 16 2025 04:01:23 cpanel maldet(25991): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 16 2025 04:01:23 cpanel maldet(25991): {sigup} new signature set 202511131448686 available Nov 16 2025 04:01:23 cpanel maldet(25991): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 16 2025 04:01:43 cpanel maldet(25991): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 16 2025 04:02:11 cpanel maldet(25991): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 16 2025 04:02:11 cpanel maldet(25991): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 16 2025 04:02:33 cpanel maldet(25991): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 16 2025 04:02:45 cpanel maldet(25991): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 16 2025 04:02:45 cpanel maldet(25991): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Nov 16 2025 04:02:45 cpanel maldet(25991): {sigup} verified md5sum of maldet-clean.tgz Nov 16 2025 04:02:45 cpanel maldet(25991): {sigup} unpacked and installed maldet-clean.tgz Nov 16 2025 04:02:45 cpanel maldet(25297): {update} completed update v1.6.6 3a1792 => v1.6.6 359d25, running signature updates... Nov 16 2025 04:02:45 cpanel maldet(26564): {sigup} performing signature update check... Nov 16 2025 04:02:45 cpanel maldet(26564): {sigup} local signature set is version 20250225482944 Nov 16 2025 04:02:45 cpanel maldet(26564): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 16 2025 04:02:45 cpanel maldet(26564): {sigup} new signature set 202511131448686 available Nov 16 2025 04:02:45 cpanel maldet(26564): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 16 2025 04:02:48 cpanel maldet(26564): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 16 2025 04:02:49 cpanel maldet(26564): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 16 2025 04:02:49 cpanel maldet(26564): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 16 2025 04:02:50 cpanel maldet(26564): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 16 2025 04:02:50 cpanel maldet(26564): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 16 2025 04:02:50 cpanel maldet(26564): {sigup} verified md5sum of maldet-sigpack.tgz Nov 16 2025 04:02:50 cpanel maldet(26564): {sigup} unpacked and installed maldet-sigpack.tgz Nov 16 2025 04:02:50 cpanel maldet(26564): {sigup} verified md5sum of maldet-clean.tgz Nov 16 2025 04:02:50 cpanel maldet(26564): {sigup} unpacked and installed maldet-clean.tgz Nov 16 2025 04:02:50 cpanel maldet(26564): {sigup} signature set update completed Nov 16 2025 04:02:50 cpanel maldet(26564): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 16 2025 04:02:50 cpanel maldet(25297): {update} update and config import completed Nov 16 2025 04:02:50 cpanel maldet(26795): {sigup} performing signature update check... Nov 16 2025 04:02:50 cpanel maldet(26795): {sigup} local signature set is version 202511131448686 Nov 16 2025 04:02:51 cpanel maldet(26795): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 16 2025 04:02:51 cpanel maldet(26795): {sigup} latest signature set already installed Nov 16 2025 04:02:51 cpanel maldet(26888): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 16 2025 04:02:51 cpanel maldet(26888): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 16 2025 04:02:51 cpanel maldet(26888): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 16 2025 04:02:51 cpanel maldet(26888): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 16 2025 04:02:51 cpanel maldet(26888): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 16 2025 04:05:14 cpanel maldet(26888): {scan} file list completed in 143s, found 121 files... Nov 16 2025 04:05:14 cpanel maldet(26888): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Nov 16 2025 04:05:14 cpanel maldet(26888): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (121 files) in progress... Nov 16 2025 04:05:34 cpanel maldet(26888): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 121, malware hits 0, cleaned hits 0, time 163s Nov 16 2025 04:05:34 cpanel maldet(26888): {scan} scan report saved, to view run: maldet --report 251116-0402.26888 Nov 17 2025 04:00:54 cpanel maldet(4157): {update} checking for available updates... Nov 17 2025 04:00:55 cpanel maldet(4157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 17 2025 04:00:55 cpanel maldet(4157): {update} hashing install files and checking against server... Nov 17 2025 04:00:55 cpanel maldet(4157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 17 2025 04:00:55 cpanel maldet(4157): {update} latest version already installed. Nov 17 2025 04:00:55 cpanel maldet(4278): {sigup} performing signature update check... Nov 17 2025 04:00:55 cpanel maldet(4278): {sigup} local signature set is version 202511131448686 Nov 17 2025 04:01:49 cpanel maldet(4278): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 17 2025 04:01:49 cpanel maldet(4278): {sigup} new signature set error code: 525 available Nov 17 2025 04:01:49 cpanel maldet(4278): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 17 2025 04:02:15 cpanel maldet(4278): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 17 2025 04:02:15 cpanel maldet(4278): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 17 2025 04:02:15 cpanel maldet(4278): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 17 2025 04:02:37 cpanel maldet(4278): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 17 2025 04:02:46 cpanel maldet(4278): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 17 2025 04:02:46 cpanel maldet(4278): {sigup} verified md5sum of maldet-sigpack.tgz Nov 17 2025 04:02:46 cpanel maldet(4278): {sigup} unpacked and installed maldet-sigpack.tgz Nov 17 2025 04:02:46 cpanel maldet(4278): {sigup} verified md5sum of maldet-clean.tgz Nov 17 2025 04:02:46 cpanel maldet(4278): {sigup} unpacked and installed maldet-clean.tgz Nov 17 2025 04:02:46 cpanel maldet(4278): {sigup} signature set update completed Nov 17 2025 04:02:46 cpanel maldet(4278): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 17 2025 04:02:46 cpanel maldet(5353): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 17 2025 04:02:46 cpanel maldet(5353): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 17 2025 04:02:46 cpanel maldet(5353): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 17 2025 04:02:46 cpanel maldet(5353): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 17 2025 04:02:46 cpanel maldet(5353): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 17 2025 04:03:58 cpanel maldet(5353): {scan} file list completed in 72s, found 314 files... Nov 17 2025 04:03:58 cpanel maldet(5353): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Nov 17 2025 04:03:58 cpanel maldet(5353): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (314 files) in progress... Nov 17 2025 04:04:15 cpanel maldet(5353): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 314, malware hits 0, cleaned hits 0, time 89s Nov 17 2025 04:04:15 cpanel maldet(5353): {scan} scan report saved, to view run: maldet --report 251117-0402.5353 Nov 18 2025 03:24:31 cpanel maldet(21871): {update} checking for available updates... Nov 18 2025 03:24:31 cpanel maldet(21871): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 18 2025 03:24:31 cpanel maldet(21871): {update} hashing install files and checking against server... Nov 18 2025 03:24:31 cpanel maldet(21871): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 18 2025 03:24:31 cpanel maldet(21871): {update} latest version already installed. Nov 18 2025 03:24:31 cpanel maldet(21988): {sigup} performing signature update check... Nov 18 2025 03:24:31 cpanel maldet(21988): {sigup} local signature set is version 202511162420078 Nov 18 2025 03:24:32 cpanel maldet(21988): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 18 2025 03:24:32 cpanel maldet(21988): {sigup} latest signature set already installed Nov 18 2025 03:24:32 cpanel maldet(22083): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 18 2025 03:24:32 cpanel maldet(22083): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 18 2025 03:24:32 cpanel maldet(22083): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 18 2025 03:24:32 cpanel maldet(22083): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 18 2025 03:24:32 cpanel maldet(22083): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 18 2025 03:25:38 cpanel maldet(22083): {scan} file list completed in 66s, found 423 files... Nov 18 2025 03:25:38 cpanel maldet(22083): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Nov 18 2025 03:25:38 cpanel maldet(22083): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (423 files) in progress... Nov 18 2025 03:25:57 cpanel maldet(22083): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 423, malware hits 0, cleaned hits 0, time 85s Nov 18 2025 03:25:57 cpanel maldet(22083): {scan} scan report saved, to view run: maldet --report 251118-0324.22083 Nov 19 2025 03:30:28 cpanel maldet(12770): {update} checking for available updates... Nov 19 2025 03:30:28 cpanel maldet(12770): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 19 2025 03:30:28 cpanel maldet(12770): {update} hashing install files and checking against server... Nov 19 2025 03:30:29 cpanel maldet(12770): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 19 2025 03:30:29 cpanel maldet(12770): {update} latest version already installed. Nov 19 2025 03:30:29 cpanel maldet(12899): {sigup} performing signature update check... Nov 19 2025 03:30:29 cpanel maldet(12899): {sigup} local signature set is version 202511162420078 Nov 19 2025 03:30:29 cpanel maldet(12899): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 19 2025 03:30:29 cpanel maldet(12899): {sigup} latest signature set already installed Nov 19 2025 03:30:29 cpanel maldet(12998): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 19 2025 03:30:30 cpanel maldet(12998): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 19 2025 03:30:30 cpanel maldet(12998): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 19 2025 03:30:30 cpanel maldet(12998): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 19 2025 03:30:30 cpanel maldet(12998): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 19 2025 03:33:03 cpanel maldet(12998): {scan} file list completed in 153s, found 3170 files... Nov 19 2025 03:33:03 cpanel maldet(12998): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Nov 19 2025 03:33:03 cpanel maldet(12998): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3170 files) in progress... Nov 19 2025 03:34:51 cpanel maldet(12998): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Nov 19 2025 03:34:51 cpanel maldet(12998): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3170, malware hits 0, cleaned hits 0, time 262s Nov 19 2025 03:34:51 cpanel maldet(12998): {scan} scan report saved, to view run: maldet --report 251119-0330.12998 Nov 20 2025 03:24:28 cpanel maldet(27658): {update} checking for available updates... Nov 20 2025 03:24:29 cpanel maldet(27658): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 20 2025 03:24:29 cpanel maldet(27658): {update} hashing install files and checking against server... Nov 20 2025 03:24:29 cpanel maldet(27658): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 20 2025 03:24:29 cpanel maldet(27658): {update} latest version already installed. Nov 20 2025 03:24:29 cpanel maldet(27776): {sigup} performing signature update check... Nov 20 2025 03:24:29 cpanel maldet(27776): {sigup} local signature set is version 202511162420078 Nov 20 2025 03:24:30 cpanel maldet(27776): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 20 2025 03:24:30 cpanel maldet(27776): {sigup} latest signature set already installed Nov 20 2025 03:24:30 cpanel maldet(27873): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 20 2025 03:24:30 cpanel maldet(27873): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 20 2025 03:24:30 cpanel maldet(27873): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 20 2025 03:24:30 cpanel maldet(27873): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 20 2025 03:24:30 cpanel maldet(27873): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 20 2025 03:25:36 cpanel maldet(27873): {scan} file list completed in 66s, found 508 files... Nov 20 2025 03:25:36 cpanel maldet(27873): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Nov 20 2025 03:25:36 cpanel maldet(27873): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (508 files) in progress... Nov 20 2025 03:25:53 cpanel maldet(27873): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 508, malware hits 0, cleaned hits 0, time 83s Nov 20 2025 03:25:53 cpanel maldet(27873): {scan} scan report saved, to view run: maldet --report 251120-0324.27873 Nov 21 2025 03:20:09 cpanel maldet(356): {update} checking for available updates... Nov 21 2025 03:20:09 cpanel maldet(356): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 21 2025 03:20:09 cpanel maldet(356): {update} hashing install files and checking against server... Nov 21 2025 03:20:10 cpanel maldet(356): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 21 2025 03:20:10 cpanel maldet(356): {update} latest version already installed. Nov 21 2025 03:20:10 cpanel maldet(501): {sigup} performing signature update check... Nov 21 2025 03:20:10 cpanel maldet(501): {sigup} local signature set is version 202511162420078 Nov 21 2025 03:20:10 cpanel maldet(501): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 21 2025 03:20:11 cpanel maldet(501): {sigup} latest signature set already installed Nov 21 2025 03:20:11 cpanel maldet(603): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 21 2025 03:20:12 cpanel maldet(603): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 21 2025 03:20:12 cpanel maldet(603): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 21 2025 03:20:12 cpanel maldet(603): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 21 2025 03:20:12 cpanel maldet(603): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 21 2025 03:22:23 cpanel maldet(603): {scan} file list completed in 131s, found 307 files... Nov 21 2025 03:22:23 cpanel maldet(603): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Nov 21 2025 03:22:23 cpanel maldet(603): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (307 files) in progress... Nov 21 2025 03:22:45 cpanel maldet(603): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 307, malware hits 0, cleaned hits 0, time 152s Nov 21 2025 03:22:45 cpanel maldet(603): {scan} scan report saved, to view run: maldet --report 251121-0320.603 Nov 22 2025 03:44:42 cpanel maldet(4457): {update} checking for available updates... Nov 22 2025 03:44:43 cpanel maldet(4457): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 22 2025 03:44:43 cpanel maldet(4457): {update} hashing install files and checking against server... Nov 22 2025 03:44:43 cpanel maldet(4457): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 22 2025 03:44:43 cpanel maldet(4457): {update} latest version already installed. Nov 22 2025 03:44:43 cpanel maldet(4576): {sigup} performing signature update check... Nov 22 2025 03:44:43 cpanel maldet(4576): {sigup} local signature set is version 202511162420078 Nov 22 2025 03:44:44 cpanel maldet(4576): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 22 2025 03:44:44 cpanel maldet(4576): {sigup} latest signature set already installed Nov 22 2025 03:44:44 cpanel maldet(4672): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 22 2025 03:44:44 cpanel maldet(4672): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 22 2025 03:44:44 cpanel maldet(4672): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 22 2025 03:44:44 cpanel maldet(4672): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 22 2025 03:44:44 cpanel maldet(4672): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 22 2025 03:46:44 cpanel maldet(4672): {scan} file list completed in 120s, found 217 files... Nov 22 2025 03:46:44 cpanel maldet(4672): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Nov 22 2025 03:46:44 cpanel maldet(4672): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (217 files) in progress... Nov 22 2025 03:47:08 cpanel maldet(4672): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 217, malware hits 0, cleaned hits 0, time 144s Nov 22 2025 03:47:08 cpanel maldet(4672): {scan} scan report saved, to view run: maldet --report 251122-0344.4672 Nov 23 2025 03:37:53 cpanel maldet(8483): {update} checking for available updates... Nov 23 2025 03:37:53 cpanel maldet(8483): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 23 2025 03:37:53 cpanel maldet(8483): {update} hashing install files and checking against server... Nov 23 2025 03:37:54 cpanel maldet(8483): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 23 2025 03:37:54 cpanel maldet(8483): {update} latest version already installed. Nov 23 2025 03:37:54 cpanel maldet(8602): {sigup} performing signature update check... Nov 23 2025 03:37:54 cpanel maldet(8602): {sigup} local signature set is version 202511162420078 Nov 23 2025 03:37:54 cpanel maldet(8602): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 23 2025 03:37:54 cpanel maldet(8602): {sigup} new signature set 20251122699816 available Nov 23 2025 03:37:54 cpanel maldet(8602): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 23 2025 03:37:55 cpanel maldet(8602): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 23 2025 03:37:56 cpanel maldet(8602): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 23 2025 03:37:56 cpanel maldet(8602): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 23 2025 03:37:56 cpanel maldet(8602): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 23 2025 03:37:56 cpanel maldet(8602): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 23 2025 03:37:56 cpanel maldet(8602): {sigup} verified md5sum of maldet-sigpack.tgz Nov 23 2025 03:37:57 cpanel maldet(8602): {sigup} unpacked and installed maldet-sigpack.tgz Nov 23 2025 03:37:57 cpanel maldet(8602): {sigup} verified md5sum of maldet-clean.tgz Nov 23 2025 03:37:57 cpanel maldet(8602): {sigup} unpacked and installed maldet-clean.tgz Nov 23 2025 03:37:57 cpanel maldet(8602): {sigup} signature set update completed Nov 23 2025 03:37:57 cpanel maldet(8602): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 23 2025 03:37:57 cpanel maldet(8836): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 23 2025 03:37:57 cpanel maldet(8836): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 23 2025 03:37:57 cpanel maldet(8836): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 23 2025 03:37:57 cpanel maldet(8836): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 23 2025 03:37:57 cpanel maldet(8836): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 23 2025 03:39:34 cpanel maldet(8836): {scan} file list completed in 97s, found 142 files... Nov 23 2025 03:39:34 cpanel maldet(8836): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Nov 23 2025 03:39:34 cpanel maldet(8836): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (142 files) in progress... Nov 23 2025 03:39:50 cpanel maldet(8836): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 142, malware hits 0, cleaned hits 0, time 113s Nov 23 2025 03:39:50 cpanel maldet(8836): {scan} scan report saved, to view run: maldet --report 251123-0337.8836 Nov 24 2025 03:57:36 cpanel maldet(3262): {update} checking for available updates... Nov 24 2025 03:57:36 cpanel maldet(3262): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 24 2025 03:57:36 cpanel maldet(3262): {update} hashing install files and checking against server... Nov 24 2025 03:57:36 cpanel maldet(3262): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 24 2025 03:57:37 cpanel maldet(3262): {update} latest version already installed. Nov 24 2025 03:57:37 cpanel maldet(3385): {sigup} performing signature update check... Nov 24 2025 03:57:37 cpanel maldet(3385): {sigup} local signature set is version 20251122699816 Nov 24 2025 03:57:37 cpanel maldet(3385): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 24 2025 03:57:37 cpanel maldet(3385): {sigup} latest signature set already installed Nov 24 2025 03:57:37 cpanel maldet(3512): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 24 2025 03:57:37 cpanel maldet(3512): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 24 2025 03:57:37 cpanel maldet(3512): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 24 2025 03:57:37 cpanel maldet(3512): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 24 2025 03:57:37 cpanel maldet(3512): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 24 2025 03:58:54 cpanel maldet(3512): {scan} file list completed in 77s, found 286 files... Nov 24 2025 03:58:54 cpanel maldet(3512): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Nov 24 2025 03:58:54 cpanel maldet(3512): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (286 files) in progress... Nov 24 2025 03:59:15 cpanel maldet(3512): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 286, malware hits 0, cleaned hits 0, time 98s Nov 24 2025 03:59:15 cpanel maldet(3512): {scan} scan report saved, to view run: maldet --report 251124-0357.3512 Nov 25 2025 03:18:34 cpanel maldet(22302): {update} checking for available updates... Nov 25 2025 03:18:35 cpanel maldet(22302): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 25 2025 03:18:35 cpanel maldet(22302): {update} hashing install files and checking against server... Nov 25 2025 03:18:35 cpanel maldet(22302): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 25 2025 03:18:35 cpanel maldet(22302): {update} latest version already installed. Nov 25 2025 03:18:35 cpanel maldet(22419): {sigup} performing signature update check... Nov 25 2025 03:18:35 cpanel maldet(22419): {sigup} local signature set is version 20251122699816 Nov 25 2025 03:18:36 cpanel maldet(22419): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 25 2025 03:18:36 cpanel maldet(22419): {sigup} latest signature set already installed Nov 25 2025 03:18:36 cpanel maldet(22516): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 25 2025 03:18:36 cpanel maldet(22516): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 25 2025 03:18:36 cpanel maldet(22516): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 25 2025 03:18:36 cpanel maldet(22516): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 25 2025 03:18:36 cpanel maldet(22516): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 25 2025 03:20:22 cpanel maldet(22516): {scan} file list completed in 106s, found 231 files... Nov 25 2025 03:20:22 cpanel maldet(22516): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Nov 25 2025 03:20:22 cpanel maldet(22516): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (231 files) in progress... Nov 25 2025 03:20:43 cpanel maldet(22516): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 231, malware hits 0, cleaned hits 0, time 127s Nov 25 2025 03:20:43 cpanel maldet(22516): {scan} scan report saved, to view run: maldet --report 251125-0318.22516 Nov 26 2025 03:27:18 cpanel maldet(5382): {update} checking for available updates... Nov 26 2025 03:27:19 cpanel maldet(5382): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 26 2025 03:27:19 cpanel maldet(5382): {update} hashing install files and checking against server... Nov 26 2025 03:27:19 cpanel maldet(5382): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 26 2025 03:27:19 cpanel maldet(5382): {update} latest version already installed. Nov 26 2025 03:27:19 cpanel maldet(5499): {sigup} performing signature update check... Nov 26 2025 03:27:19 cpanel maldet(5499): {sigup} local signature set is version 20251122699816 Nov 26 2025 03:27:20 cpanel maldet(5499): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 26 2025 03:27:20 cpanel maldet(5499): {sigup} new signature set 202511251727973 available Nov 26 2025 03:27:20 cpanel maldet(5499): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 26 2025 03:27:21 cpanel maldet(5499): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 26 2025 03:27:21 cpanel maldet(5499): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 26 2025 03:27:21 cpanel maldet(5499): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 26 2025 03:27:21 cpanel maldet(5499): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 26 2025 03:27:22 cpanel maldet(5499): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 26 2025 03:27:22 cpanel maldet(5499): {sigup} verified md5sum of maldet-sigpack.tgz Nov 26 2025 03:27:22 cpanel maldet(5499): {sigup} unpacked and installed maldet-sigpack.tgz Nov 26 2025 03:27:22 cpanel maldet(5499): {sigup} verified md5sum of maldet-clean.tgz Nov 26 2025 03:27:22 cpanel maldet(5499): {sigup} unpacked and installed maldet-clean.tgz Nov 26 2025 03:27:22 cpanel maldet(5499): {sigup} signature set update completed Nov 26 2025 03:27:22 cpanel maldet(5499): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 26 2025 03:27:22 cpanel maldet(5726): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 26 2025 03:27:22 cpanel maldet(5726): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 26 2025 03:27:22 cpanel maldet(5726): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 26 2025 03:27:22 cpanel maldet(5726): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 26 2025 03:27:22 cpanel maldet(5726): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 26 2025 03:28:29 cpanel maldet(5726): {scan} file list completed in 67s, found 310 files... Nov 26 2025 03:28:29 cpanel maldet(5726): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Nov 26 2025 03:28:29 cpanel maldet(5726): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (310 files) in progress... Nov 26 2025 03:28:57 cpanel maldet(5726): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 310, malware hits 0, cleaned hits 0, time 95s Nov 26 2025 03:28:57 cpanel maldet(5726): {scan} scan report saved, to view run: maldet --report 251126-0327.5726 Nov 27 2025 03:22:36 cpanel maldet(2460): {update} checking for available updates... Nov 27 2025 03:22:37 cpanel maldet(2460): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 27 2025 03:22:37 cpanel maldet(2460): {update} hashing install files and checking against server... Nov 27 2025 03:22:37 cpanel maldet(2460): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 27 2025 03:22:37 cpanel maldet(2460): {update} latest version already installed. Nov 27 2025 03:22:37 cpanel maldet(2579): {sigup} performing signature update check... Nov 27 2025 03:22:37 cpanel maldet(2579): {sigup} local signature set is version 202511251727973 Nov 27 2025 03:22:37 cpanel maldet(2579): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 27 2025 03:22:37 cpanel maldet(2579): {sigup} latest signature set already installed Nov 27 2025 03:22:37 cpanel maldet(2673): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 27 2025 03:22:38 cpanel maldet(2673): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 27 2025 03:22:38 cpanel maldet(2673): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 27 2025 03:22:38 cpanel maldet(2673): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 27 2025 03:22:38 cpanel maldet(2673): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 27 2025 03:23:47 cpanel maldet(2673): {scan} file list completed in 69s, found 197 files... Nov 27 2025 03:23:47 cpanel maldet(2673): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Nov 27 2025 03:23:47 cpanel maldet(2673): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (197 files) in progress... Nov 27 2025 03:24:05 cpanel maldet(2673): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 197, malware hits 0, cleaned hits 0, time 88s Nov 27 2025 03:24:05 cpanel maldet(2673): {scan} scan report saved, to view run: maldet --report 251127-0322.2673 Nov 28 2025 01:59:08 cpanel maldet(1049): {mon} could not find monitor mode dependency 'ed' in PATH, please apt/yum/dnf install ed and try again. Nov 28 2025 03:58:29 cpanel maldet(10887): {update} checking for available updates... Nov 28 2025 03:58:29 cpanel maldet(10887): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 28 2025 03:58:29 cpanel maldet(10887): {update} hashing install files and checking against server... Nov 28 2025 03:58:30 cpanel maldet(10887): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 28 2025 03:58:30 cpanel maldet(10887): {update} latest version already installed. Nov 28 2025 03:58:30 cpanel maldet(11004): {sigup} performing signature update check... Nov 28 2025 03:58:30 cpanel maldet(11004): {sigup} local signature set is version 202511251727973 Nov 28 2025 03:58:30 cpanel maldet(11004): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 28 2025 03:58:30 cpanel maldet(11004): {sigup} latest signature set already installed Nov 28 2025 03:58:30 cpanel maldet(11099): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 28 2025 03:58:30 cpanel maldet(11099): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 28 2025 03:58:30 cpanel maldet(11099): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 28 2025 03:58:30 cpanel maldet(11099): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 28 2025 03:58:30 cpanel maldet(11099): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 28 2025 03:59:40 cpanel maldet(11099): {scan} file list completed in 70s, found 164 files... Nov 28 2025 03:59:40 cpanel maldet(11099): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Nov 28 2025 03:59:40 cpanel maldet(11099): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (164 files) in progress... Nov 28 2025 03:59:54 cpanel maldet(11099): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 164, malware hits 0, cleaned hits 0, time 84s Nov 28 2025 03:59:54 cpanel maldet(11099): {scan} scan report saved, to view run: maldet --report 251128-0358.11099 Nov 29 2025 03:20:51 cpanel maldet(14511): {update} checking for available updates... Nov 29 2025 03:20:51 cpanel maldet(14511): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 29 2025 03:20:51 cpanel maldet(14511): {update} hashing install files and checking against server... Nov 29 2025 03:20:52 cpanel maldet(14511): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 29 2025 03:20:52 cpanel maldet(14511): {update} latest version already installed. Nov 29 2025 03:20:52 cpanel maldet(14631): {sigup} performing signature update check... Nov 29 2025 03:20:52 cpanel maldet(14631): {sigup} local signature set is version 202511251727973 Nov 29 2025 03:20:52 cpanel maldet(14631): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 29 2025 03:20:52 cpanel