Apr 08 04:07:55 ispc maldet(19414): {sigup} performing signature update check... Apr 08 04:07:55 ispc maldet(19414): {sigup} local signature set is version 2017022510908 Apr 08 04:07:55 ispc maldet(19414): {sigup} could not download signature data from server, please try again later. Apr 08 04:07:55 ispc maldet(19164): {update} completed update v1.5 09b93c => v1.6 d9f404, running signature updates... Apr 08 04:07:56 ispc maldet(19499): {sigup} performing signature update check... Apr 08 04:07:56 ispc maldet(19499): {sigup} local signature set is version 2017022510908 Apr 08 04:07:56 ispc maldet(19499): {sigup} could not download signature data from server, please try again later. Apr 08 04:07:56 ispc maldet(19164): {update} update and config import completed Apr 08 04:07:56 ispc maldet(19584): {sigup} performing signature update check... Apr 08 04:07:56 ispc maldet(19584): {sigup} local signature set is version 2017022510908 Apr 08 04:07:56 ispc maldet(19584): {sigup} could not download signature data from server, please try again later. Apr 08 04:07:56 ispc maldet(19666): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 08 04:07:58 ispc maldet(19666): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 08 04:07:58 ispc maldet(19666): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 08 04:07:58 ispc maldet(19666): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 08 04:07:58 ispc maldet(19666): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web328/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 08 04:21:46 ispc maldet(19666): {scan} file list completed in 828s, found 1302 files... Apr 08 04:21:46 ispc maldet(19666): {scan} scan of (1302 files) in progress... Apr 08 04:22:13 ispc maldet(19666): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd199^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 08 04:23:01 ispc maldet(19666): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd199^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 08 04:23:24 ispc maldet(19666): {scan} scan completed on : files 1302, malware hits 0, cleaned hits 0, time 928s Apr 08 04:23:24 ispc maldet(19666): {scan} scan report saved, to view run: maldet --report 170408-0407.19666 Apr 09 04:10:13 ispc maldet(23922): {update} checking for available updates... Apr 09 04:10:13 ispc maldet(23922): {update} could not download version file from server, please try again later. Apr 09 04:10:14 ispc maldet(23994): {sigup} performing signature update check... Apr 09 04:10:14 ispc maldet(23994): {sigup} local signature set is version 2017022510908 Apr 09 04:10:14 ispc maldet(23994): {sigup} could not download signature data from server, please try again later. Apr 09 04:10:14 ispc maldet(24075): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 09 04:10:15 ispc maldet(24075): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 09 04:10:15 ispc maldet(24075): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 09 04:10:15 ispc maldet(24075): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 09 04:10:15 ispc maldet(24075): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web328/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 09 04:25:00 ispc maldet(24075): {scan} file list completed in 885s, found 1033 files... Apr 09 04:25:00 ispc maldet(24075): {scan} scan of (1033 files) in progress... Apr 09 04:25:29 ispc maldet(24075): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd59^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 09 04:26:16 ispc maldet(24075): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd59^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 09 04:26:27 ispc maldet(24075): {scan} scan completed on : files 1033, malware hits 0, cleaned hits 0, time 973s Apr 09 04:26:27 ispc maldet(24075): {scan} scan report saved, to view run: maldet --report 170409-0410.24075 Apr 10 04:07:57 ispc maldet(22662): {update} checking for available updates... Apr 10 04:07:57 ispc maldet(22662): {update} could not download version file from server, please try again later. Apr 10 04:07:57 ispc maldet(22734): {sigup} performing signature update check... Apr 10 04:07:57 ispc maldet(22734): {sigup} local signature set is version 2017022510908 Apr 10 04:07:57 ispc maldet(22734): {sigup} could not download signature data from server, please try again later. Apr 10 04:07:57 ispc maldet(22815): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 10 04:07:59 ispc maldet(22815): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 10 04:07:59 ispc maldet(22815): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 10 04:07:59 ispc maldet(22815): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 10 04:07:59 ispc maldet(22815): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web328/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 10 04:21:19 ispc maldet(22815): {scan} file list completed in 800s, found 1142 files... Apr 10 04:21:19 ispc maldet(22815): {scan} scan of (1142 files) in progress... Apr 10 04:23:11 ispc maldet(22815): {scan} scan completed on : files 1142, malware hits 0, cleaned hits 0, time 914s Apr 10 04:23:11 ispc maldet(22815): {scan} scan report saved, to view run: maldet --report 170410-0407.22815 Apr 11 04:07:36 ispc maldet(10934): {update} checking for available updates... Apr 11 04:07:37 ispc maldet(10934): {update} could not download version file from server, please try again later. Apr 11 04:07:37 ispc maldet(11006): {sigup} performing signature update check... Apr 11 04:07:37 ispc maldet(11006): {sigup} local signature set is version 2017022510908 Apr 11 04:07:37 ispc maldet(11006): {sigup} could not download signature data from server, please try again later. Apr 11 04:07:38 ispc maldet(11087): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 11 04:07:39 ispc maldet(11087): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 11 04:07:39 ispc