maldet(14631): {sigup} new signature set 202511282700055 available Nov 29 2025 03:20:52 cpanel maldet(14631): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 29 2025 03:20:53 cpanel maldet(14631): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 29 2025 03:20:53 cpanel maldet(14631): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 29 2025 03:20:53 cpanel maldet(14631): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 29 2025 03:20:54 cpanel maldet(14631): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 29 2025 03:20:54 cpanel maldet(14631): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 29 2025 03:20:54 cpanel maldet(14631): {sigup} verified md5sum of maldet-sigpack.tgz Nov 29 2025 03:20:54 cpanel maldet(14631): {sigup} unpacked and installed maldet-sigpack.tgz Nov 29 2025 03:20:54 cpanel maldet(14631): {sigup} verified md5sum of maldet-clean.tgz Nov 29 2025 03:20:54 cpanel maldet(14631): {sigup} unpacked and installed maldet-clean.tgz Nov 29 2025 03:20:54 cpanel maldet(14631): {sigup} signature set update completed Nov 29 2025 03:20:54 cpanel maldet(14631): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 29 2025 03:20:54 cpanel maldet(14858): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 29 2025 03:20:55 cpanel maldet(14858): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 29 2025 03:20:55 cpanel maldet(14858): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 29 2025 03:20:55 cpanel maldet(14858): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 29 2025 03:20:55 cpanel maldet(14858): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 29 2025 03:22:03 cpanel maldet(14858): {scan} file list completed in 68s, found 340 files... Nov 29 2025 03:22:03 cpanel maldet(14858): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Nov 29 2025 03:22:03 cpanel maldet(14858): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (340 files) in progress... Nov 29 2025 03:22:21 cpanel maldet(14858): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 340, malware hits 0, cleaned hits 0, time 87s Nov 29 2025 03:22:21 cpanel maldet(14858): {scan} scan report saved, to view run: maldet --report 251129-0320.14858 Nov 30 2025 03:59:04 cpanel maldet(11974): {update} checking for available updates... Nov 30 2025 03:59:05 cpanel maldet(11974): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 30 2025 03:59:05 cpanel maldet(11974): {update} hashing install files and checking against server... Nov 30 2025 03:59:05 cpanel maldet(11974): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 30 2025 03:59:05 cpanel maldet(11974): {update} latest version already installed. Nov 30 2025 03:59:05 cpanel maldet(12093): {sigup} performing signature update check... Nov 30 2025 03:59:05 cpanel maldet(12093): {sigup} local signature set is version 202511282700055 Nov 30 2025 03:59:06 cpanel maldet(12093): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 30 2025 03:59:06 cpanel maldet(12093): {sigup} latest signature set already installed Nov 30 2025 03:59:06 cpanel maldet(12190): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 30 2025 03:59:06 cpanel maldet(12190): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 30 2025 03:59:06 cpanel maldet(12190): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Nov 30 2025 03:59:06 cpanel maldet(12190): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 30 2025 03:59:06 cpanel maldet(12190): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 30 2025 04:01:27 cpanel maldet(12190): {scan} file list completed in 141s, found 157 files... Nov 30 2025 04:01:27 cpanel maldet(12190): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Nov 30 2025 04:01:27 cpanel maldet(12190): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (157 files) in progress... Nov 30 2025 04:01:50 cpanel maldet(12190): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 157, malware hits 0, cleaned hits 0, time 164s Nov 30 2025 04:01:50 cpanel maldet(12190): {scan} scan report saved, to view run: maldet --report 251130-0359.12190 Dec 01 2025 03:52:56 cpanel maldet(32286): {update} checking for available updates... Dec 01 2025 03:52:56 cpanel maldet(32286): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 01 2025 03:52:56 cpanel maldet(32286): {update} hashing install files and checking against server... Dec 01 2025 03:52:57 cpanel maldet(32286): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 01 2025 03:52:57 cpanel maldet(32286): {update} latest version already installed. Dec 01 2025 03:52:57 cpanel maldet(32406): {sigup} performing signature update check... Dec 01 2025 03:52:57 cpanel maldet(32406): {sigup} local signature set is version 202511282700055 Dec 01 2025 03:52:57 cpanel maldet(32406): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 01 2025 03:52:57 cpanel maldet(32406): {sigup} latest signature set already installed Dec 01 2025 03:52:57 cpanel maldet(32502): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 01 2025 03:52:58 cpanel maldet(32502): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 01 2025 03:52:58 cpanel maldet(32502): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 01 2025 03:52:58 cpanel maldet(32502): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 01 2025 03:52:58 cpanel maldet(32502): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 01 2025 03:54:05 cpanel maldet(32502): {scan} file list completed in 67s, found 379 files... Dec 01 2025 03:54:05 cpanel maldet(32502): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 01 2025 03:54:05 cpanel maldet(32502): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (379 files) in progress... Dec 01 2025 03:54:22 cpanel maldet(32502): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 379, malware hits 0, cleaned hits 0, time 85s Dec 01 2025 03:54:22 cpanel maldet(32502): {scan} scan report saved, to view run: maldet --report 251201-0352.32502 Dec 02 2025 03:46:16 cpanel maldet(948): {mon} could not find monitor mode dependency 'ed' in PATH, please apt/yum/dnf install ed and try again. Dec 02 2025 04:31:10 cpanel maldet(936): {mon} could not find monitor mode dependency 'ed' in PATH, please apt/yum/dnf install ed and try again. Dec 02 2025 05:46:17 cpanel maldet(25577): {update} checking for available updates... Dec 02 2025 05:46:17 cpanel maldet(25577): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 02 2025 05:46:17 cpanel maldet(25577): {update} hashing install files and checking against server... Dec 02 2025 05:46:18 cpanel maldet(25577): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 02 2025 05:46:18 cpanel maldet(25577): {update} latest version already installed. Dec 02 2025 05:46:18 cpanel maldet(25697): {sigup} performing signature update check... Dec 02 2025 05:46:18 cpanel maldet(25697): {sigup} local signature set is version 202511282700055 Dec 02 2025 05:46:18 cpanel maldet(25697): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 02 2025 05:46:18 cpanel maldet(25697): {sigup} new signature set 202512013675489 available Dec 02 2025 05:46:18 cpanel maldet(25697): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 02 2025 05:46:19 cpanel maldet(25697): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 02 2025 05:46:20 cpanel maldet(25697): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 02 2025 05:46:20 cpanel maldet(25697): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 02 2025 05:46:20 cpanel maldet(25697): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 02 2025 05:46:20 cpanel maldet(25697): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 02 2025 05:46:20 cpanel maldet(25697): {sigup} verified md5sum of maldet-sigpack.tgz Dec 02 2025 05:46:20 cpanel maldet(25697): {sigup} unpacked and installed maldet-sigpack.tgz Dec 02 2025 05:46:20 cpanel maldet(25697): {sigup} verified md5sum of maldet-clean.tgz Dec 02 2025 05:46:20 cpanel maldet(25697): {sigup} unpacked and installed maldet-clean.tgz Dec 02 2025 05:46:20 cpanel maldet(25697): {sigup} signature set update completed Dec 02 2025 05:46:20 cpanel maldet(25697): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 02 2025 05:46:21 cpanel maldet(25920): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 02 2025 05:46:21 cpanel maldet(25920): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 02 2025 05:46:21 cpanel maldet(25920): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 02 2025 05:46:21 cpanel maldet(25920): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 02 2025 05:46:21 cpanel maldet(25920): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 02 2025 05:47:38 cpanel maldet(25920): {scan} file list completed in 77s, found 184 files... Dec 02 2025 05:47:38 cpanel maldet(25920): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 02 2025 05:47:38 cpanel maldet(25920): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (184 files) in progress... Dec 02 2025 05:47:54 cpanel maldet(25920): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 184, malware hits 0, cleaned hits 0, time 92s Dec 02 2025 05:47:54 cpanel maldet(25920): {scan} scan report saved, to view run: maldet --report 251202-0546.25920 Dec 03 2025 03:55:53 cpanel maldet(7218): {update} checking for available updates... Dec 03 2025 03:55:53 cpanel maldet(7218): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 03 2025 03:55:53 cpanel maldet(7218): {update} hashing install files and checking against server... Dec 03 2025 03:55:54 cpanel maldet(7218): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 03 2025 03:55:54 cpanel maldet(7218): {update} latest version already installed. Dec 03 2025 03:55:54 cpanel maldet(7339): {sigup} performing signature update check... Dec 03 2025 03:55:54 cpanel maldet(7339): {sigup} local signature set is version 202512013675489 Dec 03 2025 03:55:54 cpanel maldet(7339): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 03 2025 03:55:54 cpanel maldet(7339): {sigup} latest signature set already installed Dec 03 2025 03:55:54 cpanel maldet(7434): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 03 2025 03:55:55 cpanel maldet(7434): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 03 2025 03:55:55 cpanel maldet(7434): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 03 2025 03:55:55 cpanel maldet(7434): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 03 2025 03:55:55 cpanel maldet(7434): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 03 2025 03:57:10 cpanel maldet(7434): {scan} file list completed in 75s, found 218 files... Dec 03 2025 03:57:10 cpanel maldet(7434): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 03 2025 03:57:10 cpanel maldet(7434): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (218 files) in progress... Dec 03 2025 03:57:35 cpanel maldet(7434): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 218, malware hits 0, cleaned hits 0, time 100s Dec 03 2025 03:57:35 cpanel maldet(7434): {scan} scan report saved, to view run: maldet --report 251203-0355.7434 Dec 04 2025 03:42:48 cpanel maldet(18988): {update} checking for available updates... Dec 04 2025 03:42:49 cpanel maldet(18988): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 04 2025 03:42:49 cpanel maldet(18988): {update} hashing install files and checking against server... Dec 04 2025 03:42:49 cpanel maldet(18988): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 04 2025 03:42:49 cpanel maldet(18988): {update} latest version already installed. Dec 04 2025 03:42:49 cpanel maldet(19109): {sigup} performing signature update check... Dec 04 2025 03:42:49 cpanel maldet(19109): {sigup} local signature set is version 202512013675489 Dec 04 2025 03:42:50 cpanel maldet(19109): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 04 2025 03:42:50 cpanel maldet(19109): {sigup} latest signature set already installed Dec 04 2025 03:42:50 cpanel maldet(19206): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 04 2025 03:42:50 cpanel maldet(19206): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 04 2025 03:42:50 cpanel maldet(19206): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 04 2025 03:42:50 cpanel maldet(19206): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 04 2025 03:42:50 cpanel maldet(19206): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 04 2025 03:44:04 cpanel maldet(19206): {scan} file list completed in 74s, found 223 files... Dec 04 2025 03:44:04 cpanel maldet(19206): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 04 2025 03:44:04 cpanel maldet(19206): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (223 files) in progress... Dec 04 2025 03:44:22 cpanel maldet(19206): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 223, malware hits 0, cleaned hits 0, time 92s Dec 04 2025 03:44:22 cpanel maldet(19206): {scan} scan report saved, to view run: maldet --report 251204-0342.19206 Dec 05 2025 03:41:36 cpanel maldet(6665): {update} checking for available updates... Dec 05 2025 03:41:36 cpanel maldet(6665): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 05 2025 03:41:36 cpanel maldet(6665): {update} hashing install files and checking against server... Dec 05 2025 03:41:37 cpanel maldet(6665): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 05 2025 03:41:37 cpanel maldet(6665): {update} latest version already installed. Dec 05 2025 03:41:37 cpanel maldet(6784): {sigup} performing signature update check... Dec 05 2025 03:41:37 cpanel maldet(6784): {sigup} local signature set is version 202512013675489 Dec 05 2025 03:41:37 cpanel maldet(6784): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 05 2025 03:41:37 cpanel maldet(6784): {sigup} new signature set 20251204452786 available Dec 05 2025 03:41:37 cpanel maldet(6784): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 05 2025 03:41:38 cpanel maldet(6784): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 05 2025 03:41:38 cpanel maldet(6784): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 05 2025 03:41:38 cpanel maldet(6784): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 05 2025 03:41:39 cpanel maldet(6784): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 05 2025 03:41:39 cpanel maldet(6784): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 05 2025 03:41:39 cpanel maldet(6784): {sigup} verified md5sum of maldet-sigpack.tgz Dec 05 2025 03:41:39 cpanel maldet(6784): {sigup} unpacked and installed maldet-sigpack.tgz Dec 05 2025 03:41:39 cpanel maldet(6784): {sigup} verified md5sum of maldet-clean.tgz Dec 05 2025 03:41:39 cpanel maldet(6784): {sigup} unpacked and installed maldet-clean.tgz Dec 05 2025 03:41:39 cpanel maldet(6784): {sigup} signature set update completed Dec 05 2025 03:41:39 cpanel maldet(6784): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 05 2025 03:41:39 cpanel maldet(7011): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 05 2025 03:41:40 cpanel maldet(7011): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 05 2025 03:41:40 cpanel maldet(7011): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 05 2025 03:41:40 cpanel maldet(7011): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 05 2025 03:41:40 cpanel maldet(7011): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 05 2025 03:42:57 cpanel maldet(7011): {scan} file list completed in 77s, found 113 files... Dec 05 2025 03:42:57 cpanel maldet(7011): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 05 2025 03:42:57 cpanel maldet(7011): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (113 files) in progress... Dec 05 2025 03:43:17 cpanel maldet(7011): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 113, malware hits 0, cleaned hits 0, time 98s Dec 05 2025 03:43:17 cpanel maldet(7011): {scan} scan report saved, to view run: maldet --report 251205-0341.7011 Dec 06 2025 03:16:52 cpanel maldet(32757): {update} checking for available updates... Dec 06 2025 03:16:53 cpanel maldet(32757): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 06 2025 03:16:53 cpanel maldet(32757): {update} hashing install files and checking against server... Dec 06 2025 03:16:53 cpanel maldet(32757): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 06 2025 03:16:53 cpanel maldet(32757): {update} latest version already installed. Dec 06 2025 03:16:54 cpanel maldet(423): {sigup} performing signature update check... Dec 06 2025 03:16:54 cpanel maldet(423): {sigup} local signature set is version 20251204452786 Dec 06 2025 03:16:54 cpanel maldet(423): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 06 2025 03:16:55 cpanel maldet(423): {sigup} latest signature set already installed Dec 06 2025 03:16:55 cpanel maldet(533): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 06 2025 03:16:56 cpanel maldet(533): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 06 2025 03:16:56 cpanel maldet(533): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 06 2025 03:16:56 cpanel maldet(533): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 06 2025 03:16:56 cpanel maldet(533): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 06 2025 03:18:42 cpanel maldet(533): {scan} file list completed in 106s, found 193 files... Dec 06 2025 03:18:42 cpanel maldet(533): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 06 2025 03:18:42 cpanel maldet(533): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (193 files) in progress... Dec 06 2025 03:19:02 cpanel maldet(533): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 193, malware hits 0, cleaned hits 0, time 127s Dec 06 2025 03:19:02 cpanel maldet(533): {scan} scan report saved, to view run: maldet --report 251206-0316.533 Dec 07 2025 04:00:36 cpanel maldet(11242): {update} checking for available updates... Dec 07 2025 04:00:37 cpanel maldet(11242): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 07 2025 04:00:37 cpanel maldet(11242): {update} hashing install files and checking against server... Dec 07 2025 04:00:56 cpanel maldet(11242): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 07 2025 04:00:56 cpanel maldet(11242): {update} version check shows latest but hash check failed, forcing update... Dec 07 2025 04:00:56 cpanel maldet(11242): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Dec 07 2025 04:01:16 cpanel maldet(11242): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Dec 07 2025 04:01:16 cpanel maldet(11242): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Dec 07 2025 04:01:16 cpanel maldet(11605): {sigup} performing signature update check... Dec 07 2025 04:01:16 cpanel maldet(11605): {sigup} local signature set is version 20251204452786 Dec 07 2025 04:01:36 cpanel maldet(11605): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 07 2025 04:01:36 cpanel maldet(11605): {sigup} new signature set error code: 522 available Dec 07 2025 04:01:36 cpanel maldet(11605): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 07 2025 04:02:36 cpanel maldet(11605): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 07 2025 04:03:01 cpanel maldet(11605): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 07 2025 04:03:01 cpanel maldet(11605): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 07 2025 04:03:20 cpanel maldet(11605): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 07 2025 04:03:25 cpanel maldet(11605): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 07 2025 04:03:25 cpanel maldet(11605): {sigup} verified md5sum of maldet-sigpack.tgz Dec 07 2025 04:03:25 cpanel maldet(11605): {sigup} unpacked and installed maldet-sigpack.tgz Dec 07 2025 04:03:26 cpanel maldet(11605): {sigup} verified md5sum of maldet-clean.tgz Dec 07 2025 04:03:26 cpanel maldet(11605): {sigup} unpacked and installed maldet-clean.tgz Dec 07 2025 04:03:26 cpanel maldet(11605): {sigup} signature set update completed Dec 07 2025 04:03:26 cpanel maldet(11605): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 07 2025 04:03:26 cpanel maldet(12527): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 07 2025 04:03:26 cpanel maldet(12527): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 07 2025 04:03:26 cpanel maldet(12527): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 07 2025 04:03:26 cpanel maldet(12527): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 07 2025 04:03:26 cpanel maldet(12527): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 07 2025 04:04:59 cpanel maldet(12527): {scan} file list completed in 93s, found 154 files... Dec 07 2025 04:04:59 cpanel maldet(12527): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 07 2025 04:04:59 cpanel maldet(12527): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (154 files) in progress... Dec 07 2025 04:05:16 cpanel maldet(12527): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 154, malware hits 0, cleaned hits 0, time 110s Dec 07 2025 04:05:16 cpanel maldet(12527): {scan} scan report saved, to view run: maldet --report 251207-0403.12527 Dec 08 2025 03:36:34 cpanel maldet(20878): {update} checking for available updates... Dec 08 2025 03:36:35 cpanel maldet(20878): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 08 2025 03:36:35 cpanel maldet(20878): {update} hashing install files and checking against server... Dec 08 2025 03:36:35 cpanel maldet(20878): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 08 2025 03:36:35 cpanel maldet(20878): {update} latest version already installed. Dec 08 2025 03:36:35 cpanel maldet(20993): {sigup} performing signature update check... Dec 08 2025 03:36:35 cpanel maldet(20993): {sigup} local signature set is version 20251204452786 Dec 08 2025 03:36:35 cpanel maldet(20993): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 08 2025 03:36:35 cpanel maldet(20993): {sigup} new signature set 202512071424671 available Dec 08 2025 03:36:35 cpanel maldet(20993): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 08 2025 03:36:36 cpanel maldet(20993): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 08 2025 03:36:37 cpanel maldet(20993): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 08 2025 03:36:37 cpanel maldet(20993): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 08 2025 03:36:37 cpanel maldet(20993): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 08 2025 03:36:37 cpanel maldet(20993): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 08 2025 03:36:37 cpanel maldet(20993): {sigup} verified md5sum of maldet-sigpack.tgz Dec 08 2025 03:36:38 cpanel maldet(20993): {sigup} unpacked and installed maldet-sigpack.tgz Dec 08 2025 03:36:38 cpanel maldet(20993): {sigup} verified md5sum of maldet-clean.tgz Dec 08 2025 03:36:38 cpanel maldet(20993): {sigup} unpacked and installed maldet-clean.tgz Dec 08 2025 03:36:38 cpanel maldet(20993): {sigup} signature set update completed Dec 08 2025 03:36:38 cpanel maldet(20993): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 08 2025 03:36:38 cpanel maldet(21210): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 08 2025 03:36:38 cpanel maldet(21210): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 08 2025 03:36:38 cpanel maldet(21210): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 08 2025 03:36:38 cpanel maldet(21210): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 08 2025 03:36:38 cpanel maldet(21210): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 08 2025 03:36:39 cpanel maldet(21210): {scan} file list completed in 1s, found 3092 files... Dec 08 2025 03:36:39 cpanel maldet(21210): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 08 2025 03:36:39 cpanel maldet(21210): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3092 files) in progress... Dec 08 2025 03:37:53 cpanel maldet(21210): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3092, malware hits 0, cleaned hits 0, time 75s Dec 08 2025 03:37:53 cpanel maldet(21210): {scan} scan report saved, to view run: maldet --report 251208-0336.21210 Dec 09 2025 03:22:35 cpanel maldet(12927): {update} checking for available updates... Dec 09 2025 03:22:36 cpanel maldet(12927): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 09 2025 03:22:36 cpanel maldet(12927): {update} hashing install files and checking against server... Dec 09 2025 03:22:36 cpanel maldet(12927): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 09 2025 03:22:36 cpanel maldet(12927): {update} latest version already installed. Dec 09 2025 03:22:36 cpanel maldet(13043): {sigup} performing signature update check... Dec 09 2025 03:22:36 cpanel maldet(13043): {sigup} local signature set is version 202512071424671 Dec 09 2025 03:22:36 cpanel maldet(13043): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 09 2025 03:22:36 cpanel maldet(13043): {sigup} latest signature set already installed Dec 09 2025 03:22:36 cpanel maldet(13137): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 09 2025 03:22:37 cpanel maldet(13137): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 09 2025 03:22:37 cpanel maldet(13137): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 09 2025 03:22:37 cpanel maldet(13137): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 09 2025 03:22:37 cpanel maldet(13137): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 09 2025 03:22:37 cpanel maldet(13137): {scan} file list completed in 0s, found 249 files... Dec 09 2025 03:22:37 cpanel maldet(13137): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 09 2025 03:22:37 cpanel maldet(13137): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (249 files) in progress... Dec 09 2025 03:22:54 cpanel maldet(13137): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 249, malware hits 0, cleaned hits 0, time 18s Dec 09 2025 03:22:54 cpanel maldet(13137): {scan} scan report saved, to view run: maldet --report 251209-0322.13137 Dec 10 2025 03:24:24 cpanel maldet(7809): {update} checking for available updates... Dec 10 2025 03:24:24 cpanel maldet(7809): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 10 2025 03:24:24 cpanel maldet(7809): {update} hashing install files and checking against server... Dec 10 2025 03:24:25 cpanel maldet(7809): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 10 2025 03:24:25 cpanel maldet(7809): {update} latest version already installed. Dec 10 2025 03:24:25 cpanel maldet(7927): {sigup} performing signature update check... Dec 10 2025 03:24:25 cpanel maldet(7927): {sigup} local signature set is version 202512071424671 Dec 10 2025 03:24:25 cpanel maldet(7927): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 10 2025 03:24:25 cpanel maldet(7927): {sigup} latest signature set already installed Dec 10 2025 03:24:25 cpanel maldet(8022): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 10 2025 03:24:26 cpanel maldet(8022): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 10 2025 03:24:26 cpanel maldet(8022): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 10 2025 03:24:26 cpanel maldet(8022): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 10 2025 03:24:26 cpanel maldet(8022): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 10 2025 03:24:29 cpanel maldet(8022): {scan} file list completed in 3s, found 159 files... Dec 10 2025 03:24:29 cpanel maldet(8022): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 10 2025 03:24:29 cpanel maldet(8022): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (159 files) in progress... Dec 10 2025 03:24:47 cpanel maldet(8022): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 159, malware hits 0, cleaned hits 0, time 22s Dec 10 2025 03:24:47 cpanel maldet(8022): {scan} scan report saved, to view run: maldet --report 251210-0324.8022 Dec 11 2025 03:23:31 cpanel maldet(9345): {update} checking for available updates... Dec 11 2025 03:23:31 cpanel maldet(9345): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 11 2025 03:23:31 cpanel maldet(9345): {update} hashing install files and checking against server... Dec 11 2025 03:23:32 cpanel maldet(9345): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 11 2025 03:23:32 cpanel maldet(9345): {update} latest version already installed. Dec 11 2025 03:23:32 cpanel maldet(9461): {sigup} performing signature update check... Dec 11 2025 03:23:32 cpanel maldet(9461): {sigup} local signature set is version 202512071424671 Dec 11 2025 03:23:32 cpanel maldet(9461): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 11 2025 03:23:32 cpanel maldet(9461): {sigup} new signature set 202512102395847 available Dec 11 2025 03:23:32 cpanel maldet(9461): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 11 2025 03:23:33 cpanel maldet(9461): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 11 2025 03:23:34 cpanel maldet(9461): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 11 2025 03:23:34 cpanel maldet(9461): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 11 2025 03:23:34 cpanel maldet(9461): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 11 2025 03:23:34 cpanel maldet(9461): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 11 2025 03:23:34 cpanel maldet(9461): {sigup} verified md5sum of maldet-sigpack.tgz Dec 11 2025 03:23:34 cpanel maldet(9461): {sigup} unpacked and installed maldet-sigpack.tgz Dec 11 2025 03:23:34 cpanel maldet(9461): {sigup} verified md5sum of maldet-clean.tgz Dec 11 2025 03:23:34 cpanel maldet(9461): {sigup} unpacked and installed maldet-clean.tgz Dec 11 2025 03:23:34 cpanel maldet(9461): {sigup} signature set update completed Dec 11 2025 03:23:34 cpanel maldet(9461): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 11 2025 03:23:34 cpanel maldet(9681): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 11 2025 03:23:35 cpanel maldet(9681): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 11 2025 03:23:35 cpanel maldet(9681): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 11 2025 03:23:35 cpanel maldet(9681): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 11 2025 03:23:35 cpanel maldet(9681): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 11 2025 03:23:48 cpanel maldet(9681): {scan} file list completed in 13s, found 280 files... Dec 11 2025 03:23:48 cpanel maldet(9681): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 11 2025 03:23:48 cpanel maldet(9681): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (280 files) in progress... Dec 11 2025 03:24:06 cpanel maldet(9681): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 280, malware hits 0, cleaned hits 0, time 32s Dec 11 2025 03:24:06 cpanel maldet(9681): {scan} scan report saved, to view run: maldet --report 251211-0323.9681 Dec 12 2025 03:21:43 cpanel maldet(14761): {update} checking for available updates... Dec 12 2025 03:21:43 cpanel maldet(14761): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 12 2025 03:21:43 cpanel maldet(14761): {update} hashing install files and checking against server... Dec 12 2025 03:21:44 cpanel maldet(14761): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 12 2025 03:21:44 cpanel maldet(14761): {update} latest version already installed. Dec 12 2025 03:21:44 cpanel maldet(14883): {sigup} performing signature update check... Dec 12 2025 03:21:44 cpanel maldet(14883): {sigup} local signature set is version 202512102395847 Dec 12 2025 03:21:44 cpanel maldet(14883): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 12 2025 03:21:44 cpanel maldet(14883): {sigup} latest signature set already installed Dec 12 2025 03:21:44 cpanel maldet(14975): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 12 2025 03:21:44 cpanel maldet(14975): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 12 2025 03:21:44 cpanel maldet(14975): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 12 2025 03:21:44 cpanel maldet(14975): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 12 2025 03:21:44 cpanel maldet(14975): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 12 2025 03:21:46 cpanel maldet(14975): {scan} file list completed in 2s, found 207 files... Dec 12 2025 03:21:46 cpanel maldet(14975): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 12 2025 03:21:46 cpanel maldet(14975): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (207 files) in progress... Dec 12 2025 03:22:02 cpanel maldet(14975): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 207, malware hits 0, cleaned hits 0, time 18s Dec 12 2025 03:22:02 cpanel maldet(14975): {scan} scan report saved, to view run: maldet --report 251212-0321.14975 Dec 13 2025 03:30:30 cpanel maldet(9042): {update} checking for available updates... Dec 13 2025 03:30:31 cpanel maldet(9042): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 13 2025 03:30:31 cpanel maldet(9042): {update} hashing install files and checking against server... Dec 13 2025 03:30:31 cpanel maldet(9042): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 13 2025 03:30:31 cpanel maldet(9042): {update} latest version already installed. Dec 13 2025 03:30:31 cpanel maldet(9159): {sigup} performing signature update check... Dec 13 2025 03:30:31 cpanel maldet(9159): {sigup} local signature set is version 202512102395847 Dec 13 2025 03:30:32 cpanel maldet(9159): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 13 2025 03:30:32 cpanel maldet(9159): {sigup} latest signature set already installed Dec 13 2025 03:30:32 cpanel maldet(9257): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 13 2025 03:30:32 cpanel maldet(9257): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 13 2025 03:30:32 cpanel maldet(9257): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 13 2025 03:30:32 cpanel maldet(9257): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 13 2025 03:30:32 cpanel maldet(9257): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 13 2025 03:30:39 cpanel maldet(9257): {scan} file list completed in 7s, found 266 files... Dec 13 2025 03:30:39 cpanel maldet(9257): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 13 2025 03:30:39 cpanel maldet(9257): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (266 files) in progress... Dec 13 2025 03:30:56 cpanel maldet(9257): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 266, malware hits 0, cleaned hits 0, time 24s Dec 13 2025 03:30:56 cpanel maldet(9257): {scan} scan report saved, to view run: maldet --report 251213-0330.9257 Dec 14 2025 04:04:33 cpanel maldet(1185): {update} checking for available updates... Dec 14 2025 04:04:33 cpanel maldet(1185): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 14 2025 04:04:33 cpanel maldet(1185): {update} hashing install files and checking against server... Dec 14 2025 04:04:34 cpanel maldet(1185): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 14 2025 04:04:34 cpanel maldet(1185): {update} latest version already installed. Dec 14 2025 04:04:34 cpanel maldet(1303): {sigup} performing signature update check... Dec 14 2025 04:04:34 cpanel maldet(1303): {sigup} local signature set is version 202512102395847 Dec 14 2025 04:04:34 cpanel maldet(1303): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 14 2025 04:04:34 cpanel maldet(1303): {sigup} new signature set 20251213586061 available Dec 14 2025 04:04:34 cpanel maldet(1303): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 14 2025 04:04:35 cpanel maldet(1303): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 14 2025 04:04:36 cpanel maldet(1303): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 14 2025 04:04:36 cpanel maldet(1303): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 14 2025 04:04:36 cpanel maldet(1303): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 14 2025 04:04:37 cpanel maldet(1303): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 14 2025 04:04:37 cpanel maldet(1303): {sigup} verified md5sum of maldet-sigpack.tgz Dec 14 2025 04:04:37 cpanel maldet(1303): {sigup} unpacked and installed maldet-sigpack.tgz Dec 14 2025 04:04:37 cpanel maldet(1303): {sigup} verified md5sum of maldet-clean.tgz Dec 14 2025 04:04:37 cpanel maldet(1303): {sigup} unpacked and installed maldet-clean.tgz Dec 14 2025 04:04:37 cpanel maldet(1303): {sigup} signature set update completed Dec 14 2025 04:04:37 cpanel maldet(1303): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 14 2025 04:04:37 cpanel maldet(1588): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 14 2025 04:04:37 cpanel maldet(1588): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 14 2025 04:04:37 cpanel maldet(1588): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 14 2025 04:04:37 cpanel maldet(1588): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 14 2025 04:04:37 cpanel maldet(1588): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 14 2025 04:05:58 cpanel maldet(1588): {scan} file list completed in 81s, found 273 files... Dec 14 2025 04:05:58 cpanel maldet(1588): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 14 2025 04:05:58 cpanel maldet(1588): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (273 files) in progress... Dec 14 2025 04:06:14 cpanel maldet(1588): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 273, malware hits 0, cleaned hits 0, time 97s Dec 14 2025 04:06:14 cpanel maldet(1588): {scan} scan report saved, to view run: maldet --report 251214-0404.1588 Dec 15 2025 03:54:54 cpanel maldet(18232): {update} checking for available updates... Dec 15 2025 03:54:55 cpanel maldet(18232): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 15 2025 03:54:55 cpanel maldet(18232): {update} hashing install files and checking against server... Dec 15 2025 03:54:55 cpanel maldet(18232): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 15 2025 03:54:55 cpanel maldet(18232): {update} latest version already installed. Dec 15 2025 03:54:56 cpanel maldet(18362): {sigup} performing signature update check... Dec 15 2025 03:54:56 cpanel maldet(18362): {sigup} local signature set is version 20251213586061 Dec 15 2025 03:54:56 cpanel maldet(18362): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 15 2025 03:54:56 cpanel maldet(18362): {sigup} latest signature set already installed Dec 15 2025 03:54:56 cpanel maldet(18465): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 15 2025 03:54:56 cpanel maldet(18465): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 15 2025 03:54:56 cpanel maldet(18465): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 15 2025 03:54:56 cpanel maldet(18465): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 15 2025 03:54:56 cpanel maldet(18465): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 15 2025 03:56:03 cpanel maldet(18465): {scan} file list completed in 67s, found 126 files... Dec 15 2025 03:56:03 cpanel maldet(18465): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 15 2025 03:56:03 cpanel maldet(18465): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (126 files) in progress... Dec 15 2025 03:56:19 cpanel maldet(18465): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 126, malware hits 0, cleaned hits 0, time 83s Dec 15 2025 03:56:19 cpanel maldet(18465): {scan} scan report saved, to view run: maldet --report 251215-0354.18465 Dec 16 2025 03:46:28 cpanel maldet(5270): {update} checking for available updates... Dec 16 2025 03:46:29 cpanel maldet(5270): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 16 2025 03:46:29 cpanel maldet(5270): {update} hashing install files and checking against server... Dec 16 2025 03:46:29 cpanel maldet(5270): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 16 2025 03:46:29 cpanel maldet(5270): {update} latest version already installed. Dec 16 2025 03:46:29 cpanel maldet(5401): {sigup} performing signature update check... Dec 16 2025 03:46:29 cpanel maldet(5401): {sigup} local signature set is version 20251213586061 Dec 16 2025 03:46:30 cpanel maldet(5401): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 16 2025 03:46:30 cpanel maldet(5401): {sigup} latest signature set already installed Dec 16 2025 03:46:30 cpanel maldet(5502): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 16 2025 03:46:30 cpanel maldet(5502): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 16 2025 03:46:30 cpanel maldet(5502): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 16 2025 03:46:30 cpanel maldet(5502): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 16 2025 03:46:30 cpanel maldet(5502): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 16 2025 03:47:48 cpanel maldet(5502): {scan} file list completed in 78s, found 284 files... Dec 16 2025 03:47:48 cpanel maldet(5502): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 16 2025 03:47:48 cpanel maldet(5502): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (284 files) in progress... Dec 16 2025 03:48:09 cpanel maldet(5502): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 284, malware hits 0, cleaned hits 0, time 98s Dec 16 2025 03:48:09 cpanel maldet(5502): {scan} scan report saved, to view run: maldet --report 251216-0346.5502 Dec 17 2025 03:21:52 cpanel maldet(12068): {update} checking for available updates... Dec 17 2025 03:21:52 cpanel maldet(12068): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 17 2025 03:21:52 cpanel maldet(12068): {update} hashing install files and checking against server... Dec 17 2025 03:21:53 cpanel maldet(12068): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 17 2025 03:21:53 cpanel maldet(12068): {update} latest version already installed. Dec 17 2025 03:21:53 cpanel maldet(12202): {sigup} performing signature update check... Dec 17 2025 03:21:53 cpanel maldet(12202): {sigup} local signature set is version 20251213586061 Dec 17 2025 03:21:53 cpanel maldet(12202): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 17 2025 03:21:53 cpanel maldet(12202): {sigup} new signature set 202512161556343 available Dec 17 2025 03:21:53 cpanel maldet(12202): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 17 2025 03:21:55 cpanel maldet(12202): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 17 2025 03:21:55 cpanel maldet(12202): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 17 2025 03:21:55 cpanel maldet(12202): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 17 2025 03:21:55 cpanel maldet(12202): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 17 2025 03:21:56 cpanel maldet(12202): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 17 2025 03:21:56 cpanel maldet(12202): {sigup} verified md5sum of maldet-sigpack.tgz Dec 17 2025 03:21:56 cpanel maldet(12202): {sigup} unpacked and installed maldet-sigpack.tgz Dec 17 2025 03:21:56 cpanel maldet(12202): {sigup} verified md5sum of maldet-clean.tgz Dec 17 2025 03:21:56 cpanel maldet(12202): {sigup} unpacked and installed maldet-clean.tgz Dec 17 2025 03:21:56 cpanel maldet(12202): {sigup} signature set update completed Dec 17 2025 03:21:56 cpanel maldet(12202): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 17 2025 03:21:56 cpanel maldet(12461): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 17 2025 03:21:56 cpanel maldet(12461): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 17 2025 03:21:56 cpanel maldet(12461): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 17 2025 03:21:56 cpanel maldet(12461): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 17 2025 03:21:56 cpanel maldet(12461): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 17 2025 03:23:08 cpanel maldet(12461): {scan} file list completed in 72s, found 238 files... Dec 17 2025 03:23:08 cpanel maldet(12461): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 17 2025 03:23:08 cpanel maldet(12461): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (238 files) in progress... Dec 17 2025 03:23:26 cpanel maldet(12461): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 238, malware hits 0, cleaned hits 0, time 90s Dec 17 2025 03:23:26 cpanel maldet(12461): {scan} scan report saved, to view run: maldet --report 251217-0321.12461 Dec 18 2025 03:46:14 cpanel maldet(30775): {update} checking for available updates... Dec 18 2025 03:46:14 cpanel maldet(30775): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 18 2025 03:46:14 cpanel maldet(30775): {update} hashing install files and checking against server... Dec 18 2025 03:46:15 cpanel maldet(30775): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 18 2025 03:46:15 cpanel maldet(30775): {update} latest version already installed. Dec 18 2025 03:46:15 cpanel maldet(30904): {sigup} performing signature update check... Dec 18 2025 03:46:15 cpanel maldet(30904): {sigup} local signature set is version 202512161556343 Dec 18 2025 03:46:15 cpanel maldet(30904): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 18 2025 03:46:15 cpanel maldet(30904): {sigup} latest signature set already installed Dec 18 2025 03:46:15 cpanel maldet(31004): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 18 2025 03:46:16 cpanel maldet(31004): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 18 2025 03:46:16 cpanel maldet(31004): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 18 2025 03:46:16 cpanel maldet(31004): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 18 2025 03:46:16 cpanel maldet(31004): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 18 2025 03:47:30 cpanel maldet(31004): {scan} file list completed in 74s, found 256 files... Dec 18 2025 03:47:30 cpanel maldet(31004): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 18 2025 03:47:30 cpanel maldet(31004): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (256 files) in progress... Dec 18 2025 03:47:47 cpanel maldet(31004): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 256, malware hits 0, cleaned hits 0, time 92s Dec 18 2025 03:47:47 cpanel maldet(31004): {scan} scan report saved, to view run: maldet --report 251218-0346.31004 Dec 19 2025 03:39:52 cpanel maldet(31754): {update} checking for available updates... Dec 19 2025 03:39:53 cpanel maldet(31754): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 19 2025 03:39:53 cpanel maldet(31754): {update} hashing install files and checking against server... Dec 19 2025 03:39:53 cpanel maldet(31754): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 19 2025 03:39:53 cpanel maldet(31754): {update} latest version already installed. Dec 19 2025 03:39:53 cpanel maldet(31883): {sigup} performing signature update check... Dec 19 2025 03:39:53 cpanel maldet(31883): {sigup} local signature set is version 202512161556343 Dec 19 2025 03:39:54 cpanel maldet(31883): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 19 2025 03:39:54 cpanel maldet(31883): {sigup} latest signature set already installed Dec 19 2025 03:39:54 cpanel maldet(31985): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 19 2025 03:39:54 cpanel maldet(31985): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 19 2025 03:39:54 cpanel maldet(31985): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 19 2025 03:39:54 cpanel maldet(31985): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 19 2025 03:39:54 cpanel maldet(31985): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 19 2025 03:40:20 cpanel maldet(31985): {scan} file list completed in 26s, found 215 files... Dec 19 2025 03:40:20 cpanel maldet(31985): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 19 2025 03:40:21 cpanel maldet(31985): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (215 files) in progress... Dec 19 2025 03:40:37 cpanel maldet(31985): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 215, malware hits 0, cleaned hits 0, time 43s Dec 19 2025 03:40:37 cpanel maldet(31985): {scan} scan report saved, to view run: maldet --report 251219-0339.31985 Dec 20 2025 03:46:46 cpanel maldet(25287): {update} checking for available updates... Dec 20 2025 03:46:47 cpanel maldet(25287): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 20 2025 03:46:47 cpanel maldet(25287): {update} hashing install files and checking against server... Dec 20 2025 03:46:47 cpanel maldet(25287): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 20 2025 03:46:47 cpanel maldet(25287): {update} latest version already installed. Dec 20 2025 03:46:47 cpanel maldet(25412): {sigup} performing signature update check... Dec 20 2025 03:46:47 cpanel maldet(25412): {sigup} local signature set is version 202512161556343 Dec 20 2025 03:46:47 cpanel maldet(25412): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 20 2025 03:46:47 cpanel maldet(25412): {sigup} new signature set 202512192526679 available Dec 20 2025 03:46:47 cpanel maldet(25412): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 20 2025 03:46:49 cpanel maldet(25412): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 20 2025 03:46:49 cpanel maldet(25412): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 20 2025 03:46:49 cpanel maldet(25412): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 20 2025 03:46:49 cpanel maldet(25412): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 20 2025 03:46:50 cpanel maldet(25412): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 20 2025 03:46:50 cpanel maldet(25412): {sigup} verified md5sum of maldet-sigpack.tgz Dec 20 2025 03:46:50 cpanel maldet(25412): {sigup} unpacked and installed maldet-sigpack.tgz Dec 20 2025 03:46:50 cpanel maldet(25412): {sigup} verified md5sum of maldet-clean.tgz Dec 20 2025 03:46:50 cpanel maldet(25412): {sigup} unpacked and installed maldet-clean.tgz Dec 20 2025 03:46:50 cpanel maldet(25412): {sigup} signature set update completed Dec 20 2025 03:46:50 cpanel maldet(25412): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 20 2025 03:46:50 cpanel maldet(25675): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 20 2025 03:46:50 cpanel maldet(25675): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 20 2025 03:46:50 cpanel maldet(25675): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 20 2025 03:46:50 cpanel maldet(25675): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 20 2025 03:46:50 cpanel maldet(25675): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 20 2025 03:47:02 cpanel maldet(25675): {scan} file list completed in 12s, found 254 files... Dec 20 2025 03:47:02 cpanel maldet(25675): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 20 2025 03:47:02 cpanel maldet(25675): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (254 files) in progress... Dec 20 2025 03:47:20 cpanel maldet(25675): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 254, malware hits 0, cleaned hits 0, time 30s Dec 20 2025 03:47:20 cpanel maldet(25675): {scan} scan report saved, to view run: maldet --report 251220-0346.25675 Dec 21 2025 03:37:33 cpanel maldet(23816): {update} checking for available updates... Dec 21 2025 03:37:33 cpanel maldet(23816): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 21 2025 03:37:33 cpanel maldet(23816): {update} hashing install files and checking against server... Dec 21 2025 03:37:34 cpanel maldet(23816): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 21 2025 03:37:34 cpanel maldet(23816): {update} latest version already installed. Dec 21 2025 03:37:34 cpanel maldet(23953): {sigup} performing signature update check... Dec 21 2025 03:37:34 cpanel maldet(23953): {sigup} local signature set is version 202512192526679 Dec 21 2025 03:37:34 cpanel maldet(23953): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 21 2025 03:37:34 cpanel maldet(23953): {sigup} latest signature set already installed Dec 21 2025 03:37:34 cpanel maldet(24053): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 21 2025 03:37:35 cpanel maldet(24053): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 21 2025 03:37:35 cpanel maldet(24053): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 21 2025 03:37:35 cpanel maldet(24053): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 21 2025 03:37:35 cpanel maldet(24053): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 21 2025 03:38:44 cpanel maldet(24053): {scan} file list completed in 69s, found 285 files... Dec 21 2025 03:38:44 cpanel maldet(24053): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 21 2025 03:38:44 cpanel maldet(24053): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (285 files) in progress... Dec 21 2025 03:39:04 cpanel maldet(24053): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 285, malware hits 0, cleaned hits 0, time 90s Dec 21 2025 03:39:04 cpanel maldet(24053): {scan} scan report saved, to view run: maldet --report 251221-0337.24053 Dec 22 2025 03:35:43 cpanel maldet(9155): {update} checking for available updates... Dec 22 2025 03:35:44 cpanel maldet(9155): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 22 2025 03:35:44 cpanel maldet(9155): {update} hashing install files and checking against server... Dec 22 2025 03:35:44 cpanel maldet(9155): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 22 2025 03:35:44 cpanel maldet(9155): {update} latest version already installed. Dec 22 2025 03:35:44 cpanel maldet(9287): {sigup} performing signature update check... Dec 22 2025 03:35:44 cpanel maldet(9287): {sigup} local signature set is version 202512192526679 Dec 22 2025 03:35:44 cpanel maldet(9287): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 22 2025 03:35:44 cpanel maldet(9287): {sigup} latest signature set already installed Dec 22 2025 03:35:45 cpanel maldet(9387): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 22 2025 03:35:45 cpanel maldet(9387): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 22 2025 03:35:45 cpanel maldet(9387): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 22 2025 03:35:45 cpanel maldet(9387): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 22 2025 03:35:45 cpanel maldet(9387): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 22 2025 03:35:48 cpanel maldet(9387): {scan} file list completed in 3s, found 157 files... Dec 22 2025 03:35:48 cpanel maldet(9387): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 22 2025 03:35:48 cpanel maldet(9387): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (157 files) in progress... Dec 22 2025 03:36:07 cpanel maldet(9387): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 157, malware hits 0, cleaned hits 0, time 22s Dec 22 2025 03:36:07 cpanel maldet(9387): {scan} scan report saved, to view run: maldet --report 251222-0335.9387 Dec 23 2025 03:53:41 cpanel maldet(3160): {update} checking for available updates... Dec 23 2025 03:53:42 cpanel maldet(3160): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 23 2025 03:53:42 cpanel maldet(3160): {update} hashing install files and checking against server... Dec 23 2025 03:53:42 cpanel maldet(3160): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 23 2025 03:53:42 cpanel maldet(3160): {update} latest version already installed. Dec 23 2025 03:53:42 cpanel maldet(3291): {sigup} performing signature update check... Dec 23 2025 03:53:42 cpanel maldet(3291): {sigup} local signature set is version 202512192526679 Dec 23 2025 03:53:43 cpanel maldet(3291): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 23 2025 03:53:43 cpanel maldet(3291): {sigup} new signature set 202512223496934 available Dec 23 2025 03:53:43 cpanel maldet(3291): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 23 2025 03:53:44 cpanel maldet(3291): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 23 2025 03:53:44 cpanel maldet(3291): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 23 2025 03:53:44 cpanel maldet(3291): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 23 2025 03:53:44 cpanel maldet(3291): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 23 2025 03:53:45 cpanel maldet(3291): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 23 2025 03:53:45 cpanel maldet(3291): {sigup} verified md5sum of maldet-sigpack.tgz Dec 23 2025 03:53:45 cpanel maldet(3291): {sigup} unpacked and installed maldet-sigpack.tgz Dec 23 2025 03:53:45 cpanel maldet(3291): {sigup} verified md5sum of maldet-clean.tgz Dec 23 2025 03:53:45 cpanel maldet(3291): {sigup} unpacked and installed maldet-clean.tgz Dec 23 2025 03:53:45 cpanel maldet(3291): {sigup} signature set update completed Dec 23 2025 03:53:45 cpanel maldet(3291): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 23 2025 03:53:45 cpanel maldet(3543): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 23 2025 03:53:45 cpanel maldet(3543): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 23 2025 03:53:45 cpanel maldet(3543): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 23 2025 03:53:45 cpanel maldet(3543): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 23 2025 03:53:45 cpanel maldet(3543): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 23 2025 03:53:55 cpanel maldet(3543): {scan} file list completed in 10s, found 266 files... Dec 23 2025 03:53:55 cpanel maldet(3543): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 23 2025 03:53:55 cpanel maldet(3543): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (266 files) in progress... Dec 23 2025 03:54:13 cpanel maldet(3543): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 266, malware hits 0, cleaned hits 0, time 28s Dec 23 2025 03:54:13 cpanel maldet(3543): {scan} scan report saved, to view run: maldet --report 251223-0353.3543 Dec 24 2025 03:48:34 cpanel maldet(26217): {update} checking for available updates... Dec 24 2025 03:48:34 cpanel maldet(26217): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 24 2025 03:48:35 cpanel maldet(26217): {update} hashing install files and checking against server... Dec 24 2025 03:48:35 cpanel maldet(26217): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 24 2025 03:48:35 cpanel maldet(26217): {update} latest version already installed. Dec 24 2025 03:48:35 cpanel maldet(26351): {sigup} performing signature update check... Dec 24 2025 03:48:35 cpanel maldet(26351): {sigup} local signature set is version 202512223496934 Dec 24 2025 03:48:36 cpanel maldet(26351): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 24 2025 03:48:36 cpanel maldet(26351): {sigup} latest signature set already installed Dec 24 2025 03:48:36 cpanel maldet(26453): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 24 2025 03:48:36 cpanel maldet(26453): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 24 2025 03:48:36 cpanel maldet(26453): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 24 2025 03:48:36 cpanel maldet(26453): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 24 2025 03:48:36 cpanel maldet(26453): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 24 2025 03:48:43 cpanel maldet(26453): {scan} file list completed in 7s, found 360 files... Dec 24 2025 03:48:43 cpanel maldet(26453): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 24 2025 03:48:43 cpanel maldet(26453): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (360 files) in progress... Dec 24 2025 03:49:03 cpanel maldet(26453): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 360, malware hits 0, cleaned hits 0, time 27s Dec 24 2025 03:49:03 cpanel maldet(26453): {scan} scan report saved, to view run: maldet --report 251224-0348.26453 Dec 25 2025 03:38:52 cpanel maldet(2786): {update} checking for available updates... Dec 25 2025 03:38:52 cpanel maldet(2786): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 25 2025 03:38:52 cpanel maldet(2786): {update} hashing install files and checking against server... Dec 25 2025 03:38:53 cpanel maldet(2786): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 25 2025 03:38:53 cpanel maldet(2786): {update} latest version already installed. Dec 25 2025 03:38:53 cpanel maldet(2914): {sigup} performing signature update check... Dec 25 2025 03:38:53 cpanel maldet(2914): {sigup} local signature set is version 202512223496934 Dec 25 2025 03:38:53 cpanel maldet(2914): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 25 2025 03:38:53 cpanel maldet(2914): {sigup} latest signature set already installed Dec 25 2025 03:38:53 cpanel maldet(3017): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 25 2025 03:38:53 cpanel maldet(3017): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 25 2025 03:38:53 cpanel maldet(3017): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 25 2025 03:38:53 cpanel maldet(3017): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 25 2025 03:38:53 cpanel maldet(3017): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 25 2025 03:39:09 cpanel maldet(3017): {scan} file list completed in 16s, found 287 files... Dec 25 2025 03:39:09 cpanel maldet(3017): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 25 2025 03:39:09 cpanel maldet(3017): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (287 files) in progress... Dec 25 2025 03:39:25 cpanel maldet(3017): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 287, malware hits 0, cleaned hits 0, time 32s Dec 25 2025 03:39:25 cpanel maldet(3017): {scan} scan report saved, to view run: maldet --report 251225-0338.3017 Dec 26 2025 03:28:46 cpanel maldet(28259): {update} checking for available updates... Dec 26 2025 03:28:47 cpanel maldet(28259): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 26 2025 03:28:47 cpanel maldet(28259): {update} hashing install files and checking against server... Dec 26 2025 03:28:47 cpanel maldet(28259): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 26 2025 03:28:47 cpanel