maldet(11087): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 11 04:07:39 ispc maldet(11087): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 11 04:07:39 ispc maldet(11087): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web328/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 11 04:20:55 ispc maldet(11087): {scan} file list completed in 796s, found 1878 files... Apr 11 04:20:55 ispc maldet(11087): {scan} scan of (1878 files) in progress... Apr 11 04:21:24 ispc maldet(11087): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? Apr 11 04:21:24 ispc maldet(11087): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? Apr 11 04:21:24 ispc maldet(11087): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? Apr 11 04:21:24 ispc maldet(11087): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? Apr 11 04:21:24 ispc maldet(11087): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? Apr 11 04:21:24 ispc maldet(11087): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd250^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 11 04:22:52 ispc maldet(11087): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? Apr 11 04:22:52 ispc maldet(11087): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? Apr 11 04:22:52 ispc maldet(11087): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? Apr 11 04:22:52 ispc maldet(11087): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? Apr 11 04:22:52 ispc maldet(11087): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? Apr 11 04:22:52 ispc maldet(11087): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd250^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 11 04:23:37 ispc maldet(11087): {scan} scan completed on : files 1878, malware hits 0, cleaned hits 0, time 959s Apr 11 04:23:37 ispc maldet(11087): {scan} scan report saved, to view run: maldet --report 170411-0407.11087 Apr 12 04:09:31 ispc maldet(5609): {update} checking for available updates... Apr 12 04:09:31 ispc maldet(5609): {update} could not download version file from server, please try again later. Apr 12 04:09:31 ispc maldet(5681): {sigup} performing signature update check... Apr 12 04:09:31 ispc maldet(5681): {sigup} local signature set is version 2017022510908 Apr 12 04:09:32 ispc maldet(5681): {sigup} could not download signature data from server, please try again later. Apr 12 04:09:32 ispc maldet(5762): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 12 04:09:33 ispc maldet(5762): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 12 04:09:33 ispc maldet(5762): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 12 04:09:33 ispc maldet(5762): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 12 04:09:33 ispc maldet(5762): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web328/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 12 04:23:07 ispc maldet(5762): {scan} file list completed in 814s, found 1390 files... Apr 12 04:23:07 ispc maldet(5762): {scan} scan of (1390 files) in progress... Apr 12 04:23:31 ispc maldet(5762): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? Apr 12 04:23:31 ispc maldet(5762): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? Apr 12 04:23:31 ispc maldet(5762): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? Apr 12 04:23:31 ispc maldet(5762): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd251^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 12 04:23:31 ispc maldet(5762): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd80^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 12 04:24:15 ispc maldet(5762): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? Apr 12 04:24:15 ispc maldet(5762): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? Apr 12 04:24:15 ispc maldet(5762): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? Apr 12 04:24:15 ispc maldet(5762): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd251^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 12 04:24:15 ispc maldet(5762): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd80^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 12 04:24:49 ispc maldet(5762): {scan} scan completed on : files 1390, malware hits 0, cleaned hits 0, time 917s Apr 12 04:24:49 ispc maldet(5762): {scan} scan report saved, to view run: maldet --report 170412-0409.5762 Apr 13 04:16:01 ispc maldet(1048): {update} checking for available updates... Apr 13 04:16:02 ispc maldet(1048): {update} could not download version file from server, please try again later. Apr 13 04:16:02 ispc maldet(1125): {sigup} performing signature update check... Apr 13 04:16:02 ispc maldet(1125): {sigup} local signature set is version 2017022510908 Apr 13 04:16:02 ispc maldet(1125): {sigup} could not download signature data from server, please try again later. Apr 13 04:16:03 ispc maldet(1206): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 13 04:16:05 ispc maldet(1206): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 13 04:16:05 ispc maldet(1206): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 13 04:16:05 ispc maldet(1206): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 13 04:16:05 ispc maldet(1206): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web328/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 13 04:29:37 ispc maldet(1206): {scan} file list completed in 812s, found 1030 files... Apr 13 04:29:37 ispc maldet(1206): {scan} scan of (1030 files) in progress... Apr 13 04:29:56 ispc maldet(1206): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? Apr 13 04:29:56 ispc maldet(1206): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? Apr 13 04:29:56 ispc maldet(1206): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? Apr 13 04:29:56 ispc maldet(1206): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? Apr 13 04:29:56 ispc maldet(1206): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? Apr 