maldet(28259): {update} latest version already installed. Dec 26 2025 03:28:47 cpanel maldet(28397): {sigup} performing signature update check... Dec 26 2025 03:28:47 cpanel maldet(28397): {sigup} local signature set is version 202512223496934 Dec 26 2025 03:28:48 cpanel maldet(28397): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 26 2025 03:28:48 cpanel maldet(28397): {sigup} new signature set 20251225273290 available Dec 26 2025 03:28:48 cpanel maldet(28397): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 26 2025 03:28:49 cpanel maldet(28397): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 26 2025 03:28:49 cpanel maldet(28397): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 26 2025 03:28:49 cpanel maldet(28397): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 26 2025 03:28:50 cpanel maldet(28397): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 26 2025 03:28:50 cpanel maldet(28397): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 26 2025 03:28:50 cpanel maldet(28397): {sigup} verified md5sum of maldet-sigpack.tgz Dec 26 2025 03:28:50 cpanel maldet(28397): {sigup} unpacked and installed maldet-sigpack.tgz Dec 26 2025 03:28:50 cpanel maldet(28397): {sigup} verified md5sum of maldet-clean.tgz Dec 26 2025 03:28:50 cpanel maldet(28397): {sigup} unpacked and installed maldet-clean.tgz Dec 26 2025 03:28:50 cpanel maldet(28397): {sigup} signature set update completed Dec 26 2025 03:28:50 cpanel maldet(28397): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 26 2025 03:28:50 cpanel maldet(28670): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 26 2025 03:28:50 cpanel maldet(28670): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 26 2025 03:28:50 cpanel maldet(28670): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 26 2025 03:28:50 cpanel maldet(28670): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 26 2025 03:28:50 cpanel maldet(28670): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 26 2025 03:29:01 cpanel maldet(28670): {scan} file list completed in 11s, found 157 files... Dec 26 2025 03:29:01 cpanel maldet(28670): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 26 2025 03:29:01 cpanel maldet(28670): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (157 files) in progress... Dec 26 2025 03:29:17 cpanel maldet(28670): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 157, malware hits 0, cleaned hits 0, time 27s Dec 26 2025 03:29:17 cpanel maldet(28670): {scan} scan report saved, to view run: maldet --report 251226-0328.28670 Dec 27 2025 03:29:03 cpanel maldet(26779): {update} checking for available updates... Dec 27 2025 03:29:04 cpanel maldet(26779): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 27 2025 03:29:04 cpanel maldet(26779): {update} hashing install files and checking against server... Dec 27 2025 03:29:04 cpanel maldet(26779): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 27 2025 03:29:04 cpanel maldet(26779): {update} latest version already installed. Dec 27 2025 03:29:05 cpanel maldet(26913): {sigup} performing signature update check... Dec 27 2025 03:29:05 cpanel maldet(26913): {sigup} local signature set is version 20251225273290 Dec 27 2025 03:29:05 cpanel maldet(26913): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 27 2025 03:29:05 cpanel maldet(26913): {sigup} latest signature set already installed Dec 27 2025 03:29:05 cpanel maldet(27016): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 27 2025 03:29:05 cpanel maldet(27016): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 27 2025 03:29:05 cpanel maldet(27016): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 27 2025 03:29:05 cpanel maldet(27016): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 27 2025 03:29:05 cpanel maldet(27016): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 27 2025 03:29:18 cpanel maldet(27016): {scan} file list completed in 13s, found 150 files... Dec 27 2025 03:29:18 cpanel maldet(27016): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 27 2025 03:29:18 cpanel maldet(27016): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (150 files) in progress... Dec 27 2025 03:29:36 cpanel maldet(27016): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 150, malware hits 0, cleaned hits 0, time 31s Dec 27 2025 03:29:36 cpanel maldet(27016): {scan} scan report saved, to view run: maldet --report 251227-0329.27016 Dec 28 2025 03:47:50 cpanel maldet(24382): {update} checking for available updates... Dec 28 2025 03:47:50 cpanel maldet(24382): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 28 2025 03:47:50 cpanel maldet(24382): {update} hashing install files and checking against server... Dec 28 2025 03:47:51 cpanel maldet(24382): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 28 2025 03:47:51 cpanel maldet(24382): {update} latest version already installed. Dec 28 2025 03:47:51 cpanel maldet(24523): {sigup} performing signature update check... Dec 28 2025 03:47:51 cpanel maldet(24523): {sigup} local signature set is version 20251225273290 Dec 28 2025 03:47:51 cpanel maldet(24523): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 28 2025 03:47:51 cpanel maldet(24523): {sigup} latest signature set already installed Dec 28 2025 03:47:51 cpanel maldet(24625): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 28 2025 03:47:52 cpanel maldet(24625): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 28 2025 03:47:52 cpanel maldet(24625): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 28 2025 03:47:52 cpanel maldet(24625): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 28 2025 03:47:52 cpanel maldet(24625): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 28 2025 03:49:24 cpanel maldet(24625): {scan} file list completed in 92s, found 416 files... Dec 28 2025 03:49:24 cpanel maldet(24625): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 28 2025 03:49:24 cpanel maldet(24625): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (416 files) in progress... Dec 28 2025 03:49:46 cpanel maldet(24625): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 416, malware hits 0, cleaned hits 0, time 115s Dec 28 2025 03:49:46 cpanel maldet(24625): {scan} scan report saved, to view run: maldet --report 251228-0347.24625 Dec 29 2025 03:41:01 cpanel maldet(16363): {update} checking for available updates... Dec 29 2025 03:41:01 cpanel maldet(16363): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 29 2025 03:41:01 cpanel maldet(16363): {update} hashing install files and checking against server... Dec 29 2025 03:41:02 cpanel maldet(16363): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 29 2025 03:41:02 cpanel maldet(16363): {update} latest version already installed. Dec 29 2025 03:41:02 cpanel maldet(16493): {sigup} performing signature update check... Dec 29 2025 03:41:02 cpanel maldet(16493): {sigup} local signature set is version 20251225273290 Dec 29 2025 03:41:02 cpanel maldet(16493): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 29 2025 03:41:02 cpanel maldet(16493): {sigup} new signature set 202512281244183 available Dec 29 2025 03:41:02 cpanel maldet(16493): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 29 2025 03:41:04 cpanel maldet(16493): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 29 2025 03:41:04 cpanel maldet(16493): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 29 2025 03:41:04 cpanel maldet(16493): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 29 2025 03:41:04 cpanel maldet(16493): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 29 2025 03:41:05 cpanel maldet(16493): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 29 2025 03:41:05 cpanel maldet(16493): {sigup} verified md5sum of maldet-sigpack.tgz Dec 29 2025 03:41:05 cpanel maldet(16493): {sigup} unpacked and installed maldet-sigpack.tgz Dec 29 2025 03:41:05 cpanel maldet(16493): {sigup} verified md5sum of maldet-clean.tgz Dec 29 2025 03:41:05 cpanel maldet(16493): {sigup} unpacked and installed maldet-clean.tgz Dec 29 2025 03:41:05 cpanel maldet(16493): {sigup} signature set update completed Dec 29 2025 03:41:05 cpanel maldet(16493): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 29 2025 03:41:05 cpanel maldet(16753): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 29 2025 03:41:05 cpanel maldet(16753): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 29 2025 03:41:05 cpanel maldet(16753): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 29 2025 03:41:05 cpanel maldet(16753): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 29 2025 03:41:05 cpanel maldet(16753): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 29 2025 03:42:28 cpanel maldet(16753): {scan} file list completed in 83s, found 148 files... Dec 29 2025 03:42:28 cpanel maldet(16753): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 29 2025 03:42:28 cpanel maldet(16753): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (148 files) in progress... Dec 29 2025 03:42:45 cpanel maldet(16753): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 148, malware hits 0, cleaned hits 0, time 100s Dec 29 2025 03:42:45 cpanel maldet(16753): {scan} scan report saved, to view run: maldet --report 251229-0341.16753 Dec 30 2025 03:26:53 cpanel maldet(10132): {update} checking for available updates... Dec 30 2025 03:26:54 cpanel maldet(10132): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 30 2025 03:26:54 cpanel maldet(10132): {update} hashing install files and checking against server... Dec 30 2025 03:26:54 cpanel maldet(10132): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 30 2025 03:26:54 cpanel maldet(10132): {update} latest version already installed. Dec 30 2025 03:26:54 cpanel maldet(10251): {sigup} performing signature update check... Dec 30 2025 03:26:54 cpanel maldet(10251): {sigup} local signature set is version 202512281244183 Dec 30 2025 03:26:55 cpanel maldet(10251): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 30 2025 03:26:55 cpanel maldet(10251): {sigup} latest signature set already installed Dec 30 2025 03:26:55 cpanel maldet(10346): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 30 2025 03:26:55 cpanel maldet(10346): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 30 2025 03:26:55 cpanel maldet(10346): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 30 2025 03:26:55 cpanel maldet(10346): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 30 2025 03:26:55 cpanel maldet(10346): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 30 2025 03:27:07 cpanel maldet(10346): {scan} file list completed in 12s, found 121 files... Dec 30 2025 03:27:07 cpanel maldet(10346): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 30 2025 03:27:07 cpanel maldet(10346): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (121 files) in progress... Dec 30 2025 03:27:22 cpanel maldet(10346): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 121, malware hits 0, cleaned hits 0, time 27s Dec 30 2025 03:27:22 cpanel maldet(10346): {scan} scan report saved, to view run: maldet --report 251230-0326.10346 Dec 31 2025 03:25:41 cpanel maldet(31383): {update} checking for available updates... Dec 31 2025 03:25:41 cpanel maldet(31383): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 31 2025 03:25:41 cpanel maldet(31383): {update} hashing install files and checking against server... Dec 31 2025 03:25:42 cpanel maldet(31383): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 31 2025 03:25:42 cpanel maldet(31383): {update} latest version already installed. Dec 31 2025 03:25:42 cpanel maldet(31503): {sigup} performing signature update check... Dec 31 2025 03:25:42 cpanel maldet(31503): {sigup} local signature set is version 202512281244183 Dec 31 2025 03:25:42 cpanel maldet(31503): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 31 2025 03:25:42 cpanel maldet(31503): {sigup} latest signature set already installed Dec 31 2025 03:25:42 cpanel maldet(31600): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 31 2025 03:25:42 cpanel maldet(31600): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 31 2025 03:25:42 cpanel maldet(31600): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Dec 31 2025 03:25:42 cpanel maldet(31600): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 31 2025 03:25:42 cpanel maldet(31600): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 31 2025 03:25:59 cpanel maldet(31600): {scan} file list completed in 17s, found 408 files... Dec 31 2025 03:25:59 cpanel maldet(31600): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Dec 31 2025 03:25:59 cpanel maldet(31600): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (408 files) in progress... Dec 31 2025 03:26:17 cpanel maldet(31600): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 408, malware hits 0, cleaned hits 0, time 35s Dec 31 2025 03:26:17 cpanel maldet(31600): {scan} scan report saved, to view run: maldet --report 251231-0325.31600 Jan 01 2026 03:36:48 cpanel maldet(25703): {update} checking for available updates... Jan 01 2026 03:36:48 cpanel maldet(25703): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 01 2026 03:36:48 cpanel maldet(25703): {update} hashing install files and checking against server... Jan 01 2026 03:36:49 cpanel maldet(25703): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 01 2026 03:36:49 cpanel maldet(25703): {update} latest version already installed. Jan 01 2026 03:36:49 cpanel maldet(25821): {sigup} performing signature update check... Jan 01 2026 03:36:49 cpanel maldet(25821): {sigup} local signature set is version 202512281244183 Jan 01 2026 03:36:49 cpanel maldet(25821): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 01 2026 03:36:49 cpanel maldet(25821): {sigup} new signature set 202512312207256 available Jan 01 2026 03:36:49 cpanel maldet(25821): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 01 2026 03:36:50 cpanel maldet(25821): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 01 2026 03:36:51 cpanel maldet(25821): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 01 2026 03:36:51 cpanel maldet(25821): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 01 2026 03:36:51 cpanel maldet(25821): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 01 2026 03:36:51 cpanel maldet(25821): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 01 2026 03:36:51 cpanel maldet(25821): {sigup} verified md5sum of maldet-sigpack.tgz Jan 01 2026 03:36:51 cpanel maldet(25821): {sigup} unpacked and installed maldet-sigpack.tgz Jan 01 2026 03:36:51 cpanel maldet(25821): {sigup} verified md5sum of maldet-clean.tgz Jan 01 2026 03:36:51 cpanel maldet(25821): {sigup} unpacked and installed maldet-clean.tgz Jan 01 2026 03:36:51 cpanel maldet(25821): {sigup} signature set update completed Jan 01 2026 03:36:51 cpanel maldet(25821): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 01 2026 03:36:52 cpanel maldet(26046): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 01 2026 03:36:52 cpanel maldet(26046): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 01 2026 03:36:52 cpanel maldet(26046): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 01 2026 03:36:52 cpanel maldet(26046): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 01 2026 03:36:52 cpanel maldet(26046): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 01 2026 03:36:52 cpanel maldet(26046): {scan} file list completed in 0s, found 344 files... Jan 01 2026 03:36:52 cpanel maldet(26046): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 01 2026 03:36:52 cpanel maldet(26046): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (344 files) in progress... Jan 01 2026 03:37:09 cpanel maldet(26046): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 344, malware hits 0, cleaned hits 0, time 17s Jan 01 2026 03:37:09 cpanel maldet(26046): {scan} scan report saved, to view run: maldet --report 260101-0336.26046 Jan 02 2026 03:42:17 cpanel maldet(4530): {update} checking for available updates... Jan 02 2026 03:42:17 cpanel maldet(4530): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 02 2026 03:42:17 cpanel maldet(4530): {update} hashing install files and checking against server... Jan 02 2026 03:42:18 cpanel maldet(4530): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 02 2026 03:42:18 cpanel maldet(4530): {update} latest version already installed. Jan 02 2026 03:42:18 cpanel maldet(4652): {sigup} performing signature update check... Jan 02 2026 03:42:18 cpanel maldet(4652): {sigup} local signature set is version 202512312207256 Jan 02 2026 03:42:18 cpanel maldet(4652): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 02 2026 03:42:18 cpanel maldet(4652): {sigup} new signature set 202601012945490 available Jan 02 2026 03:42:18 cpanel maldet(4652): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 02 2026 03:42:19 cpanel maldet(4652): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 02 2026 03:42:20 cpanel maldet(4652): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 02 2026 03:42:20 cpanel maldet(4652): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 02 2026 03:42:20 cpanel maldet(4652): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 02 2026 03:42:21 cpanel maldet(4652): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 02 2026 03:42:21 cpanel maldet(4652): {sigup} verified md5sum of maldet-sigpack.tgz Jan 02 2026 03:42:21 cpanel maldet(4652): {sigup} unpacked and installed maldet-sigpack.tgz Jan 02 2026 03:42:21 cpanel maldet(4652): {sigup} verified md5sum of maldet-clean.tgz Jan 02 2026 03:42:21 cpanel maldet(4652): {sigup} unpacked and installed maldet-clean.tgz Jan 02 2026 03:42:21 cpanel maldet(4652): {sigup} signature set update completed Jan 02 2026 03:42:21 cpanel maldet(4652): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 02 2026 03:42:21 cpanel maldet(4882): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 02 2026 03:42:21 cpanel maldet(4882): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 02 2026 03:42:21 cpanel maldet(4882): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 02 2026 03:42:21 cpanel maldet(4882): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 02 2026 03:42:21 cpanel maldet(4882): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 02 2026 03:42:36 cpanel maldet(4882): {scan} file list completed in 15s, found 267 files... Jan 02 2026 03:42:36 cpanel maldet(4882): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 02 2026 03:42:36 cpanel maldet(4882): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (267 files) in progress... Jan 02 2026 03:42:56 cpanel maldet(4882): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 267, malware hits 0, cleaned hits 0, time 35s Jan 02 2026 03:42:56 cpanel maldet(4882): {scan} scan report saved, to view run: maldet --report 260102-0342.4882 Jan 03 2026 03:42:11 cpanel maldet(4857): {update} checking for available updates... Jan 03 2026 03:42:11 cpanel maldet(4857): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 03 2026 03:42:11 cpanel maldet(4857): {update} hashing install files and checking against server... Jan 03 2026 03:42:11 cpanel maldet(4857): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 03 2026 03:42:11 cpanel maldet(4857): {update} latest version already installed. Jan 03 2026 03:42:11 cpanel maldet(4974): {sigup} performing signature update check... Jan 03 2026 03:42:11 cpanel maldet(4974): {sigup} local signature set is version 202601012945490 Jan 03 2026 03:42:12 cpanel maldet(4974): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 03 2026 03:42:12 cpanel maldet(4974): {sigup} latest signature set already installed Jan 03 2026 03:42:12 cpanel maldet(5068): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 03 2026 03:42:12 cpanel maldet(5068): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 03 2026 03:42:12 cpanel maldet(5068): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 03 2026 03:42:12 cpanel maldet(5068): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 03 2026 03:42:12 cpanel maldet(5068): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 03 2026 03:42:19 cpanel maldet(5068): {scan} file list completed in 7s, found 271 files... Jan 03 2026 03:42:19 cpanel maldet(5068): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 03 2026 03:42:19 cpanel maldet(5068): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (271 files) in progress... Jan 03 2026 03:42:35 cpanel maldet(5068): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 271, malware hits 0, cleaned hits 0, time 23s Jan 03 2026 03:42:35 cpanel maldet(5068): {scan} scan report saved, to view run: maldet --report 260103-0342.5068 Jan 04 2026 03:57:42 cpanel maldet(20819): {update} checking for available updates... Jan 04 2026 03:57:42 cpanel maldet(20819): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 04 2026 03:57:42 cpanel maldet(20819): {update} hashing install files and checking against server... Jan 04 2026 03:57:43 cpanel maldet(20819): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 04 2026 03:57:43 cpanel maldet(20819): {update} latest version already installed. Jan 04 2026 03:57:43 cpanel maldet(20937): {sigup} performing signature update check... Jan 04 2026 03:57:43 cpanel maldet(20937): {sigup} local signature set is version 202601012945490 Jan 04 2026 03:57:43 cpanel maldet(20937): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 04 2026 03:57:43 cpanel maldet(20937): {sigup} latest signature set already installed Jan 04 2026 03:57:43 cpanel maldet(21032): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 04 2026 03:57:44 cpanel maldet(21032): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 04 2026 03:57:44 cpanel maldet(21032): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 04 2026 03:57:44 cpanel maldet(21032): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 04 2026 03:57:44 cpanel maldet(21032): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 04 2026 03:58:15 cpanel maldet(21032): {scan} file list completed in 31s, found 293 files... Jan 04 2026 03:58:15 cpanel maldet(21032): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 04 2026 03:58:15 cpanel maldet(21032): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (293 files) in progress... Jan 04 2026 03:58:33 cpanel maldet(21032): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 293, malware hits 0, cleaned hits 0, time 50s Jan 04 2026 03:58:33 cpanel maldet(21032): {scan} scan report saved, to view run: maldet --report 260104-0357.21032 Jan 05 2026 03:43:06 cpanel maldet(16781): {update} checking for available updates... Jan 05 2026 03:43:07 cpanel maldet(16781): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 05 2026 03:43:07 cpanel maldet(16781): {update} hashing install files and checking against server... Jan 05 2026 03:43:07 cpanel maldet(16781): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 05 2026 03:43:07 cpanel maldet(16781): {update} latest version already installed. Jan 05 2026 03:43:08 cpanel maldet(16900): {sigup} performing signature update check... Jan 05 2026 03:43:08 cpanel maldet(16900): {sigup} local signature set is version 202601012945490 Jan 05 2026 03:43:08 cpanel maldet(16900): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 05 2026 03:43:08 cpanel maldet(16900): {sigup} new signature set 202601043906265 available Jan 05 2026 03:43:08 cpanel maldet(16900): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 05 2026 03:43:09 cpanel maldet(16900): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 05 2026 03:43:10 cpanel maldet(16900): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 05 2026 03:43:10 cpanel maldet(16900): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 05 2026 03:43:10 cpanel maldet(16900): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 05 2026 03:43:11 cpanel maldet(16900): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 05 2026 03:43:11 cpanel maldet(16900): {sigup} verified md5sum of maldet-sigpack.tgz Jan 05 2026 03:43:11 cpanel maldet(16900): {sigup} unpacked and installed maldet-sigpack.tgz Jan 05 2026 03:43:11 cpanel maldet(16900): {sigup} verified md5sum of maldet-clean.tgz Jan 05 2026 03:43:11 cpanel maldet(16900): {sigup} unpacked and installed maldet-clean.tgz Jan 05 2026 03:43:11 cpanel maldet(16900): {sigup} signature set update completed Jan 05 2026 03:43:11 cpanel maldet(16900): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 05 2026 03:43:11 cpanel maldet(17129): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 05 2026 03:43:11 cpanel maldet(17129): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 05 2026 03:43:11 cpanel maldet(17129): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 05 2026 03:43:11 cpanel maldet(17129): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 05 2026 03:43:11 cpanel maldet(17129): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 05 2026 03:43:13 cpanel maldet(17129): {scan} file list completed in 2s, found 299 files... Jan 05 2026 03:43:13 cpanel maldet(17129): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 05 2026 03:43:13 cpanel maldet(17129): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (299 files) in progress... Jan 05 2026 03:43:29 cpanel maldet(17129): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 299, malware hits 0, cleaned hits 0, time 18s Jan 05 2026 03:43:29 cpanel maldet(17129): {scan} scan report saved, to view run: maldet --report 260105-0343.17129 Jan 06 2026 03:55:58 cpanel maldet(17719): {update} checking for available updates... Jan 06 2026 03:55:59 cpanel maldet(17719): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 06 2026 03:55:59 cpanel maldet(17719): {update} hashing install files and checking against server... Jan 06 2026 03:55:59 cpanel maldet(17719): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 06 2026 03:55:59 cpanel maldet(17719): {update} latest version already installed. Jan 06 2026 03:55:59 cpanel maldet(17842): {sigup} performing signature update check... Jan 06 2026 03:55:59 cpanel maldet(17842): {sigup} local signature set is version 202601043906265 Jan 06 2026 03:56:00 cpanel maldet(17842): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 06 2026 03:56:00 cpanel maldet(17842): {sigup} latest signature set already installed Jan 06 2026 03:56:00 cpanel maldet(17938): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 06 2026 03:56:00 cpanel maldet(17938): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 06 2026 03:56:00 cpanel maldet(17938): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 06 2026 03:56:00 cpanel maldet(17938): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 06 2026 03:56:00 cpanel maldet(17938): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 06 2026 03:56:17 cpanel maldet(17938): {scan} file list completed in 17s, found 182 files... Jan 06 2026 03:56:17 cpanel maldet(17938): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 06 2026 03:56:17 cpanel maldet(17938): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (182 files) in progress... Jan 06 2026 03:56:35 cpanel maldet(17938): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 182, malware hits 0, cleaned hits 0, time 35s Jan 06 2026 03:56:35 cpanel maldet(17938): {scan} scan report saved, to view run: maldet --report 260106-0356.17938 Jan 07 2026 03:51:24 cpanel maldet(22907): {update} checking for available updates... Jan 07 2026 03:51:24 cpanel maldet(22907): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 07 2026 03:51:24 cpanel maldet(22907): {update} hashing install files and checking against server... Jan 07 2026 03:51:25 cpanel maldet(22907): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 07 2026 03:51:25 cpanel maldet(22907): {update} latest version already installed. Jan 07 2026 03:51:25 cpanel maldet(23026): {sigup} performing signature update check... Jan 07 2026 03:51:25 cpanel maldet(23026): {sigup} local signature set is version 202601043906265 Jan 07 2026 03:51:25 cpanel maldet(23026): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 07 2026 03:51:25 cpanel maldet(23026): {sigup} latest signature set already installed Jan 07 2026 03:51:25 cpanel maldet(23122): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 07 2026 03:51:26 cpanel maldet(23122): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 07 2026 03:51:26 cpanel maldet(23122): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 07 2026 03:51:26 cpanel maldet(23122): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 07 2026 03:51:26 cpanel maldet(23122): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 07 2026 03:51:50 cpanel maldet(23122): {scan} file list completed in 24s, found 215 files... Jan 07 2026 03:51:50 cpanel maldet(23122): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 07 2026 03:51:50 cpanel maldet(23122): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (215 files) in progress... Jan 07 2026 03:52:09 cpanel maldet(23122): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 215, malware hits 0, cleaned hits 0, time 44s Jan 07 2026 03:52:09 cpanel maldet(23122): {scan} scan report saved, to view run: maldet --report 260107-0351.23122 Jan 08 2026 03:22:05 cpanel maldet(6358): {update} checking for available updates... Jan 08 2026 03:22:06 cpanel maldet(6358): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 08 2026 03:22:06 cpanel maldet(6358): {update} hashing install files and checking against server... Jan 08 2026 03:22:06 cpanel maldet(6358): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 08 2026 03:22:06 cpanel maldet(6358): {update} latest version already installed. Jan 08 2026 03:22:06 cpanel maldet(6478): {sigup} performing signature update check... Jan 08 2026 03:22:06 cpanel maldet(6478): {sigup} local signature set is version 202601043906265 Jan 08 2026 03:22:07 cpanel maldet(6478): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 08 2026 03:22:07 cpanel maldet(6478): {sigup} new signature set 20260107676235 available Jan 08 2026 03:22:07 cpanel maldet(6478): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 08 2026 03:22:07 cpanel maldet(6478): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 08 2026 03:22:08 cpanel maldet(6478): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 08 2026 03:22:08 cpanel maldet(6478): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 08 2026 03:22:08 cpanel maldet(6478): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 08 2026 03:22:09 cpanel maldet(6478): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 08 2026 03:22:09 cpanel maldet(6478): {sigup} verified md5sum of maldet-sigpack.tgz Jan 08 2026 03:22:09 cpanel maldet(6478): {sigup} unpacked and installed maldet-sigpack.tgz Jan 08 2026 03:22:09 cpanel maldet(6478): {sigup} verified md5sum of maldet-clean.tgz Jan 08 2026 03:22:09 cpanel maldet(6478): {sigup} unpacked and installed maldet-clean.tgz Jan 08 2026 03:22:09 cpanel maldet(6478): {sigup} signature set update completed Jan 08 2026 03:22:09 cpanel maldet(6478): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 08 2026 03:22:09 cpanel maldet(6707): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 08 2026 03:22:10 cpanel maldet(6707): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 08 2026 03:22:10 cpanel maldet(6707): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 08 2026 03:22:10 cpanel maldet(6707): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 08 2026 03:22:10 cpanel maldet(6707): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 08 2026 03:22:31 cpanel maldet(6707): {scan} file list completed in 21s, found 195 files... Jan 08 2026 03:22:31 cpanel maldet(6707): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 08 2026 03:22:31 cpanel maldet(6707): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (195 files) in progress... Jan 08 2026 03:22:48 cpanel maldet(6707): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 195, malware hits 0, cleaned hits 0, time 39s Jan 08 2026 03:22:48 cpanel maldet(6707): {scan} scan report saved, to view run: maldet --report 260108-0322.6707 Jan 09 2026 03:50:42 cpanel maldet(29835): {update} checking for available updates... Jan 09 2026 03:50:42 cpanel maldet(29835): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 09 2026 03:50:42 cpanel maldet(29835): {update} hashing install files and checking against server... Jan 09 2026 03:50:43 cpanel maldet(29835): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 09 2026 03:50:43 cpanel maldet(29835): {update} latest version already installed. Jan 09 2026 03:50:43 cpanel maldet(29957): {sigup} performing signature update check... Jan 09 2026 03:50:43 cpanel maldet(29957): {sigup} local signature set is version 20260107676235 Jan 09 2026 03:50:43 cpanel maldet(29957): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 09 2026 03:50:43 cpanel maldet(29957): {sigup} latest signature set already installed Jan 09 2026 03:50:43 cpanel maldet(30052): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 09 2026 03:50:44 cpanel maldet(30052): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 09 2026 03:50:44 cpanel maldet(30052): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 09 2026 03:50:44 cpanel maldet(30052): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 09 2026 03:50:44 cpanel maldet(30052): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 09 2026 03:52:08 cpanel maldet(30052): {scan} file list completed in 84s, found 305 files... Jan 09 2026 03:52:08 cpanel maldet(30052): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 09 2026 03:52:08 cpanel maldet(30052): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (305 files) in progress... Jan 09 2026 03:52:29 cpanel maldet(30052): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 305, malware hits 0, cleaned hits 0, time 106s Jan 09 2026 03:52:29 cpanel maldet(30052): {scan} scan report saved, to view run: maldet --report 260109-0350.30052 Jan 10 2026 03:58:09 cpanel maldet(7342): {update} checking for available updates... Jan 10 2026 03:58:10 cpanel maldet(7342): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 10 2026 03:58:10 cpanel maldet(7342): {update} hashing install files and checking against server... Jan 10 2026 03:58:10 cpanel maldet(7342): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 10 2026 03:58:10 cpanel maldet(7342): {update} latest version already installed. Jan 10 2026 03:58:10 cpanel maldet(7464): {sigup} performing signature update check... Jan 10 2026 03:58:10 cpanel maldet(7464): {sigup} local signature set is version 20260107676235 Jan 10 2026 03:58:11 cpanel maldet(7464): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 10 2026 03:58:11 cpanel maldet(7464): {sigup} latest signature set already installed Jan 10 2026 03:58:11 cpanel maldet(7559): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 10 2026 03:58:11 cpanel maldet(7559): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 10 2026 03:58:12 cpanel maldet(7559): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 10 2026 03:58:12 cpanel maldet(7559): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 10 2026 03:58:12 cpanel maldet(7559): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 10 2026 03:58:28 cpanel maldet(7559): {scan} file list completed in 15s, found 464 files... Jan 10 2026 03:58:28 cpanel maldet(7559): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 10 2026 03:58:28 cpanel maldet(7559): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (464 files) in progress... Jan 10 2026 03:58:49 cpanel maldet(7559): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 464, malware hits 0, cleaned hits 0, time 38s Jan 10 2026 03:58:49 cpanel maldet(7559): {scan} scan report saved, to view run: maldet --report 260110-0358.7559 Jan 11 2026 03:41:49 cpanel maldet(10818): {update} checking for available updates... Jan 11 2026 03:41:49 cpanel maldet(10818): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 11 2026 03:41:49 cpanel maldet(10818): {update} hashing install files and checking against server... Jan 11 2026 03:41:50 cpanel maldet(10818): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 11 2026 03:41:50 cpanel maldet(10818): {update} latest version already installed. Jan 11 2026 03:41:50 cpanel maldet(10942): {sigup} performing signature update check... Jan 11 2026 03:41:50 cpanel maldet(10942): {sigup} local signature set is version 20260107676235 Jan 11 2026 03:41:51 cpanel maldet(10942): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 11 2026 03:41:51 cpanel maldet(10942): {sigup} new signature set 202601101643813 available Jan 11 2026 03:41:51 cpanel maldet(10942): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 11 2026 03:41:52 cpanel maldet(10942): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 11 2026 03:41:52 cpanel maldet(10942): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 11 2026 03:41:52 cpanel maldet(10942): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 11 2026 03:41:53 cpanel maldet(10942): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 11 2026 03:41:53 cpanel maldet(10942): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 11 2026 03:41:53 cpanel maldet(10942): {sigup} verified md5sum of maldet-sigpack.tgz Jan 11 2026 03:41:53 cpanel maldet(10942): {sigup} unpacked and installed maldet-sigpack.tgz Jan 11 2026 03:41:53 cpanel maldet(10942): {sigup} verified md5sum of maldet-clean.tgz Jan 11 2026 03:41:53 cpanel maldet(10942): {sigup} unpacked and installed maldet-clean.tgz Jan 11 2026 03:41:53 cpanel maldet(10942): {sigup} signature set update completed Jan 11 2026 03:41:53 cpanel maldet(10942): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 11 2026 03:41:54 cpanel maldet(11169): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 11 2026 03:41:54 cpanel maldet(11169): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 11 2026 03:41:54 cpanel maldet(11169): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 11 2026 03:41:54 cpanel maldet(11169): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 11 2026 03:41:54 cpanel maldet(11169): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 11 2026 03:43:16 cpanel maldet(11169): {scan} file list completed in 82s, found 170 files... Jan 11 2026 03:43:16 cpanel maldet(11169): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 11 2026 03:43:16 cpanel maldet(11169): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (170 files) in progress... Jan 11 2026 03:43:33 cpanel maldet(11169): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 170, malware hits 0, cleaned hits 0, time 99s Jan 11 2026 03:43:33 cpanel maldet(11169): {scan} scan report saved, to view run: maldet --report 260111-0341.11169 Jan 12 2026 03:53:12 cpanel maldet(10130): {update} checking for available updates... Jan 12 2026 03:53:12 cpanel maldet(10130): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 12 2026 03:53:12 cpanel maldet(10130): {update} hashing install files and checking against server... Jan 12 2026 03:53:13 cpanel maldet(10130): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 12 2026 03:53:13 cpanel maldet(10130): {update} latest version already installed. Jan 12 2026 03:53:13 cpanel maldet(10251): {sigup} performing signature update check... Jan 12 2026 03:53:13 cpanel maldet(10251): {sigup} local signature set is version 202601101643813 Jan 12 2026 03:53:13 cpanel maldet(10251): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 12 2026 03:53:13 cpanel maldet(10251): {sigup} latest signature set already installed Jan 12 2026 03:53:13 cpanel maldet(10348): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 12 2026 03:53:14 cpanel maldet(10348): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 12 2026 03:53:14 cpanel maldet(10348): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 12 2026 03:53:14 cpanel maldet(10348): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 12 2026 03:53:14 cpanel maldet(10348): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 12 2026 03:54:34 cpanel maldet(10348): {scan} file list completed in 80s, found 174 files... Jan 12 2026 03:54:34 cpanel maldet(10348): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 12 2026 03:54:34 cpanel maldet(10348): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (174 files) in progress... Jan 12 2026 03:54:51 cpanel maldet(10348): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 174, malware hits 0, cleaned hits 0, time 98s Jan 12 2026 03:54:51 cpanel maldet(10348): {scan} scan report saved, to view run: maldet --report 260112-0353.10348 Jan 13 2026 03:31:33 cpanel maldet(1463): {update} checking for available updates... Jan 13 2026 03:31:33 cpanel maldet(1463): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 13 2026 03:31:33 cpanel maldet(1463): {update} hashing install files and checking against server... Jan 13 2026 03:31:34 cpanel maldet(1463): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 13 2026 03:31:34 cpanel maldet(1463): {update} latest version already installed. Jan 13 2026 03:31:34 cpanel maldet(1638): {sigup} performing signature update check... Jan 13 2026 03:31:34 cpanel maldet(1638): {sigup} local signature set is version 202601101643813 Jan 13 2026 03:31:34 cpanel maldet(1638): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 13 2026 03:31:34 cpanel maldet(1638): {sigup} latest signature set already installed Jan 13 2026 03:31:34 cpanel maldet(1747): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 13 2026 03:31:35 cpanel maldet(1747): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 13 2026 03:31:35 cpanel maldet(1747): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 13 2026 03:31:35 cpanel maldet(1747): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 13 2026 03:31:35 cpanel maldet(1747): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 13 2026 03:32:44 cpanel maldet(1747): {scan} file list completed in 69s, found 136 files... Jan 13 2026 03:32:44 cpanel maldet(1747): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 13 2026 03:32:44 cpanel maldet(1747): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (136 files) in progress... Jan 13 2026 03:33:00 cpanel maldet(1747): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 136, malware hits 0, cleaned hits 0, time 86s Jan 13 2026 03:33:00 cpanel maldet(1747): {scan} scan report saved, to view run: maldet --report 260113-0331.1747 Jan 14 2026 03:53:09 cpanel maldet(16954): {update} checking for available updates... Jan 14 2026 03:53:10 cpanel maldet(16954): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 14 2026 03:53:10 cpanel maldet(16954): {update} hashing install files and checking against server... Jan 14 2026 03:53:10 cpanel maldet(16954): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 14 2026 03:53:10 cpanel maldet(16954): {update} latest version already installed. Jan 14 2026 03:53:10 cpanel maldet(17076): {sigup} performing signature update check... Jan 14 2026 03:53:10 cpanel maldet(17076): {sigup} local signature set is version 202601101643813 Jan 14 2026 03:53:11 cpanel maldet(17076): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 14 2026 03:53:11 cpanel maldet(17076): {sigup} latest signature set already installed Jan 14 2026 03:53:11 cpanel maldet(17171): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 14 2026 03:53:11 cpanel maldet(17171): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 14 2026 03:53:11 cpanel maldet(17171): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 14 2026 03:53:11 cpanel maldet(17171): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 14 2026 03:53:11 cpanel maldet(17171): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 14 2026 03:53:35 cpanel maldet(17171): {scan} file list completed in 24s, found 369 files... Jan 14 2026 03:53:35 cpanel maldet(17171): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 14 2026 03:53:35 cpanel maldet(17171): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (369 files) in progress... Jan 14 2026 03:53:55 cpanel maldet(17171): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 369, malware hits 0, cleaned hits 0, time 44s Jan 14 2026 03:53:55 cpanel maldet(17171): {scan} scan report saved, to view run: maldet --report 260114-0353.17171 Jan 15 2026 03:54:10 cpanel maldet(19072): {update} checking for available updates... Jan 15 2026 03:54:11 cpanel maldet(19072): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 15 2026 03:54:11 cpanel maldet(19072): {update} hashing install files and checking against server... Jan 15 2026 03:54:11 cpanel maldet(19072): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 15 2026 03:54:11 cpanel maldet(19072): {update} latest version already installed. Jan 15 2026 03:54:11 cpanel maldet(19194): {sigup} performing signature update check... Jan 15 2026 03:54:11 cpanel maldet(19194): {sigup} local signature set is version 202601101643813 Jan 15 2026 03:54:12 cpanel maldet(19194): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 15 2026 03:54:12 cpanel maldet(19194): {sigup} latest signature set already installed Jan 15 2026 03:54:12 cpanel maldet(19292): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 15 2026 03:54:12 cpanel maldet(19292): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 15 2026 03:54:12 cpanel maldet(19292): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 15 2026 03:54:12 cpanel maldet(19292): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 15 2026 03:54:12 cpanel maldet(19292): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 15 2026 03:54:31 cpanel maldet(19292): {scan} file list completed in 19s, found 235 files... Jan 15 2026 03:54:31 cpanel maldet(19292): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 15 2026 03:54:31 cpanel maldet(19292): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (235 files) in progress... Jan 15 2026 03:54:53 cpanel maldet(19292): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 235, malware hits 0, cleaned hits 0, time 41s Jan 15 2026 03:54:53 cpanel maldet(19292): {scan} scan report saved, to view run: maldet --report 260115-0354.19292 Jan 16 2026 03:34:42 cpanel maldet(25246): {update} checking for available updates... Jan 16 2026 03:34:43 cpanel maldet(25246): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 16 2026 03:34:43 cpanel maldet(25246): {update} hashing install files and checking against server... Jan 16 2026 03:34:43 cpanel maldet(25246): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 16 2026 03:34:43 cpanel maldet(25246): {update} latest version already installed. Jan 16 2026 03:34:43 cpanel maldet(25370): {sigup} performing signature update check... Jan 16 2026 03:34:43 cpanel maldet(25370): {sigup} local signature set is version 202601101643813 Jan 16 2026 03:34:44 cpanel maldet(25370): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 16 2026 03:34:44 cpanel maldet(25370): {sigup} latest signature set already installed Jan 16 2026 03:34:44 cpanel maldet(25464): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 16 2026 03:34:44 cpanel maldet(25464): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 16 2026 03:34:44 cpanel maldet(25464): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 16 2026 03:34:44 cpanel maldet(25464): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 16 2026 03:34:44 cpanel maldet(25464): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 16 2026 03:36:17 cpanel maldet(25464): {scan} file list completed in 93s, found 316 files... Jan 16 2026 03:36:17 cpanel maldet(25464): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 16 2026 03:36:17 cpanel maldet(25464): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (316 files) in progress... Jan 16 2026 03:36:34 cpanel maldet(25464): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 316, malware hits 0, cleaned hits 0, time 110s Jan 16 2026 03:36:34 cpanel maldet(25464): {scan} scan report saved, to view run: maldet --report 260116-0334.25464 Jan 17 2026 03:51:52 cpanel maldet(16465): {update} checking for available updates... Jan 17 2026 03:51:53 cpanel maldet(16465): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 17 2026 03:51:53 cpanel maldet(16465): {update} hashing install files and checking against server... Jan 17 2026 03:51:53 cpanel maldet(16465): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 17 2026 03:51:53 cpanel maldet(16465): {update} latest version already installed. Jan 17 2026 03:51:53 cpanel maldet(16588): {sigup} performing signature update check... Jan 17 2026 03:51:53 cpanel maldet(16588): {sigup} local signature set is version 202601101643813 Jan 17 2026 03:51:54 cpanel maldet(16588): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 17 2026 03:51:54 cpanel maldet(16588): {sigup} new signature set 20260116700884 available Jan 17 2026 03:51:54 cpanel maldet(16588): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 17 2026 03:51:55 cpanel maldet(16588): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 17 2026 03:51:56 cpanel maldet(16588): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 17 2026 03:51:56 cpanel maldet(16588): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 17 2026 03:51:56 cpanel maldet(16588): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 17 2026 03:51:56 cpanel maldet(16588): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 17 2026 03:51:56 cpanel maldet(16588): {sigup} verified md5sum of maldet-sigpack.tgz Jan 17 2026 03:51:57 cpanel maldet(16588): {sigup} unpacked and installed maldet-sigpack.tgz Jan 17 2026 03:51:57 cpanel maldet(16588): {sigup} verified md5sum of maldet-clean.tgz Jan 17 2026 03:51:57 cpanel maldet(16588): {sigup} unpacked and installed maldet-clean.tgz Jan 17 2026 03:51:57 cpanel maldet(16588): {sigup} signature set update completed Jan 17 2026 03:51:57 cpanel maldet(16588): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 17 2026 03:51:57 cpanel maldet(16819): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 17 2026 03:51:57 cpanel maldet(16819): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 17 2026 03:51:57 cpanel maldet(16819): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 17 2026 03:51:57 cpanel maldet(16819): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 17 2026 03:51:57 cpanel maldet(16819): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 17 2026 03:53:21 cpanel maldet(16819): {scan} file list completed in 84s, found 346 files... Jan 17 2026 03:53:21 cpanel maldet(16819): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 17 2026 03:53:21 cpanel maldet(16819): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (346 files) in progress... Jan 17 2026 03:53:38 cpanel maldet(16819): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 346, malware hits 0, cleaned hits 0, time 101s Jan 17 2026 03:53:38 cpanel maldet(16819): {scan} scan report saved, to view run: maldet --report 260117-0351.16819 Jan 18 2026 03:36:04 cpanel maldet(13744): {update} checking for available updates... Jan 18 2026 03:36:04 cpanel maldet(13744): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 18 2026 03:36:04 cpanel maldet(13744): {update} hashing install files and checking against server... Jan 18 2026 03:36:05 cpanel maldet(13744): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 18 2026 03:36:05 cpanel maldet(13744): {update} latest version already installed. Jan 18 2026 03:36:05 cpanel maldet(13868): {sigup} performing signature update check... Jan 18 2026 03:36:05 cpanel maldet(13868): {sigup} local signature set is version 20260116700884 Jan 18 2026 03:36:06 cpanel maldet(13868): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 18 2026 03:36:06 cpanel maldet(13868): {sigup} latest signature set already installed Jan 18 2026 03:36:06 cpanel maldet(13966): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 18 2026 03:36:07 cpanel maldet(13966): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 18 2026 03:36:07 cpanel maldet(13966): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 18 2026 03:36:07 cpanel maldet(13966): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 18 2026 03:36:07 cpanel maldet(13966): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 18 2026 03:37:40 cpanel maldet(13966): {scan} file list completed in 93s, found 219 files... Jan 18 2026 03:37:40 cpanel maldet(13966): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 18 2026 03:37:40 cpanel maldet(13966): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (219 files) in progress... Jan 18 2026 03:37:56 cpanel maldet(13966): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 219, malware hits 0, cleaned hits 0, time 110s Jan 18 2026 03:37:56 cpanel maldet(13966): {scan} scan report saved, to view run: maldet --report 260118-0336.13966 Jan 19 2026 03:39:33 cpanel maldet(9240): {update} checking for available updates... Jan 19 2026 03:39:33 cpanel maldet(9240): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 19 2026 03:39:33 cpanel maldet(9240): {update} hashing install files and checking against server... Jan 19 2026 03:39:34 cpanel maldet(9240): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 19 2026 03:39:34 cpanel maldet(9240): {update} latest version already installed. Jan 19 2026 03:39:34 cpanel maldet(9363): {sigup} performing signature update check... Jan 19 2026 03:39:34 cpanel maldet(9363): {sigup} local signature set is version 20260116700884 Jan 19 2026 03:39:35 cpanel maldet(9363): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 19 2026 03:39:35 cpanel maldet(9363): {sigup} latest signature set already installed Jan 19 2026 03:39:35 cpanel maldet(9459): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 19 2026 03:39:35 cpanel maldet(9459): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 19 2026 03:39:35 cpanel maldet(9459): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 19 2026 03:39:35 cpanel maldet(9459): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 19 2026 03:39:35 cpanel maldet(9459): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 19 2026 03:40:00 cpanel maldet(9459): {scan} file list completed in 25s, found 147 files... Jan 19 2026 03:40:00 cpanel maldet(9459): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 19 2026 03:40:00 cpanel maldet(9459): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (147 files) in progress... Jan 19 2026 03:40:17 cpanel maldet(9459): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 147, malware hits 0, cleaned hits 0, time 42s Jan 19 2026 03:40:17 cpanel maldet(9459): {scan} scan report saved, to view run: maldet --report 260119-0339.9459 Jan 20 2026 03:35:25 cpanel maldet(31528): {update} checking for available updates... Jan 20 2026 03:35:25 cpanel maldet(31528): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 20 2026 03:35:25 cpanel maldet(31528): {update} hashing install files and checking against server... Jan 20 2026 03:35:26 cpanel maldet(31528): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 20 2026 03:35:26 cpanel maldet(31528): {update} latest version already installed. Jan 20 2026 03:35:26 cpanel maldet(31646): {sigup} performing signature update check... Jan 20 2026 03:35:26 cpanel maldet(31646): {sigup} local signature set is version 20260116700884 Jan 20 2026 03:35:26 cpanel maldet(31646): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 20 2026 03:35:27 cpanel maldet(31646): {sigup} new signature set 202601191671201 available Jan 20 2026 03:35:27 cpanel maldet(31646): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 20 2026 03:35:27 cpanel maldet(31646): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 20 2026 03:35:28 cpanel maldet(31646): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 20 2026 03:35:28 cpanel maldet(31646): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 20 2026 03:35:28 cpanel maldet(31646): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 20 2026 03:35:29 cpanel maldet(31646): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 20 2026 03:35:29 cpanel maldet(31646): {sigup} verified md5sum of maldet-sigpack.tgz Jan 20 2026 03:35:29 cpanel maldet(31646): {sigup} unpacked and installed maldet-sigpack.tgz Jan 20 2026 03:35:29 cpanel maldet(31646): {sigup} verified md5sum of maldet-clean.tgz Jan 20 2026 03:35:29 cpanel maldet(31646): {sigup} unpacked and installed maldet-clean.tgz Jan 20 2026 03:35:29 cpanel maldet(31646): {sigup} signature set update completed Jan 20 2026 03:35:29 cpanel maldet(31646): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 20 2026 03:35:29 cpanel maldet(31877): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 20 2026 03:35:29 cpanel maldet(31877): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 20 2026 03:35:29 cpanel maldet(31877): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 20 2026 03:35:29 cpanel maldet(31877): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 20 2026 03:35:29 cpanel maldet(31877): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 20 2026 03:36:05 cpanel maldet(31877): {scan} file list completed in 36s, found 193 files... Jan 20 2026 03:36:05 cpanel maldet(31877): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 20 2026 03:36:05 cpanel maldet(31877): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (193 files) in progress... Jan 20 2026 03:36:23 cpanel maldet(31877): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 193, malware hits 0, cleaned hits 0, time 53s Jan 20 2026 03:36:23 cpanel maldet(31877): {scan} scan report saved, to view run: maldet --report 260120-0335.31877 Jan 21 2026 03:45:02 cpanel maldet(5728): {update} checking for available updates... Jan 21 2026 03:45:02 cpanel maldet(5728): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 21 2026 03:45:02 cpanel maldet(5728): {update} hashing install files and checking against server... Jan 21 2026 03:45:03 cpanel maldet(5728): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 21 2026 03:45:03 cpanel maldet(5728): {update} latest version already installed. Jan 21 2026 03:45:03 cpanel maldet(5849): {sigup} performing signature update check... Jan 21 2026 03:45:03 cpanel maldet(5849): {sigup} local signature set is version 202601191671201 Jan 21 2026 03:45:03 cpanel maldet(5849): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 21 2026 03:45:03 cpanel maldet(5849): {sigup} latest signature set already installed Jan 21 2026 03:45:03 cpanel maldet(5944): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 21 2026 03:45:04 cpanel maldet(5944): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 21 2026 03:45:04 cpanel maldet(5944): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 21 2026 03:45:04 cpanel maldet(5944): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 21 2026 03:45:04 cpanel maldet(5944): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 21 2026 03:46:29 cpanel maldet(5944): {scan} file list completed in 85s, found 149 files... Jan 21 2026 03:46:29 cpanel maldet(5944): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 21 2026 03:46:29 cpanel maldet(5944): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (149 files) in progress... Jan 21 2026 03:46:45 cpanel maldet(5944): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 149, malware hits 0, cleaned hits 0, time 102s Jan 21 2026 03:46:45 cpanel maldet(5944): {scan} scan report saved, to view run: maldet --report 260121-0345.5944 Jan 22 2026 03:55:32 cpanel maldet(28862): {update} checking for available updates... Jan 22 2026 03:55:33 cpanel maldet(28862): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 22 2026 03:55:33 cpanel maldet(28862): {update} hashing install files and checking against server... Jan 22 2026 03:55:34 cpanel maldet(28862): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 22 2026 03:55:34 cpanel maldet(28862): {update} latest version already installed. Jan 22 2026 03:55:34 cpanel maldet(28983): {sigup} performing signature update check... Jan 22 2026 03:55:34 cpanel maldet(28983): {sigup} local signature set is version 202601191671201 Jan 22 2026 03:55:34 cpanel maldet(28983): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 22 2026 03:55:34 cpanel maldet(28983): {sigup} latest signature set already installed Jan 22 2026 03:55:34 cpanel maldet(29079): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 22 2026 03:55:35 cpanel maldet(29079): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 22 2026 03:55:35 cpanel maldet(29079): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 22 2026 03:55:35 cpanel maldet(29079): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 22 2026 03:55:35 cpanel maldet(29079): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 22 2026 03:56:15 cpanel maldet(29079): {scan} file list completed in 40s, found 239 files... Jan 22 2026 03:56:15 cpanel maldet(29079): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 22 2026 03:56:15 cpanel maldet(29079): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (239 files) in progress... Jan 22 2026 03:56:33 cpanel maldet(29079): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 239, malware hits 0, cleaned hits 0, time 59s Jan 22 2026 03:56:33 cpanel maldet(29079): {scan} scan report saved, to view run: maldet --report 260122-0355.29079 Jan 23 2026 03:45:12 cpanel maldet(32740): {update} checking for available updates... Jan 23 2026 03:45:12 cpanel maldet(32740): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 23 2026 03:45:12 cpanel maldet(32740): {update} hashing install files and checking against server... Jan 23 2026 03:45:12 cpanel maldet(32740): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 23 2026 03:45:12 cpanel maldet(32740): {update} latest version already installed. Jan 23 2026 03:45:12 cpanel maldet(400): {sigup} performing signature update check... Jan 23 2026 03:45:12 cpanel maldet(400): {sigup} local signature set is version 202601191671201 Jan 23 2026 03:45:13 cpanel maldet(400): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 23 2026 03:45:13 cpanel maldet(400): {sigup} new signature set 202601222641432 available Jan 23 2026 03:45:13 cpanel maldet(400): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 23 2026 03:45:14 cpanel maldet(400): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 23 2026 03:45:15 cpanel maldet(400): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 23 2026 03:45:15 cpanel maldet(400): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 23 2026 03:45:15 cpanel maldet(400): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 23 2026 03:45:16 cpanel maldet(400): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 23 2026 03:45:16 cpanel maldet(400): {sigup} verified md5sum of maldet-sigpack.tgz Jan 23 2026 03:45:16 cpanel maldet(400): {sigup} unpacked and installed maldet-sigpack.tgz Jan 23 2026 03:45:16 cpanel maldet(400): {sigup} verified md5sum of maldet-clean.tgz Jan 23 2026 03:45:16 cpanel maldet(400): {sigup} unpacked and installed maldet-clean.tgz Jan 23 2026 03:45:16 cpanel maldet(400): {sigup} signature set update completed Jan 23 2026 03:45:16 cpanel maldet(400): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 23 2026 03:45:16 cpanel maldet(659): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 23 2026 03:45:16 cpanel maldet(659): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 23 2026 03:45:16 cpanel maldet(659): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 23 2026 03:45:16 cpanel maldet(659): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 23 2026 03:45:16 cpanel maldet(659): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 23 2026 03:45:39 cpanel maldet(659): {scan} file list completed in 23s, found 205 files... Jan 23 2026 03:45:39 cpanel maldet(659): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 23 2026 03:45:39 cpanel maldet(659): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (205 files) in progress... Jan 23 2026 03:45:59 cpanel maldet(659): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 205, malware hits 0, cleaned hits 0, time 43s Jan 23 2026 03:45:59 cpanel maldet(659): {scan} scan report saved, to view run: maldet --report 260123-0345.659 Jan 24 2026 03:51:00 cpanel maldet(611): {update} checking for available updates... Jan 24 2026 03:51:00 cpanel maldet(611): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 24 2026 03:51:00 cpanel maldet(611): {update} hashing install files and checking against server... Jan 24 2026 03:51:00 cpanel maldet(611): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 24 2026 03:51:00 cpanel maldet(611): {update} latest version already installed. Jan 24 2026 03:51:00 cpanel maldet(763): {sigup} performing signature update check... Jan 24 2026 03:51:00 cpanel maldet(763): {sigup} local signature set is version 202601222641432 Jan 24 2026 03:51:01 cpanel maldet(763): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 24 2026 03:51:01 cpanel maldet(763): {sigup} latest signature set already installed Jan 24 2026 03:51:01 cpanel maldet(856): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 24 2026 03:51:01 cpanel maldet(856): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 24 2026 03:51:01 cpanel maldet(856): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 24 2026 03:51:01 cpanel maldet(856): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 24 2026 03:51:01 cpanel maldet(856): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 24 2026 03:52:28 cpanel maldet(856): {scan} file list completed in 87s, found 186 files... Jan 24 2026 03:52:28 cpanel maldet(856): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 24 2026 03:52:28 cpanel maldet(856): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (186 files) in progress... Jan 24 2026 03:52:45 cpanel maldet(856): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 186, malware hits 0, cleaned hits 0, time 104s Jan 24 2026 03:52:45 cpanel maldet(856): {scan} scan report saved, to view run: maldet --report 260124-0351.856 Jan 25 2026 03:58:09 cpanel maldet(3527): {update} checking for available updates... Jan 25 2026 03:58:09 cpanel maldet(3527): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 25 2026 03:58:09 cpanel maldet(3527): {update} hashing install files and checking against server... Jan 25 2026 03:58:10 cpanel maldet(3527): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 25 2026 03:58:10 cpanel maldet(3527): {update} latest version already installed. Jan 25 2026 03:58:10 cpanel maldet(3646): {sigup} performing signature update check... Jan 25 2026 03:58:10 cpanel maldet(3646): {sigup} local signature set is version 202601222641432 Jan 25 2026 03:58:11 cpanel maldet(3646): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 25 2026 03:58:11 cpanel maldet(3646): {sigup} latest signature set already installed Jan 25 2026 03:58:11 cpanel maldet(3742): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 25 2026 03:58:11 cpanel maldet(3742): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 25 2026 03:58:11 cpanel maldet(3742): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 25 2026 03:58:11 cpanel maldet(3742): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 25 2026 03:58:11 cpanel maldet(3742): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 25 2026 03:59:09 cpanel maldet(3742): {scan} file list completed in 58s, found 443 files... Jan 25 2026 03:59:09 cpanel maldet(3742): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 25 2026 03:59:09 cpanel maldet(3742): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (443 files) in progress... Jan 25 2026 03:59:27 cpanel maldet(3742): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 443, malware hits 0, cleaned hits 0, time 76s Jan 25 2026 03:59:27 cpanel maldet(3742): {scan} scan report saved, to view run: maldet --report 260125-0358.3742 Jan 26 2026 03:35:22 cpanel maldet(25830): {update} checking for available updates... Jan 26 2026 03:35:22 cpanel maldet(25830): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 26 2026 03:35:22 cpanel maldet(25830): {update} hashing install files and checking against server... Jan 26 2026 03:35:23 cpanel maldet(25830): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 26 2026 03:35:23 cpanel maldet(25830): {update} latest version already installed. Jan 26 2026 03:35:23 cpanel maldet(25948): {sigup} performing signature update check... Jan 26 2026 03:35:23 cpanel maldet(25948): {sigup} local signature set is version 202601222641432 Jan 26 2026 03:35:23 cpanel maldet(25948): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 26 2026 03:35:23 cpanel maldet(25948): {sigup} new signature set 202601253611720 available Jan 26 2026 03:35:23 cpanel maldet(25948): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 26 2026 03:35:24 cpanel maldet(25948): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 26 2026 03:35:25 cpanel maldet(25948): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 26 2026 03:35:25 cpanel maldet(25948): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 26 2026 03:35:25 cpanel maldet(25948): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 26 2026 03:35:25 cpanel maldet(25948): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 26 2026 03:35:25 cpanel maldet(25948): {sigup} verified md5sum of maldet-sigpack.tgz Jan 26 2026 03:35:25 cpanel maldet(25948): {sigup} unpacked and installed maldet-sigpack.tgz Jan 26 2026 03:35:25 cpanel maldet(25948): {sigup} verified md5sum of maldet-clean.tgz Jan 26 2026 03:35:25 cpanel maldet(25948): {sigup} unpacked and installed maldet-clean.tgz Jan 26 2026 03:35:25 cpanel maldet(25948): {sigup} signature set update completed Jan 26 2026 03:35:25 cpanel maldet(25948): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 26 2026 03:35:26 cpanel maldet(26171): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 26 2026 03:35:26 cpanel maldet(26171): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 26 2026 03:35:26 cpanel maldet(26171): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 26 2026 03:35:26 cpanel maldet(26171): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 26 2026 03:35:26 cpanel maldet(26171): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 26 2026 03:37:02 cpanel maldet(26171): {scan} file list completed in 96s, found 238 files... Jan 26 2026 03:37:02 cpanel maldet(26171): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 26 2026 03:37:02 cpanel maldet(26171): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (238 files) in progress... Jan 26 2026 03:37:19 cpanel maldet(26171): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 238, malware hits 0, cleaned hits 0, time 113s Jan 26 2026 03:37:19 cpanel maldet(26171): {scan} scan report saved, to view run: maldet --report 260126-0335.26171 Jan 27 2026 03:27:55 cpanel maldet(9324): {update} checking for available updates... Jan 27 2026 03:27:56 cpanel maldet(9324): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 27 2026 03:27:56 cpanel maldet(9324): {update} hashing install files and checking against server... Jan 27 2026 03:27:56 cpanel maldet(9324): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 27 2026 03:27:56 cpanel maldet(9324): {update} latest version already installed. Jan 27 2026 03:27:56 cpanel maldet(9444): {sigup} performing signature update check... Jan 27 2026 03:27:56 cpanel maldet(9444): {sigup} local signature set is version 202601253611720 Jan 27 2026 03:27:57 cpanel maldet(9444): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 27 2026 03:27:57 cpanel maldet(9444): {sigup} latest signature set already installed Jan 27 2026 03:27:57 cpanel maldet(9539): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 27 2026 03:27:57 cpanel maldet(9539): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 27 2026 03:27:57 cpanel maldet(9539): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 27 2026 03:27:57 cpanel maldet(9539): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 27 2026 03:27:57 cpanel maldet(9539): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 27 2026 03:29:15 cpanel maldet(9539): {scan} file list completed in 78s, found 3255 files... Jan 27 2026 03:29:15 cpanel maldet(9539): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 27 2026 03:29:15 cpanel maldet(9539): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3255 files) in progress... Jan 27 2026 03:30:20 cpanel maldet(9539): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3255, malware hits 0, cleaned hits 0, time 143s Jan 27 2026 03:30:20 cpanel maldet(9539): {scan} scan report saved, to view run: maldet --report 260127-0327.9539 Jan 28 2026 03:42:09 cpanel maldet(16585): {update} checking for available updates... Jan 28 2026 03:42:10 cpanel maldet(16585): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 28 2026 03:42:10 cpanel maldet(16585): {update} hashing install files and checking against server... Jan 28 2026 03:42:10 cpanel maldet(16585): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 28 2026 03:42:10 cpanel maldet(16585): {update} latest version already installed. Jan 28 2026 03:42:10 cpanel maldet(16704): {sigup} performing signature update check... Jan 28 2026 03:42:10 cpanel maldet(16704): {sigup} local signature set is version 202601253611720 Jan 28 2026 03:42:11 cpanel maldet(16704): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 28 2026 03:42:11 cpanel maldet(16704): {sigup} latest signature set already installed Jan 28 2026 03:42:11 cpanel maldet(16799): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 28 2026 03:42:11 cpanel maldet(16799): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 28 2026 03:42:11 cpanel maldet(16799): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 28 2026 03:42:11 cpanel maldet(16799): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 28 2026 03:42:11 cpanel maldet(16799): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 28 2026 03:43:32 cpanel maldet(16799): {scan} file list completed in 81s, found 140 files... Jan 28 2026 03:43:32 cpanel maldet(16799): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 28 2026 03:43:32 cpanel maldet(16799): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (140 files) in progress... Jan 28 2026 03:43:48 cpanel maldet(16799): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 140, malware hits 0, cleaned hits 0, time 97s Jan 28 2026 03:43:48 cpanel maldet(16799): {scan} scan report saved, to view run: maldet --report 260128-0342.16799 Jan 29 2026 03:21:21 cpanel maldet(20736): {update} checking for available updates... Jan 29 2026 03:21:22 cpanel maldet(20736): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 29 2026 03:21:22 cpanel maldet(20736): {update} hashing install files and checking against server... Jan 29 2026 03:21:22 cpanel maldet(20736): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 29 2026 03:21:22 cpanel maldet(20736): {update} latest version already installed. Jan 29 2026 03:21:22 cpanel maldet(20855): {sigup} performing signature update check... Jan 29 2026 03:21:22 cpanel maldet(20855): {sigup} local signature set is version 202601253611720 Jan 29 2026 03:21:23 cpanel maldet(20855): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 29 2026 03:21:23 cpanel maldet(20855): {sigup} new signature set 20260128388144 available Jan 29 2026 03:21:23 cpanel maldet(20855): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 29 2026 03:21:24 cpanel maldet(20855): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 29 2026 03:21:24 cpanel maldet(20855): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 29 2026 03:21:24 cpanel maldet(20855): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 29 2026 03:21:25 cpanel maldet(20855): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 29 2026 03:21:25 cpanel maldet(20855): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 29 2026 03:21:25 cpanel maldet(20855): {sigup} verified md5sum of maldet-sigpack.tgz Jan 29 2026 03:21:25 cpanel maldet(20855): {sigup} unpacked and installed maldet-sigpack.tgz Jan 29 2026 03:21:25 cpanel maldet(20855): {sigup} verified md5sum of maldet-clean.tgz Jan 29 2026 03:21:25 cpanel maldet(20855): {sigup} unpacked and installed maldet-clean.tgz Jan 29 2026 03:21:25 cpanel maldet(20855): {sigup} signature set update completed Jan 29 2026 03:21:25 cpanel maldet(20855): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 29 2026 03:21:25 cpanel maldet(21087): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 29 2026 03:21:26 cpanel maldet(21087): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 29 2026 03:21:26 cpanel maldet(21087): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 29 2026 03:21:26 cpanel maldet(21087): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 29 2026 03:21:26 cpanel maldet(21087): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 29 2026 03:21:57 cpanel maldet(21087): {scan} file list completed in 31s, found 263 files... Jan 29 2026 03:21:57 cpanel maldet(21087): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 29 2026 03:21:57 cpanel maldet(21087): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (263 files) in progress... Jan 29 2026 03:22:16 cpanel maldet(21087): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 263, malware hits 0, cleaned hits 0, time 51s Jan 29 2026 03:22:16 cpanel maldet(21087): {scan} scan report saved, to view run: maldet --report 260129-0321.21087 Jan 30 2026 03:37:46 cpanel maldet(10569): {update} checking for available updates... Jan 30 2026 03:37:47 cpanel maldet(10569): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 30 2026 03:37:47 cpanel maldet(10569): {update} hashing install files and checking against server... Jan 30 2026 03:37:48 cpanel maldet(10569): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 30 2026 03:37:48 cpanel maldet(10569): {update} latest version already installed. Jan 30 2026 03:37:48 cpanel maldet(10696): {sigup} performing signature update check... Jan 30 2026 03:37:48 cpanel maldet(10696): {sigup} local signature set is version 20260128388144 Jan 30 2026 03:37:48 cpanel maldet(10696): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 30 2026 03:37:48 cpanel maldet(10696): {sigup} latest signature set already installed Jan 30 2026 03:37:48 cpanel maldet(10794): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 30 2026 03:37:49 cpanel maldet(10794): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 30 2026 03:37:49 cpanel maldet(10794): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 30 2026 03:37:49 cpanel maldet(10794): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 30 2026 03:37:49 cpanel maldet(10794): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 30 2026 03:39:21 cpanel maldet(10794): {scan} file list completed in 92s, found 213 files... Jan 30 2026 03:39:21 cpanel maldet(10794): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 30 2026 03:39:21 cpanel maldet(10794): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (213 files) in progress... Jan 30 2026 03:39:39 cpanel maldet(10794): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 213, malware hits 0, cleaned hits 0, time 111s Jan 30 2026 03:39:39 cpanel maldet(10794): {scan} scan report saved, to view run: maldet --report 260130-0337.10794 Jan 31 2026 03:18:59 cpanel maldet(6788): {update} checking for available updates... Jan 31 2026 03:19:00 cpanel maldet(6788): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 31 2026 03:19:00 cpanel maldet(6788): {update} hashing install files and checking against server... Jan 31 2026 03:19:00 cpanel maldet(6788): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 31 2026 03:19:00 cpanel maldet(6788): {update} latest version already installed. Jan 31 2026 03:19:00 cpanel maldet(6909): {sigup} performing signature update check... Jan 31 2026 03:19:00 cpanel maldet(6909): {sigup} local signature set is version 20260128388144 Jan 31 2026 03:19:01 cpanel maldet(6909): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 31 2026 03:19:01 cpanel maldet(6909): {sigup} latest signature set already installed Jan 31 2026 03:19:01 cpanel maldet(7006): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 31 2026 03:19:01 cpanel maldet(7006): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 31 2026 03:19:01 cpanel maldet(7006): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jan 31 2026 03:19:01 cpanel maldet(7006): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 31 2026 03:19:01 cpanel maldet(7006): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 31 2026 03:19:29 cpanel maldet(7006): {scan} file list completed in 28s, found 718 files... Jan 31 2026 03:19:29 cpanel maldet(7006): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Jan 31 2026 03:19:29 cpanel maldet(7006): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (718 files) in progress... Jan 31 2026 03:19:52 cpanel maldet(7006): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 718, malware hits 0, cleaned hits 0, time 51s Jan 31 2026 03:19:52 cpanel maldet(7006): {scan} scan report saved, to view run: maldet --report 260131-0319.7006 Feb 01 2026 03:19:23 cpanel maldet(18995): {update} checking for available updates... Feb 01 2026 03:19:23 cpanel maldet(18995): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 01 2026 03:19:23 cpanel maldet(18995): {update} hashing install files and checking against server... Feb 01 2026 03:19:24 cpanel maldet(18995): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 01 2026 03:19:24 cpanel maldet(18995): {update} latest version already installed. Feb 01 2026 03:19:24 cpanel maldet(19115): {sigup} performing signature update check... Feb 01 2026 03:19:24 cpanel maldet(19115): {sigup} local signature set is version 20260128388144 Feb 01 2026 03:19:24 cpanel maldet(19115): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 01 2026 03:19:24 cpanel maldet(19115): {sigup} new signature set 202601311395689 available Feb 01 2026 03:19:24 cpanel maldet(19115): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 01 2026 03:19:25 cpanel maldet(19115): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 01 2026 03:19:25 cpanel maldet(19115): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 01 2026 03:19:25 cpanel maldet(19115): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 01 2026 03:19:26 cpanel maldet(19115): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 01 2026 03:19:26 cpanel maldet(19115): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 01 2026 03:19:26 cpanel maldet(19115): {sigup} verified md5sum of maldet-sigpack.tgz Feb 01 2026 03:19:26 cpanel maldet(19115): {sigup} unpacked and installed maldet-sigpack.tgz Feb 01 2026 03:19:26 cpanel maldet(19115): {sigup} verified md5sum of maldet-clean.tgz Feb 01 2026 03:19:26 cpanel maldet(19115): {sigup} unpacked and installed maldet-clean.tgz Feb 01 2026 03:19:26 cpanel maldet(19115): {sigup} signature set update completed Feb 01 2026 03:19:26 cpanel maldet(19115): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 01 2026 03:19:26 cpanel maldet(19343): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 01 2026 03:19:26 cpanel maldet(19343): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 01 2026 03:19:26 cpanel maldet(19343): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 01 2026 03:19:26 cpanel maldet(19343): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 01 2026 03:19:26 cpanel maldet(19343): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 01 2026 03:19:27 cpanel maldet(19343): {scan} file list completed in 1s, found 154 files... Feb 01 2026 03:19:27 cpanel maldet(19343): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 01 2026 03:19:27 cpanel maldet(19343): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (154 files) in progress... Feb 01 2026 03:19:43 cpanel maldet(19343): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 154, malware hits 0, cleaned hits 0, time 17s Feb 01 2026 03:19:43 cpanel maldet(19343): {scan} scan report saved, to view run: maldet --report 260201-0319.19343 Feb 02 2026 03:49:39 cpanel maldet(32248): {update} checking for available updates... Feb 02 2026 03:49:39 cpanel maldet(32248): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 02 2026 03:49:39 cpanel maldet(32248): {update} hashing install files and checking against server... Feb 02 2026 03:49:40 cpanel maldet(32248): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 02 2026 03:49:40 cpanel maldet(32248): {update} latest version already installed. Feb 02 2026 03:49:40 cpanel maldet(32369): {sigup} performing signature update check... Feb 02 2026 03:49:40 cpanel maldet(32369): {sigup} local signature set is version 202601311395689 Feb 02 2026 03:49:40 cpanel maldet(32369): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 02 2026 03:49:40 cpanel maldet(32369): {sigup} new signature set 202602012137134 available Feb 02 2026 03:49:40 cpanel maldet(32369): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 02 2026 03:49:41 cpanel maldet(32369): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 02 2026 03:49:42 cpanel maldet(32369): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 02 2026 03:49:42 cpanel maldet(32369): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 02 2026 03:49:42 cpanel maldet(32369): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 02 2026 03:49:43 cpanel maldet(32369): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 02 2026 03:49:43 cpanel maldet(32369): {sigup} verified md5sum of maldet-sigpack.tgz Feb 02 2026 03:49:43 cpanel maldet(32369): {sigup} unpacked and installed maldet-sigpack.tgz Feb 02 2026 03:49:43 cpanel maldet(32369): {sigup} verified md5sum of maldet-clean.tgz Feb 02 2026 03:49:43 cpanel maldet(32369): {sigup} unpacked and installed maldet-clean.tgz Feb 02 2026 03:49:43 cpanel maldet(32369): {sigup} signature set update completed Feb 02 2026 03:49:43 cpanel maldet(32369): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 02 2026 03:49:43 cpanel maldet(32600): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 02 2026 03:49:43 cpanel maldet(32600): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 02 2026 03:49:43 cpanel maldet(32600): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 02 2026 03:49:43 cpanel maldet(32600): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 02 2026 03:49:43 cpanel maldet(32600): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 02 2026 03:50:17 cpanel maldet(32600): {scan} file list completed in 34s, found 130 files... Feb 02 2026 03:50:17 cpanel maldet(32600): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 02 2026 03:50:17 cpanel maldet(32600): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (130 files) in progress... Feb 02 2026 03:50:33 cpanel maldet(32600): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 130, malware hits 0, cleaned hits 0, time 50s Feb 02 2026 03:50:33 cpanel maldet(32600): {scan} scan report saved, to view run: maldet --report 260202-0349.32600 Feb 03 2026 03:25:23 cpanel maldet(7314): {update} checking for available updates... Feb 03 2026 03:25:24 cpanel maldet(7314): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 03 2026 03:25:24 cpanel maldet(7314): {update} hashing install files and checking against server... Feb 03 2026 03:25:24 cpanel maldet(7314): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 03 2026 03:25:24 cpanel maldet(7314): {update} latest version already installed. Feb 03 2026 03:25:24 cpanel maldet(7432): {sigup} performing signature update check... Feb 03 2026 03:25:24 cpanel maldet(7432): {sigup} local signature set is version 202602012137134 Feb 03 2026 03:25:25 cpanel maldet(7432): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 03 2026 03:25:25 cpanel maldet(7432): {sigup} latest signature set already installed Feb 03 2026 03:25:25 cpanel maldet(7525): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 03 2026 03:25:25 cpanel maldet(7525): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 03 2026 03:25:25 cpanel maldet(7525): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 03 2026 03:25:25 cpanel maldet(7525): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 03 2026 03:25:25 cpanel maldet(7525): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 03 2026 03:25:54 cpanel maldet(7525): {scan} file list completed in 29s, found 161 files... Feb 03 2026 03:25:54 cpanel maldet(7525): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 03 2026 03:25:54 cpanel maldet(7525): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (161 files) in progress... Feb 03 2026 03:26:10 cpanel maldet(7525): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 161, malware hits 0, cleaned hits 0, time 45s Feb 03 2026 03:26:10 cpanel maldet(7525): {scan} scan report saved, to view run: maldet --report 260203-0325.7525 Feb 04 2026 03:27:57 cpanel maldet(29088): {update} checking for available updates... Feb 04 2026 03:27:58 cpanel maldet(29088): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 04 2026 03:27:58 cpanel maldet(29088): {update} hashing install files and checking against server... Feb 04 2026 03:27:58 cpanel maldet(29088): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 04 2026 03:27:58 cpanel maldet(29088): {update} latest version already installed. Feb 04 2026 03:27:58 cpanel maldet(29211): {sigup} performing signature update check... Feb 04 2026 03:27:58 cpanel maldet(29211): {sigup} local signature set is version 202602012137134 Feb 04 2026 03:27:59 cpanel maldet(29211): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 04 2026 03:27:59 cpanel maldet(29211): {sigup} latest signature set already installed Feb 04 2026 03:27:59 cpanel maldet(29310): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 04 2026 03:27:59 cpanel maldet(29310): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 04 2026 03:27:59 cpanel maldet(29310): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 04 2026 03:27:59 cpanel maldet(29310): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 04 2026 03:27:59 cpanel maldet(29310): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 04 2026 03:28:35 cpanel maldet(29310): {scan} file list completed in 36s, found 252 files... Feb 04 2026 03:28:35 cpanel maldet(29310): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 04 2026 03:28:35 cpanel maldet(29310): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (252 files) in progress... Feb 04 2026 03:28:52 cpanel maldet(29310): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 252, malware hits 0, cleaned hits 0, time 53s Feb 04 2026 03:28:52 cpanel maldet(29310): {scan} scan report saved, to view run: maldet --report 260204-0327.29310 Feb 05 2026 04:04:24 cpanel maldet(11172): {update} checking for available updates... Feb 05 2026 04:04:25 cpanel maldet(11172): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 05 2026 04:04:25 cpanel maldet(11172): {update} hashing install files and checking against server... Feb 05 2026 04:04:25 cpanel maldet(11172): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 05 2026 04:04:25 cpanel maldet(11172): {update} latest version already installed. Feb 05 2026 04:04:26 cpanel maldet(11293): {sigup} performing signature update check... Feb 05 2026 04:04:26 cpanel maldet(11293): {sigup} local signature set is version 202602012137134 Feb 05 2026 04:04:26 cpanel maldet(11293): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 05 2026 04:04:26 cpanel maldet(11293): {sigup} new signature set 202602043110684 available Feb 05 2026 04:04:26 cpanel maldet(11293): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 05 2026 04:04:27 cpanel maldet(11293): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 05 2026 04:04:27 cpanel maldet(11293): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 05 2026 04:04:27 cpanel maldet(11293): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 05 2026 04:04:28 cpanel maldet(11293): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 05 2026 04:04:28 cpanel maldet(11293): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 05 2026 04:04:28 cpanel maldet(11293): {sigup} verified md5sum of maldet-sigpack.tgz Feb 05 2026 04:04:28 cpanel maldet(11293): {sigup} unpacked and installed maldet-sigpack.tgz Feb 05 2026 04:04:29 cpanel maldet(11293): {sigup} verified md5sum of maldet-clean.tgz Feb 05 2026 04:04:29 cpanel maldet(11293): {sigup} unpacked and installed maldet-clean.tgz Feb 05 2026 04:04:29 cpanel maldet(11293): {sigup} signature set update completed Feb 05 2026 04:04:29 cpanel maldet(11293): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 05 2026 04:04:29 cpanel maldet(11522): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 05 2026 04:04:29 cpanel maldet(11522): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 05 2026 04:04:29 cpanel maldet(11522): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 05 2026 04:04:29 cpanel maldet(11522): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 05 2026 04:04:29 cpanel maldet(11522): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 05 2026 04:04:58 cpanel maldet(11522): {scan} file list completed in 29s, found 278 files... Feb 05 2026 04:04:58 cpanel maldet(11522): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 05 2026 04:04:58 cpanel maldet(11522): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (278 files) in progress... Feb 05 2026 04:05:14 cpanel maldet(11522): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 278, malware hits 0, cleaned hits 0, time 45s Feb 05 2026 04:05:14 cpanel maldet(11522): {scan} scan report saved, to view run: maldet --report 260205-0404.11522 Feb 05 2026 12:24:30 cpanel maldet(951): {mon} could not find monitor mode dependency 'ed' in PATH, please apt/yum/dnf install ed and try again. Feb 06 2026 03:36:52 cpanel maldet(8887): {update} checking for available updates... Feb 06 2026 03:36:53 cpanel maldet(8887): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 06 2026 03:36:53 cpanel maldet(8887): {update} hashing install files and checking against server... Feb 06 2026 03:36:53 cpanel maldet(8887): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 06 2026 03:36:53 cpanel maldet(8887): {update} latest version already installed. Feb 06 2026 03:36:53 cpanel maldet(9007): {sigup} performing signature update check... Feb 06 2026 03:36:53 cpanel maldet(9007): {sigup} local signature set is version 202602043110684 Feb 06 2026 03:36:54 cpanel maldet(9007): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 06 2026 03:36:54 cpanel maldet(9007): {sigup} latest signature set already installed Feb 06 2026 03:36:54 cpanel maldet(9103): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 06 2026 03:36:54 cpanel maldet(9103): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 06 2026 03:36:54 cpanel maldet(9103): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 06 2026 03:36:54 cpanel maldet(9103): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 06 2026 03:36:54 cpanel maldet(9103): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 06 2026 03:37:02 cpanel maldet(9103): {scan} file list completed in 8s, found 206 files... Feb 06 2026 03:37:02 cpanel maldet(9103): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 06 2026 03:37:02 cpanel maldet(9103): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (206 files) in progress... Feb 06 2026 03:37:18 cpanel maldet(9103): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 206, malware hits 0, cleaned hits 0, time 24s Feb 06 2026 03:37:18 cpanel maldet(9103): {scan} scan report saved, to view run: maldet --report 260206-0336.9103 Feb 07 2026 03:34:11 cpanel maldet(24393): {update} checking for available updates... Feb 07 2026 03:34:12 cpanel maldet(24393): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 07 2026 03:34:12 cpanel maldet(24393): {update} hashing install files and checking against server... Feb 07 2026 03:34:12 cpanel maldet(24393): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 07 2026 03:34:12 cpanel maldet(24393): {update} latest version already installed. Feb 07 2026 03:34:12 cpanel maldet(24515): {sigup} performing signature update check... Feb 07 2026 03:34:12 cpanel maldet(24515): {sigup} local signature set is version 202602043110684 Feb 07 2026 03:34:12 cpanel maldet(24515): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 07 2026 03:34:12 cpanel maldet(24515): {sigup} latest signature set already installed Feb 07 2026 03:34:13 cpanel maldet(24610): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 07 2026 03:34:13 cpanel maldet(24610): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 07 2026 03:34:13 cpanel maldet(24610): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 07 2026 03:34:13 cpanel maldet(24610): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 07 2026 03:34:13 cpanel maldet(24610): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 07 2026 03:34:51 cpanel maldet(24610): {scan} file list completed in 38s, found 324 files... Feb 07 2026 03:34:51 cpanel maldet(24610): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 07 2026 03:34:51 cpanel maldet(24610): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (324 files) in progress... Feb 07 2026 03:35:10 cpanel maldet(24610): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 324, malware hits 0, cleaned hits 0, time 57s Feb 07 2026 03:35:10 cpanel maldet(24610): {scan} scan report saved, to view run: maldet --report 260207-0334.24610 Feb 08 2026 03:57:59 cpanel maldet(12912): {update} checking for available updates... Feb 08 2026 03:58:00 cpanel maldet(12912): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 08 2026 03:58:00 cpanel maldet(12912): {update} hashing install files and checking against server... Feb 08 2026 03:58:00 cpanel maldet(12912): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 08 2026 03:58:00 cpanel maldet(12912): {update} latest version already installed. Feb 08 2026 03:58:00 cpanel maldet(13036): {sigup} performing signature update check... Feb 08 2026 03:58:00 cpanel maldet(13036): {sigup} local signature set is version 202602043110684 Feb 08 2026 03:58:01 cpanel maldet(13036): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 08 2026 03:58:01 cpanel maldet(13036): {sigup} new signature set 202602074095392 available Feb 08 2026 03:58:01 cpanel maldet(13036): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 08 2026 03:58:02 cpanel maldet(13036): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 08 2026 03:58:02 cpanel maldet(13036): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 08 2026 03:58:02 cpanel maldet(13036): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 08 2026 03:58:03 cpanel maldet(13036): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 08 2026 03:58:03 cpanel maldet(13036): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 08 2026 03:58:03 cpanel maldet(13036): {sigup} verified md5sum of maldet-sigpack.tgz Feb 08 2026 03:58:04 cpanel maldet(13036): {sigup} unpacked and installed maldet-sigpack.tgz Feb 08 2026 03:58:04 cpanel maldet(13036): {sigup} verified md5sum of maldet-clean.tgz Feb 08 2026 03:58:04 cpanel maldet(13036): {sigup} unpacked and installed maldet-clean.tgz Feb 08 2026 03:58:04 cpanel maldet(13036): {sigup} signature set update completed Feb 08 2026 03:58:04 cpanel maldet(13036): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 08 2026 03:58:04 cpanel maldet(13265): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 08 2026 03:58:05 cpanel maldet(13265): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 08 2026 03:58:05 cpanel maldet(13265): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 08 2026 03:58:05 cpanel maldet(13265): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 08 2026 03:58:05 cpanel maldet(13265): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 08 2026 03:58:37 cpanel maldet(13265): {scan} file list completed in 32s, found 174 files... Feb 08 2026 03:58:37 cpanel maldet(13265): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 08 2026 03:58:37 cpanel maldet(13265): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (174 files) in progress... Feb 08 2026 03:58:53 cpanel maldet(13265): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 174, malware hits 0, cleaned hits 0, time 49s Feb 08 2026 03:58:53 cpanel maldet(13265): {scan} scan report saved, to view run: maldet --report 260208-0358.13265 Feb 09 2026 03:54:25 cpanel maldet(31179): {update} checking for available updates... Feb 09 2026 03:54:25 cpanel maldet(31179): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 09 2026 03:54:25 cpanel maldet(31179): {update} hashing install files and checking against server... Feb 09 2026 03:54:26 cpanel maldet(31179): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 09 2026 03:54:26 cpanel maldet(31179): {update} latest version already installed. Feb 09 2026 03:54:26 cpanel maldet(31300): {sigup} performing signature update check... Feb 09 2026 03:54:26 cpanel maldet(31300): {sigup} local signature set is version 202602074095392 Feb 09 2026 03:54:26 cpanel maldet(31300): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 09 2026 03:54:26 cpanel maldet(31300): {sigup} latest signature set already installed Feb 09 2026 03:54:26 cpanel maldet(31396): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 09 2026 03:54:27 cpanel maldet(31396): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 09 2026 03:54:27 cpanel maldet(31396): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 09 2026 03:54:27 cpanel maldet(31396): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 09 2026 03:54:27 cpanel maldet(31396): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 09 2026 03:54:59 cpanel maldet(31396): {scan} file list completed in 32s, found 349 files... Feb 09 2026 03:54:59 cpanel maldet(31396): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 09 2026 03:54:59 cpanel maldet(31396): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (349 files) in progress... Feb 09 2026 03:55:19 cpanel maldet(31396): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 349, malware hits 0, cleaned hits 0, time 53s Feb 09 2026 03:55:19 cpanel maldet(31396): {scan} scan report saved, to view run: maldet --report 260209-0354.31396 Feb 10 2026 03:32:00 cpanel maldet(17562): {update} checking for available updates... Feb 10 2026 03:32:00 cpanel maldet(17562): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 10 2026 03:32:00 cpanel maldet(17562): {update} hashing install files and checking against server... Feb 10 2026 03:32:01 cpanel maldet(17562): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 10 2026 03:32:01 cpanel maldet(17562): {update} latest version already installed. Feb 10 2026 03:32:01 cpanel maldet(17683): {sigup} performing signature update check... Feb 10 2026 03:32:01 cpanel maldet(17683): {sigup} local signature set is version 202602074095392 Feb 10 2026 03:32:01 cpanel maldet(17683): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 10 2026 03:32:01 cpanel maldet(17683): {sigup} latest signature set already installed Feb 10 2026 03:32:01 cpanel maldet(17781): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 10 2026 03:32:02 cpanel maldet(17781): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 10 2026 03:32:02 cpanel maldet(17781): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 10 2026 03:32:02 cpanel maldet(17781): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 10 2026 03:32:02 cpanel maldet(17781): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 10 2026 03:32:39 cpanel maldet(17781): {scan} file list completed in 37s, found 3136 files... Feb 10 2026 03:32:39 cpanel maldet(17781): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 10 2026 03:32:39 cpanel maldet(17781): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3136 files) in progress... Feb 10 2026 03:34:06 cpanel maldet(17781): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3136, malware hits 0, cleaned hits 0, time 125s Feb 10 2026 03:34:06 cpanel maldet(17781): {scan} scan report saved, to view run: maldet --report 260210-0332.17781 Feb 11 2026 03:58:28 cpanel maldet(23761): {update} checking for available updates... Feb 11 2026 03:58:29 cpanel maldet(23761): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 11 2026 03:58:29 cpanel maldet(23761): {update} hashing install files and checking against server... Feb 11 2026 03:58:29 cpanel maldet(23761): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 11 2026 03:58:29 cpanel maldet(23761): {update} latest version already installed. Feb 11 2026 03:58:29 cpanel maldet(23875): {sigup} performing signature update check... Feb 11 2026 03:58:29 cpanel maldet(23875): {sigup} local signature set is version 202602074095392 Feb 11 2026 03:58:30 cpanel maldet(23875): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 11 2026 03:58:30 cpanel maldet(23875): {sigup} new signature set 20260210873235 available Feb 11 2026 03:58:30 cpanel maldet(23875): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 11 2026 03:58:31 cpanel maldet(23875): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 11 2026 03:58:32 cpanel maldet(23875): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 11 2026 03:58:32 cpanel maldet(23875): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 11 2026 03:58:32 cpanel maldet(23875): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 11 2026 03:58:32 cpanel maldet(23875): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 11 2026 03:58:32 cpanel maldet(23875): {sigup} verified md5sum of maldet-sigpack.tgz Feb 11 2026 03:58:33 cpanel maldet(23875): {sigup} unpacked and installed maldet-sigpack.tgz Feb 11 2026 03:58:33 cpanel maldet(23875): {sigup} verified md5sum of maldet-clean.tgz Feb 11 2026 03:58:33 cpanel maldet(23875): {sigup} unpacked and installed maldet-clean.tgz Feb 11 2026 03:58:33 cpanel maldet(23875): {sigup} signature set update completed Feb 11 2026 03:58:33 cpanel maldet(23875): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 11 2026 03:58:33 cpanel maldet(24095): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 11 2026 03:58:33 cpanel maldet(24095): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 11 2026 03:58:33 cpanel maldet(24095): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 11 2026 03:58:33 cpanel maldet(24095): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 11 2026 03:58:33 cpanel maldet(24095): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 11 2026 03:59:06 cpanel maldet(24095): {scan} file list completed in 33s, found 666 files... Feb 11 2026 03:59:06 cpanel maldet(24095): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 11 2026 03:59:06 cpanel maldet(24095): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (666 files) in progress... Feb 11 2026 03:59:25 cpanel maldet(24095): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 666, malware hits 0, cleaned hits 0, time 52s Feb 11 2026 03:59:25 cpanel maldet(24095): {scan} scan report saved, to view run: maldet --report 260211-0358.24095 Feb 12 2026 03:33:58 cpanel maldet(20601): {update} checking for available updates... Feb 12 2026 03:33:59 cpanel maldet(20601): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 12 2026 03:33:59 cpanel maldet(20601): {update} hashing install files and checking against server... Feb 12 2026 03:33:59 cpanel maldet(20601): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 12 2026 03:33:59 cpanel maldet(20601): {update} latest version already installed. Feb 12 2026 03:33:59 cpanel maldet(20724): {sigup} performing signature update check... Feb 12 2026 03:33:59 cpanel maldet(20724): {sigup} local signature set is version 20260210873235 Feb 12 2026 03:34:00 cpanel maldet(20724): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 12 2026 03:34:00 cpanel maldet(20724): {sigup} latest signature set already installed Feb 12 2026 03:34:00 cpanel maldet(20819): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 12 2026 03:34:00 cpanel maldet(20819): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 12 2026 03:34:00 cpanel maldet(20819): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 12 2026 03:34:00 cpanel maldet(20819): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 12 2026 03:34:00 cpanel maldet(20819): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 12 2026 03:34:35 cpanel maldet(20819): {scan} file list completed in 35s, found 168 files... Feb 12 2026 03:34:35 cpanel maldet(20819): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 12 2026 03:34:35 cpanel maldet(20819): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (168 files) in progress... Feb 12 2026 03:34:51 cpanel maldet(20819): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 168, malware hits 0, cleaned hits 0, time 51s Feb 12 2026 03:34:51 cpanel maldet(20819): {scan} scan report saved, to view run: maldet --report 260212-0334.20819 Feb 13 2026 03:26:05 cpanel maldet(17261): {update} checking for available updates... Feb 13 2026 03:26:05 cpanel maldet(17261): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 13 2026 03:26:05 cpanel maldet(17261): {update} hashing install files and checking against server... Feb 13 2026 03:26:06 cpanel maldet(17261): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 13 2026 03:26:06 cpanel maldet(17261): {update} latest version already installed. Feb 13 2026 03:26:06 cpanel maldet(17380): {sigup} performing signature update check... Feb 13 2026 03:26:06 cpanel maldet(17380): {sigup} local signature set is version 20260210873235 Feb 13 2026 03:26:06 cpanel maldet(17380): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 13 2026 03:26:06 cpanel maldet(17380): {sigup} latest signature set already installed Feb 13 2026 03:26:06 cpanel maldet(17474): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 13 2026 03:26:07 cpanel maldet(17474): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 13 2026 03:26:07 cpanel maldet(17474): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 13 2026 03:26:07 cpanel maldet(17474): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 13 2026 03:26:07 cpanel maldet(17474): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 13 2026 03:26:45 cpanel maldet(17474): {scan} file list completed in 38s, found 227 files... Feb 13 2026 03:26:45 cpanel maldet(17474): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 13 2026 03:26:45 cpanel maldet(17474): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (227 files) in progress... Feb 13 2026 03:27:02 cpanel maldet(17474): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 227, malware hits 0, cleaned hits 0, time 56s Feb 13 2026 03:27:02 cpanel maldet(17474): {scan} scan report saved, to view run: maldet --report 260213-0326.17474 Feb 14 2026 03:45:00 cpanel maldet(15600): {update} checking for available updates... Feb 14 2026 03:45:00 cpanel maldet(15600): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 14 2026 03:45:00 cpanel maldet(15600): {update} hashing install files and checking against server... Feb 14 2026 03:45:01 cpanel maldet(15600): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 14 2026 03:45:01 cpanel maldet(15600): {update} latest version already installed. Feb 14 2026 03:45:01 cpanel maldet(15726): {sigup} performing signature update check... Feb 14 2026 03:45:01 cpanel maldet(15726): {sigup} local signature set is version 20260210873235 Feb 14 2026 03:45:01 cpanel maldet(15726): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 14 2026 03:45:01 cpanel maldet(15726): {sigup} new signature set 202602131845305 available Feb 14 2026 03:45:01 cpanel maldet(15726): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 14 2026 03:45:02 cpanel maldet(15726): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 14 2026 03:45:02 cpanel maldet(15726): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 14 2026 03:45:02 cpanel maldet(15726): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 14 2026 03:45:03 cpanel maldet(15726): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 14 2026 03:45:03 cpanel maldet(15726): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 14 2026 03:45:03 cpanel maldet(15726): {sigup} verified md5sum of maldet-sigpack.tgz Feb 14 2026 03:45:04 cpanel maldet(15726): {sigup} unpacked and installed maldet-sigpack.tgz Feb 14 2026 03:45:04 cpanel maldet(15726): {sigup} verified md5sum of maldet-clean.tgz Feb 14 2026 03:45:04 cpanel maldet(15726): {sigup} unpacked and installed maldet-clean.tgz Feb 14 2026 03:45:04 cpanel maldet(15726): {sigup} signature set update completed Feb 14 2026 03:45:04 cpanel maldet(15726): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 14 2026 03:45:04 cpanel maldet(16010): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 14 2026 03:45:05 cpanel maldet(16010): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 14 2026 03:45:05 cpanel maldet(16010): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 14 2026 03:45:05 cpanel maldet(16010): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 14 2026 03:45:05 cpanel maldet(16010): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 14 2026 03:45:36 cpanel maldet(16010): {scan} file list completed in 31s, found 344 files... Feb 14 2026 03:45:36 cpanel maldet(16010): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 14 2026 03:45:36 cpanel maldet(16010): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (344 files) in progress... Feb 14 2026 03:45:54 cpanel maldet(16010): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 344, malware hits 0, cleaned hits 0, time 50s Feb 14 2026 03:45:54 cpanel maldet(16010): {scan} scan report saved, to view run: maldet --report 260214-0345.16010 Feb 15 2026 03:53:10 cpanel maldet(7508): {update} checking for available updates... Feb 15 2026 03:53:10 cpanel maldet(7508): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 15 2026 03:53:10 cpanel maldet(7508): {update} hashing install files and checking against server... Feb 15 2026 03:53:11 cpanel maldet(7508): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 15 2026 03:53:11 cpanel maldet(7508): {update} latest version already installed. Feb 15 2026 03:53:11 cpanel maldet(7632): {sigup} performing signature update check... Feb 15 2026 03:53:11 cpanel maldet(7632): {sigup} local signature set is version 202602131845305 Feb 15 2026 03:53:11 cpanel maldet(7632): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 15 2026 03:53:11 cpanel maldet(7632): {sigup} latest signature set already installed Feb 15 2026 03:53:12 cpanel maldet(7728): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 15 2026 03:53:12 cpanel maldet(7728): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 15 2026 03:53:12 cpanel maldet(7728): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 15 2026 03:53:12 cpanel maldet(7728): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 15 2026 03:53:12 cpanel maldet(7728): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 15 2026 03:53:49 cpanel maldet(7728): {scan} file list completed in 37s, found 531 files... Feb 15 2026 03:53:49 cpanel maldet(7728): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 15 2026 03:53:49 cpanel maldet(7728): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (531 files) in progress... Feb 15 2026 03:54:11 cpanel maldet(7728): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 531, malware hits 0, cleaned hits 0, time 59s Feb 15 2026 03:54:11 cpanel maldet(7728): {scan} scan report saved, to view run: maldet --report 260215-0353.7728 Feb 16 2026 03:39:00 cpanel maldet(5311): {update} checking for available updates... Feb 16 2026 03:39:01 cpanel maldet(5311): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 16 2026 03:39:01 cpanel maldet(5311): {update} hashing install files and checking against server... Feb 16 2026 03:39:01 cpanel maldet(5311): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 16 2026 03:39:01 cpanel maldet(5311): {update} latest version already installed. Feb 16 2026 03:39:01 cpanel maldet(5430): {sigup} performing signature update check... Feb 16 2026 03:39:01 cpanel maldet(5430): {sigup} local signature set is version 202602131845305 Feb 16 2026 03:39:02 cpanel maldet(5430): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 16 2026 03:39:02 cpanel maldet(5430): {sigup} latest signature set already installed Feb 16 2026 03:39:02 cpanel maldet(5525): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 16 2026 03:39:02 cpanel maldet(5525): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 16 2026 03:39:02 cpanel maldet(5525): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 16 2026 03:39:02 cpanel maldet(5525): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 16 2026 03:39:02 cpanel maldet(5525): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 16 2026 03:39:33 cpanel maldet(5525): {scan} file list completed in 31s, found 359 files... Feb 16 2026 03:39:33 cpanel maldet(5525): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 16 2026 03:39:33 cpanel maldet(5525): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (359 files) in progress... Feb 16 2026 03:39:51 cpanel maldet(5525): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 359, malware hits 0, cleaned hits 0, time 49s Feb 16 2026 03:39:51 cpanel maldet(5525): {scan} scan report saved, to view run: maldet --report 260216-0339.5525 Feb 17 2026 03:28:45 cpanel maldet(14427): {update} checking for available updates... Feb 17 2026 03:28:45 cpanel maldet(14427): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 17 2026 03:28:45 cpanel maldet(14427): {update} hashing install files and checking against server... Feb 17 2026 03:28:46 cpanel maldet(14427): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 17 2026 03:28:46 cpanel maldet(14427): {update} latest version already installed. Feb 17 2026 03:28:46 cpanel maldet(14546): {sigup} performing signature update check... Feb 17 2026 03:28:46 cpanel maldet(14546): {sigup} local signature set is version 202602131845305 Feb 17 2026 03:28:46 cpanel maldet(14546): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 17 2026 03:28:46 cpanel maldet(14546): {sigup} new signature set 202602163981045 available Feb 17 2026 03:28:46 cpanel maldet(14546): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 17 2026 03:28:47 cpanel maldet(14546): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 17 2026 03:28:47 cpanel maldet(14546): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 17 2026 03:28:47 cpanel maldet(14546): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 17 2026 03:28:48 cpanel maldet(14546): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 17 2026 03:28:48 cpanel maldet(14546): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 17 2026 03:28:48 cpanel maldet(14546): {sigup} verified md5sum of maldet-sigpack.tgz Feb 17 2026 03:28:48 cpanel maldet(14546): {sigup} unpacked and installed maldet-sigpack.tgz Feb 17 2026 03:28:48 cpanel maldet(14546): {sigup} verified md5sum of maldet-clean.tgz Feb 17 2026 03:28:48 cpanel maldet(14546): {sigup} unpacked and installed maldet-clean.tgz Feb 17 2026 03:28:48 cpanel maldet(14546): {sigup} signature set update completed Feb 17 2026 03:28:48 cpanel maldet(14546): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 17 2026 03:28:49 cpanel maldet(14771): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 17 2026 03:28:49 cpanel maldet(14771): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 17 2026 03:28:49 cpanel maldet(14771): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 17 2026 03:28:49 cpanel maldet(14771): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 17 2026 03:28:49 cpanel maldet(14771): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 17 2026 03:29:24 cpanel maldet(14771): {scan} file list completed in 35s, found 284 files... Feb 17 2026 03:29:24 cpanel maldet(14771): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 17 2026 03:29:24 cpanel maldet(14771): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (284 files) in progress... Feb 17 2026 03:29:40 cpanel maldet(14771): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 284, malware hits 0, cleaned hits 0, time 51s Feb 17 2026 03:29:40 cpanel maldet(14771): {scan} scan report saved, to view run: maldet --report 260217-0328.14771 Feb 18 2026 03:26:57 cpanel maldet(25568): {update} checking for available updates... Feb 18 2026 03:26:57 cpanel maldet(25568): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 18 2026 03:26:57 cpanel maldet(25568): {update} hashing install files and checking against server... Feb 18 2026 03:26:58 cpanel maldet(25568): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 18 2026 03:26:58 cpanel maldet(25568): {update} latest version already installed. Feb 18 2026 03:26:58 cpanel maldet(25689): {sigup} performing signature update check... Feb 18 2026 03:26:58 cpanel maldet(25689): {sigup} local signature set is version 202602163981045 Feb 18 2026 03:26:58 cpanel maldet(25689): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 18 2026 03:26:58 cpanel maldet(25689): {sigup} latest signature set already installed Feb 18 2026 03:26:58 cpanel maldet(25783): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 18 2026 03:26:59 cpanel maldet(25783): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 18 2026 03:26:59 cpanel maldet(25783): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 18 2026 03:26:59 cpanel maldet(25783): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 18 2026 03:26:59 cpanel maldet(25783): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 18 2026 03:27:36 cpanel maldet(25783): {scan} file list completed in 37s, found 190 files... Feb 18 2026 03:27:36 cpanel maldet(25783): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 18 2026 03:27:36 cpanel maldet(25783): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (190 files) in progress... Feb 18 2026 03:27:54 cpanel maldet(25783): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 190, malware hits 0, cleaned hits 0, time 56s Feb 18 2026 03:27:54 cpanel maldet(25783): {scan} scan report saved, to view run: maldet --report 260218-0326.25783 Feb 19 2026 03:51:54 cpanel maldet(1302): {update} checking for available updates... Feb 19 2026 03:51:55 cpanel maldet(1302): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 19 2026 03:51:55 cpanel maldet(1302): {update} hashing install files and checking against server... Feb 19 2026 03:51:55 cpanel maldet(1302): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 19 2026 03:51:55 cpanel maldet(1302): {update} latest version already installed. Feb 19 2026 03:51:55 cpanel maldet(1422): {sigup} performing signature update check... Feb 19 2026 03:51:55 cpanel maldet(1422): {sigup} local signature set is version 202602163981045 Feb 19 2026 03:51:56 cpanel maldet(1422): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 19 2026 03:51:56 cpanel maldet(1422): {sigup} latest signature set already installed Feb 19 2026 03:51:56 cpanel maldet(1557): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 19 2026 03:51:56 cpanel maldet(1557): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 19 2026 03:51:56 cpanel maldet(1557): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 19 2026 03:51:56 cpanel maldet(1557): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 19 2026 03:51:56 cpanel maldet(1557): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 19 2026 03:52:29 cpanel maldet(1557): {scan} file list completed in 33s, found 359 files... Feb 19 2026 03:52:29 cpanel maldet(1557): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 19 2026 03:52:29 cpanel maldet(1557): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (359 files) in progress... Feb 19 2026 03:52:48 cpanel maldet(1557): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 359, malware hits 0, cleaned hits 0, time 52s Feb 19 2026 03:52:48 cpanel maldet(1557): {scan} scan report saved, to view run: maldet --report 260219-0351.1557 Feb 20 2026 03:51:12 cpanel maldet(18348): {update} checking for available updates... Feb 20 2026 03:51:12 cpanel maldet(18348): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 20 2026 03:51:12 cpanel maldet(18348): {update} hashing install files and checking against server... Feb 20 2026 03:51:13 cpanel maldet(18348): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 20 2026 03:51:13 cpanel maldet(18348): {update} latest version already installed. Feb 20 2026 03:51:13 cpanel maldet(18467): {sigup} performing signature update check... Feb 20 2026 03:51:13 cpanel maldet(18467): {sigup} local signature set is version 202602163981045 Feb 20 2026 03:51:13 cpanel maldet(18467): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 20 2026 03:51:13 cpanel maldet(18467): {sigup} new signature set 202602193480447 available Feb 20 2026 03:51:13 cpanel maldet(18467): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 20 2026 03:51:14 cpanel maldet(18467): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 20 2026 03:51:15 cpanel maldet(18467): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 20 2026 03:51:15 cpanel maldet(18467): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 20 2026 03:51:15 cpanel maldet(18467): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 20 2026 03:51:16 cpanel maldet(18467): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 20 2026 03:51:16 cpanel maldet(18467): {sigup} verified md5sum of maldet-sigpack.tgz Feb 20 2026 03:51:16 cpanel maldet(18467): {sigup} unpacked and installed maldet-sigpack.tgz Feb 20 2026 03:51:16 cpanel maldet(18467): {sigup} verified md5sum of maldet-clean.tgz Feb 20 2026 03:51:16 cpanel maldet(18467): {sigup} unpacked and installed maldet-clean.tgz Feb 20 2026 03:51:16 cpanel maldet(18467): {sigup} signature set update completed Feb 20 2026 03:51:16 cpanel maldet(18467): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 20 2026 03:51:16 cpanel maldet(18700): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 20 2026 03:51:16 cpanel maldet(18700): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 20 2026 03:51:16 cpanel maldet(18700): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 20 2026 03:51:16 cpanel maldet(18700): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 20 2026 03:51:16 cpanel maldet(18700): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 20 2026 03:51:55 cpanel maldet(18700): {scan} file list completed in 39s, found 406 files... Feb 20 2026 03:51:55 cpanel maldet(18700): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 20 2026 03:51:55 cpanel maldet(18700): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (406 files) in progress... Feb 20 2026 03:52:14 cpanel maldet(18700): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 406, malware hits 0, cleaned hits 0, time 58s Feb 20 2026 03:52:14 cpanel maldet(18700): {scan} scan report saved, to view run: maldet --report 260220-0351.18700 Feb 21 2026 03:36:35 cpanel maldet(23585): {update} checking for available updates... Feb 21 2026 03:36:35 cpanel maldet(23585): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 21 2026 03:36:35 cpanel maldet(23585): {update} hashing install files and checking against server... Feb 21 2026 03:36:36 cpanel maldet(23585): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 21 2026 03:36:36 cpanel maldet(23585): {update} latest version already installed. Feb 21 2026 03:36:36 cpanel maldet(23708): {sigup} performing signature update check... Feb 21 2026 03:36:36 cpanel maldet(23708): {sigup} local signature set is version 202602193480447 Feb 21 2026 03:36:36 cpanel maldet(23708): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 21 2026 03:36:36 cpanel maldet(23708): {sigup} latest signature set already installed Feb 21 2026 03:36:36 cpanel maldet(23804): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 21 2026 03:36:37 cpanel maldet(23804): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 21 2026 03:36:37 cpanel maldet(23804): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 21 2026 03:36:37 cpanel maldet(23804): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 21 2026 03:36:37 cpanel maldet(23804): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 21 2026 03:37:18 cpanel maldet(23804): {scan} file list completed in 41s, found 365 files... Feb 21 2026 03:37:18 cpanel maldet(23804): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 21 2026 03:37:18 cpanel maldet(23804): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (365 files) in progress... Feb 21 2026 03:37:36 cpanel maldet(23804): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 365, malware hits 0, cleaned hits 0, time 60s Feb 21 2026 03:37:36 cpanel maldet(23804): {scan} scan report saved, to view run: maldet --report 260221-0336.23804 Feb 22 2026 03:42:07 cpanel maldet(30911): {update} checking for available updates... Feb 22 2026 03:42:08 cpanel maldet(30911): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 22 2026 03:42:08 cpanel maldet(30911): {update} hashing install files and checking against server... Feb 22 2026 03:42:08 cpanel maldet(30911): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 22 2026 03:42:08 cpanel maldet(30911): {update} latest version already installed. Feb 22 2026 03:42:08 cpanel maldet(31033): {sigup} performing signature update check... Feb 22 2026 03:42:08 cpanel maldet(31033): {sigup} local signature set is version 202602193480447 Feb 22 2026 03:42:09 cpanel maldet(31033): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 22 2026 03:42:09 cpanel maldet(31033): {sigup} latest signature set already installed Feb 22 2026 03:42:09 cpanel maldet(31127): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 22 2026 03:42:09 cpanel maldet(31127): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 22 2026 03:42:09 cpanel maldet(31127): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 22 2026 03:42:09 cpanel maldet(31127): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 22 2026 03:42:09 cpanel maldet(31127): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 22 2026 03:42:45 cpanel maldet(31127): {scan} file list completed in 36s, found 428 files... Feb 22 2026 03:42:45 cpanel maldet(31127): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 22 2026 03:42:45 cpanel maldet(31127): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (428 files) in progress... Feb 22 2026 03:43:09 cpanel maldet(31127): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 428, malware hits 0, cleaned hits 0, time 59s Feb 22 2026 03:43:09 cpanel maldet(31127): {scan} scan report saved, to view run: maldet --report 260222-0342.31127 Feb 23 2026 03:23:26 cpanel maldet(16412): {update} checking for available updates... Feb 23 2026 03:23:26 cpanel maldet(16412): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 23 2026 03:23:26 cpanel maldet(16412): {update} hashing install files and checking against server... Feb 23 2026 03:23:27 cpanel maldet(16412): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 23 2026 03:23:27 cpanel maldet(16412): {update} latest version already installed. Feb 23 2026 03:23:27 cpanel maldet(16533): {sigup} performing signature update check... Feb 23 2026 03:23:27 cpanel maldet(16533): {sigup} local signature set is version 202602193480447 Feb 23 2026 03:23:27 cpanel maldet(16533): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 23 2026 03:23:27 cpanel maldet(16533): {sigup} new signature set 202602221122240 available Feb 23 2026 03:23:27 cpanel maldet(16533): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 23 2026 03:23:28 cpanel maldet(16533): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 23 2026 03:23:29 cpanel maldet(16533): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 23 2026 03:23:29 cpanel maldet(16533): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 23 2026 03:23:29 cpanel maldet(16533): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 23 2026 03:23:30 cpanel maldet(16533): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 23 2026 03:23:30 cpanel maldet(16533): {sigup} verified md5sum of maldet-sigpack.tgz Feb 23 2026 03:23:30 cpanel maldet(16533): {sigup} unpacked and installed maldet-sigpack.tgz Feb 23 2026 03:23:30 cpanel maldet(16533): {sigup} verified md5sum of maldet-clean.tgz Feb 23 2026 03:23:30 cpanel maldet(16533): {sigup} unpacked and installed maldet-clean.tgz Feb 23 2026 03:23:30 cpanel maldet(16533): {sigup} signature set update completed Feb 23 2026 03:23:30 cpanel maldet(16533): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 23 2026 03:23:30 cpanel maldet(16764): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 23 2026 03:23:30 cpanel maldet(16764): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 23 2026 03:23:30 cpanel maldet(16764): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 23 2026 03:23:30 cpanel maldet(16764): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 23 2026 03:23:30 cpanel maldet(16764): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 23 2026 03:24:03 cpanel maldet(16764): {scan} file list completed in 33s, found 412 files... Feb 23 2026 03:24:03 cpanel maldet(16764): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 23 2026 03:24:03 cpanel maldet(16764): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (412 files) in progress... Feb 23 2026 03:24:21 cpanel maldet(16764): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 412, malware hits 0, cleaned hits 0, time 51s Feb 23 2026 03:24:21 cpanel maldet(16764): {scan} scan report saved, to view run: maldet --report 260223-0323.16764 Feb 24 2026 03:47:55 cpanel maldet(28647): {update} checking for available updates... Feb 24 2026 03:47:56 cpanel maldet(28647): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 24 2026 03:47:56 cpanel maldet(28647): {update} hashing install files and checking against server... Feb 24 2026 03:47:56 cpanel maldet(28647): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 24 2026 03:47:56 cpanel maldet(28647): {update} latest version already installed. Feb 24 2026 03:47:56 cpanel maldet(28762): {sigup} performing signature update check... Feb 24 2026 03:47:56 cpanel maldet(28762): {sigup} local signature set is version 202602221122240 Feb 24 2026 03:47:57 cpanel maldet(28762): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 24 2026 03:47:57 cpanel maldet(28762): {sigup} latest signature set already installed Feb 24 2026 03:47:57 cpanel maldet(28855): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 24 2026 03:47:57 cpanel maldet(28855): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 24 2026 03:47:57 cpanel maldet(28855): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 24 2026 03:47:57 cpanel maldet(28855): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 24 2026 03:47:57 cpanel maldet(28855): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 24 2026 03:48:37 cpanel maldet(28855): {scan} file list completed in 40s, found 352 files... Feb 24 2026 03:48:37 cpanel maldet(28855): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 24 2026 03:48:37 cpanel maldet(28855): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (352 files) in progress... Feb 24 2026 03:48:55 cpanel maldet(28855): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 352, malware hits 0, cleaned hits 0, time 58s Feb 24 2026 03:48:55 cpanel maldet(28855): {scan} scan report saved, to view run: maldet --report 260224-0347.28855 Feb 25 2026 03:48:34 cpanel maldet(3665): {update} checking for available updates... Feb 25 2026 03:48:35 cpanel maldet(3665): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 25 2026 03:48:35 cpanel maldet(3665): {update} hashing install files and checking against server... Feb 25 2026 03:48:35 cpanel maldet(3665): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 25 2026 03:48:35 cpanel maldet(3665): {update} latest version already installed. Feb 25 2026 03:48:35 cpanel maldet(3801): {sigup} performing signature update check... Feb 25 2026 03:48:35 cpanel maldet(3801): {sigup} local signature set is version 202602221122240 Feb 25 2026 03:48:36 cpanel maldet(3801): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 25 2026 03:48:36 cpanel maldet(3801): {sigup} latest signature set already installed Feb 25 2026 03:48:36 cpanel maldet(3903): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 25 2026 03:48:36 cpanel maldet(3903): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 25 2026 03:48:36 cpanel maldet(3903): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 25 2026 03:48:36 cpanel maldet(3903): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 25 2026 03:48:36 cpanel maldet(3903): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 25 2026 03:49:16 cpanel maldet(3903): {scan} file list completed in 40s, found 2585 files... Feb 25 2026 03:49:16 cpanel maldet(3903): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 25 2026 03:49:16 cpanel maldet(3903): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2585 files) in progress... Feb 25 2026 03:49:50 cpanel maldet(3903): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2585, malware hits 0, cleaned hits 0, time 74s Feb 25 2026 03:49:50 cpanel maldet(3903): {scan} scan report saved, to view run: maldet --report 260225-0348.3903 Feb 26 2026 03:44:32 cpanel maldet(2474): {update} checking for available updates... Feb 26 2026 03:44:32 cpanel maldet(2474): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 26 2026 03:44:32 cpanel maldet(2474): {update} hashing install files and checking against server... Feb 26 2026 03:44:33 cpanel maldet(2474): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 26 2026 03:44:33 cpanel maldet(2474): {update} latest version already installed. Feb 26 2026 03:44:33 cpanel maldet(2599): {sigup} performing signature update check... Feb 26 2026 03:44:33 cpanel maldet(2599): {sigup} local signature set is version 202602221122240 Feb 26 2026 03:44:33 cpanel maldet(2599): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 26 2026 03:44:33 cpanel maldet(2599): {sigup} new signature set 202602251468141 available Feb 26 2026 03:44:33 cpanel maldet(2599): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 26 2026 03:44:34 cpanel maldet(2599): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 26 2026 03:44:35 cpanel maldet(2599): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 26 2026 03:44:35 cpanel maldet(2599): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 26 2026 03:44:35 cpanel maldet(2599): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 26 2026 03:44:36 cpanel maldet(2599): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 26 2026 03:44:36 cpanel maldet(2599): {sigup} verified md5sum of maldet-sigpack.tgz Feb 26 2026 03:44:36 cpanel maldet(2599): {sigup} unpacked and installed maldet-sigpack.tgz Feb 26 2026 03:44:36 cpanel maldet(2599): {sigup} verified md5sum of maldet-clean.tgz Feb 26 2026 03:44:36 cpanel maldet(2599): {sigup} unpacked and installed maldet-clean.tgz Feb 26 2026 03:44:36 cpanel maldet(2599): {sigup} signature set update completed Feb 26 2026 03:44:36 cpanel maldet(2599): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 26 2026 03:44:36 cpanel maldet(2835): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 26 2026 03:44:37 cpanel maldet(2835): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 26 2026 03:44:37 cpanel maldet(2835): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 26 2026 03:44:37 cpanel maldet(2835): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 26 2026 03:44:37 cpanel maldet(2835): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 26 2026 03:45:13 cpanel maldet(2835): {scan} file list completed in 36s, found 350 files... Feb 26 2026 03:45:13 cpanel maldet(2835): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 26 2026 03:45:13 cpanel maldet(2835): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (350 files) in progress... Feb 26 2026 03:45:32 cpanel maldet(2835): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 350, malware hits 0, cleaned hits 0, time 56s Feb 26 2026 03:45:32 cpanel maldet(2835): {scan} scan report saved, to view run: maldet --report 260226-0344.2835 Feb 27 2026 03:30:17 cpanel maldet(26429): {update} checking for available updates... Feb 27 2026 03:30:17 cpanel maldet(26429): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 27 2026 03:30:17 cpanel maldet(26429): {update} hashing install files and checking against server... Feb 27 2026 03:30:18 cpanel maldet(26429): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 27 2026 03:30:18 cpanel maldet(26429): {update} latest version already installed. Feb 27 2026 03:30:18 cpanel maldet(26556): {sigup} performing signature update check... Feb 27 2026 03:30:18 cpanel maldet(26556): {sigup} local signature set is version 202602251468141 Feb 27 2026 03:30:19 cpanel maldet(26556): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 27 2026 03:30:19 cpanel maldet(26556): {sigup} latest signature set already installed Feb 27 2026 03:30:19 cpanel maldet(26654): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 27 2026 03:30:19 cpanel maldet(26654): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 27 2026 03:30:19 cpanel maldet(26654): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 27 2026 03:30:19 cpanel maldet(26654): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 27 2026 03:30:19 cpanel maldet(26654): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 27 2026 03:30:57 cpanel maldet(26654): {scan} file list completed in 38s, found 252 files... Feb 27 2026 03:30:57 cpanel maldet(26654): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 27 2026 03:30:57 cpanel maldet(26654): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (252 files) in progress... Feb 27 2026 03:31:14 cpanel maldet(26654): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 252, malware hits 0, cleaned hits 0, time 55s Feb 27 2026 03:31:14 cpanel maldet(26654): {scan} scan report saved, to view run: maldet --report 260227-0330.26654 Feb 28 2026 03:41:56 cpanel maldet(20967): {update} checking for available updates... Feb 28 2026 03:41:57 cpanel maldet(20967): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 28 2026 03:41:57 cpanel maldet(20967): {update} hashing install files and checking against server... Feb 28 2026 03:41:57 cpanel maldet(20967): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 28 2026 03:41:57 cpanel maldet(20967): {update} latest version already installed. Feb 28 2026 03:41:57 cpanel maldet(21087): {sigup} performing signature update check... Feb 28 2026 03:41:57 cpanel maldet(21087): {sigup} local signature set is version 202602251468141 Feb 28 2026 03:41:58 cpanel maldet(21087): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 28 2026 03:41:58 cpanel maldet(21087): {sigup} latest signature set already installed Feb 28 2026 03:41:58 cpanel maldet(21184): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 28 2026 03:41:59 cpanel maldet(21184): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 28 2026 03:41:59 cpanel maldet(21184): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 28 2026 03:41:59 cpanel maldet(21184): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 28 2026 03:41:59 cpanel maldet(21184): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 28 2026 03:42:40 cpanel maldet(21184): {scan} file list completed in 41s, found 267 files... Feb 28 2026 03:42:40 cpanel maldet(21184): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Feb 28 2026 03:42:40 cpanel maldet(21184): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (267 files) in progress... Feb 28 2026 03:42:59 cpanel maldet(21184): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 267, malware hits 0, cleaned hits 0, time 61s Feb 28 2026 03:42:59 cpanel maldet(21184): {scan} scan report saved, to view run: maldet --report 260228-0341.21184 Mar 01 2026 03:08:53 cpanel maldet(9170): {update} checking for available updates... Mar 01 2026 03:08:53 cpanel maldet(9170): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 01 2026 03:08:53 cpanel maldet(9170): {update} hashing install files and checking against server... Mar 01 2026 03:08:54 cpanel maldet(9170): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 01 2026 03:08:54 cpanel maldet(9170): {update} latest version already installed. Mar 01 2026 03:08:54 cpanel maldet(9290): {sigup} performing signature update check... Mar 01 2026 03:08:54 cpanel maldet(9290): {sigup} local signature set is version 202602251468141 Mar 01 2026 03:08:54 cpanel maldet(9290): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 01 2026 03:08:54 cpanel maldet(9290): {sigup} new signature set 202602283144378 available Mar 01 2026 03:08:54 cpanel maldet(9290): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 01 2026 03:08:55 cpanel maldet(9290): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 01 2026 03:08:56 cpanel maldet(9290): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 01 2026 03:08:56 cpanel maldet(9290): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 01 2026 03:08:56 cpanel maldet(9290): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 01 2026 03:08:56 cpanel maldet(9290): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 01 2026 03:08:56 cpanel maldet(9290): {sigup} verified md5sum of maldet-sigpack.tgz Mar 01 2026 03:08:56 cpanel maldet(9290): {sigup} unpacked and installed maldet-sigpack.tgz Mar 01 2026 03:08:56 cpanel maldet(9290): {sigup} verified md5sum of maldet-clean.tgz Mar 01 2026 03:08:56 cpanel maldet(9290): {sigup} unpacked and installed maldet-clean.tgz Mar 01 2026 03:08:56 cpanel maldet(9290): {sigup} signature set update completed Mar 01 2026 03:08:57 cpanel maldet(9290): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 01 2026 03:08:57 cpanel maldet(9517): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 01 2026 03:08:57 cpanel maldet(9517): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 01 2026 03:08:57 cpanel maldet(9517): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 01 2026 03:08:57 cpanel maldet(9517): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 01 2026 03:08:57 cpanel maldet(9517): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 01 2026 03:08:57 cpanel maldet(9517): {scan} file list completed in 0s, found 166 files... Mar 01 2026 03:08:57 cpanel maldet(9517): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 01 2026 03:08:57 cpanel maldet(9517): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (166 files) in progress... Mar 01 2026 03:09:12 cpanel maldet(9517): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 166, malware hits 0, cleaned hits 0, time 15s Mar 01 2026 03:09:12 cpanel maldet(9517): {scan} scan report saved, to view run: maldet --report 260301-0308.9517 Mar 02 2026 03:32:04 cpanel maldet(25750): {update} checking for available updates... Mar 02 2026 03:32:04 cpanel maldet(25750): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 02 2026 03:32:04 cpanel maldet(25750): {update} hashing install files and checking against server... Mar 02 2026 03:32:05 cpanel maldet(25750): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 02 2026 03:32:05 cpanel maldet(25750): {update} latest version already installed. Mar 02 2026 03:32:05 cpanel maldet(25866): {sigup} performing signature update check... Mar 02 2026 03:32:05 cpanel maldet(25866): {sigup} local signature set is version 202602283144378 Mar 02 2026 03:32:05 cpanel maldet(25866): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 02 2026 03:32:05 cpanel maldet(25866): {sigup} new signature set 202603013092728 available Mar 02 2026 03:32:05 cpanel maldet(25866): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 02 2026 03:32:06 cpanel maldet(25866): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 02 2026 03:32:07 cpanel maldet(25866): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 02 2026 03:32:07 cpanel maldet(25866): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 02 2026 03:32:07 cpanel maldet(25866): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 02 2026 03:32:08 cpanel maldet(25866): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 02 2026 03:32:08 cpanel maldet(25866): {sigup} verified md5sum of maldet-sigpack.tgz Mar 02 2026 03:32:08 cpanel maldet(25866): {sigup} unpacked and installed maldet-sigpack.tgz Mar 02 2026 03:32:08 cpanel maldet(25866): {sigup} verified md5sum of maldet-clean.tgz Mar 02 2026 03:32:08 cpanel maldet(25866): {sigup} unpacked and installed maldet-clean.tgz Mar 02 2026 03:32:08 cpanel maldet(25866): {sigup} signature set update completed Mar 02 2026 03:32:08 cpanel maldet(25866): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 02 2026 03:32:08 cpanel maldet(26083): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 02 2026 03:32:08 cpanel maldet(26083): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 02 2026 03:32:08 cpanel maldet(26083): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 02 2026 03:32:08 cpanel maldet(26083): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 02 2026 03:32:08 cpanel maldet(26083): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 02 2026 03:32:45 cpanel maldet(26083): {scan} file list completed in 37s, found 19066 files... Mar 02 2026 03:32:45 cpanel maldet(26083): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 02 2026 03:32:45 cpanel maldet(26083): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (19066 files) in progress... Mar 02 2026 03:36:07 cpanel maldet(26083): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 19066, malware hits 0, cleaned hits 0, time 239s Mar 02 2026 03:36:07 cpanel maldet(26083): {scan} scan report saved, to view run: maldet --report 260302-0332.26083 Mar 03 2026 03:43:11 cpanel maldet(27256): {update} checking for available updates... Mar 03 2026 03:43:12 cpanel maldet(27256): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 03 2026 03:43:12 cpanel maldet(27256): {update} hashing install files and checking against server... Mar 03 2026 03:43:12 cpanel maldet(27256): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 03 2026 03:43:12 cpanel maldet(27256): {update} latest version already installed. Mar 03 2026 03:43:12 cpanel maldet(27372): {sigup} performing signature update check... Mar 03 2026 03:43:12 cpanel maldet(27372): {sigup} local signature set is version 202603013092728 Mar 03 2026 03:43:13 cpanel maldet(27372): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 03 2026 03:43:13 cpanel maldet(27372): {sigup} latest signature set already installed Mar 03 2026 03:43:13 cpanel maldet(27465): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 03 2026 03:43:13 cpanel maldet(27465): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 03 2026 03:43:13 cpanel maldet(27465): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 03 2026 03:43:13 cpanel maldet(27465): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 03 2026 03:43:13 cpanel maldet(27465): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 03 2026 03:43:47 cpanel maldet(27465): {scan} file list completed in 34s, found 234 files... Mar 03 2026 03:43:47 cpanel maldet(27465): {scan} found clamav binary at /bin/clamscan, using clamav scanner engine... Mar 03 2026 03:43:47 cpanel maldet(27465): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (234 files) in progress... Mar 03 2026 03:44:05 cpanel maldet(27465): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 234, malware hits 0, cleaned hits 0, time 52s Mar 03 2026 03:44:05 cpanel maldet(27465): {scan} scan report saved, to view run: maldet --report 260303-0343.27465 Mar 04 2026 04:00:57 cpanel maldet(9423): {update} checking for available updates... Mar 04 2026 04:00:58 cpanel maldet(9423): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 04 2026 04:00:58 cpanel maldet(9423): {update} hashing install files and checking against server... Mar 04 2026 04:01:40 cpanel maldet(9423): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 04 2026 04:01:40 cpanel maldet(9423): {update} version check shows latest but hash check failed, forcing update... Mar 04 2026 04:01:41 cpanel maldet(9423): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Mar 04 2026 04:02:19 cpanel maldet(9423): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Mar 04 2026 04:02:19 cpanel maldet(9423): {update} verified md5sum of maldetect-current.tar.gz