13 04:29:56 ispc maldet(1206): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd252^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 13 04:30:37 ispc maldet(1206): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? Apr 13 04:30:37 ispc maldet(1206): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? Apr 13 04:30:37 ispc maldet(1206): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? Apr 13 04:30:37 ispc maldet(1206): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? Apr 13 04:30:37 ispc maldet(1206): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? Apr 13 04:30:37 ispc maldet(1206): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd252^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 13 04:30:58 ispc maldet(1206): {scan} scan completed on : files 1030, malware hits 0, cleaned hits 0, time 895s Apr 13 04:30:58 ispc maldet(1206): {scan} scan report saved, to view run: maldet --report 170413-0416.1206 Apr 14 04:06:39 ispc maldet(13152): {update} checking for available updates... Apr 14 04:06:40 ispc maldet(13152): {update} could not download version file from server, please try again later. Apr 14 04:06:40 ispc maldet(13224): {sigup} performing signature update check... Apr 14 04:06:40 ispc maldet(13224): {sigup} local signature set is version 2017022510908 Apr 14 04:06:41 ispc maldet(13224): {sigup} could not download signature data from server, please try again later. Apr 14 04:06:41 ispc maldet(13305): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 14 04:06:42 ispc maldet(13305): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 14 04:06:42 ispc maldet(13305): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 14 04:06:42 ispc maldet(13305): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 14 04:06:42 ispc maldet(13305): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web328/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 14 04:20:43 ispc maldet(13305): {scan} file list completed in 840s, found 1493 files... Apr 14 04:20:43 ispc maldet(13305): {scan} scan of (1493 files) in progress... Apr 14 04:21:05 ispc maldet(13305): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? Apr 14 04:21:05 ispc maldet(13305): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? Apr 14 04:21:05 ispc maldet(13305): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd112^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 14 04:21:51 ispc maldet(13305): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? Apr 14 04:21:51 ispc maldet(13305): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? Apr 14 04:21:51 ispc maldet(13305): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd112^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 14 04:22:32 ispc maldet(13305): {scan} scan completed on : files 1493, malware hits 0, cleaned hits 0, time 951s Apr 14 04:22:32 ispc maldet(13305): {scan} scan report saved, to view run: maldet --report 170414-0406.13305 Apr 15 04:05:10 ispc maldet(21199): {update} checking for available updates... Apr 15 04:05:10 ispc maldet(21199): {update} could not download version file from server, please try again later. Apr 15 04:05:10 ispc maldet(21271): {sigup} performing signature update check... Apr 15 04:05:10 ispc maldet(21271): {sigup} local signature set is version 2017022510908 Apr 15 04:05:10 ispc maldet(21271): {sigup} could not download signature data from server, please try again later. Apr 15 04:05:11 ispc maldet(21352): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 15 04:05:13 ispc maldet(21352): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 15 04:05:13 ispc maldet(21352): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 15 04:05:13 ispc maldet(21352): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 15 04:05:13 ispc maldet(21352): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web328/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 15 04:19:44 ispc maldet(21352): {scan} file list completed in 871s, found 1135 files... Apr 15 04:19:44 ispc maldet(21352): {scan} scan of (1135 files) in progress... Apr 15 04:21:20 ispc maldet(21352): {scan} scan completed on : files 1135, malware hits 0, cleaned hits 0, time 969s Apr 15 04:21:20 ispc maldet(21352): {scan} scan report saved, to view run: maldet --report 170415-0405.21352 Apr 16 04:09:49 ispc maldet(25190): {update} checking for available updates... Apr 16 04:09:49 ispc maldet(25190): {update} could not download version file from server, please try again later. Apr 16 04:09:50 ispc maldet(25262): {sigup} performing signature update check... Apr 16 04:09:50 ispc maldet(25262): {sigup} local signature set is version 2017022510908 Apr 16 04:09:50 ispc maldet(25262): {sigup} could not download signature data from server, please try again later. Apr 16 04:09:50 ispc maldet(25343): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 16 04:09:51 ispc maldet(25343): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 16 04:09:51 ispc maldet(25343): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 16 04:09:51 ispc maldet(25343): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 16 04:09:51 ispc maldet(25343): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web328/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 16 04:24:17 ispc maldet(25343): {scan} file list completed in 866s, found 1052 files... Apr 16 04:24:17 ispc maldet(25343): {scan} scan of (1052 files) in progress... Apr 16 04:25:36 ispc maldet(25343): {scan} scan completed on : files 1052, malware hits 0, cleaned hits 0, time 946s Apr 16 04:25:36 ispc maldet(25343): {scan} scan report saved, to view run: maldet --report 170416-0409.25343 Apr 17 04:11:40 ispc maldet(29076): {update} checking for available updates... Apr 17 04:11:40 ispc maldet(29076): {update} could not download version file from server, please try again later. Apr 17 04:11:40 ispc maldet(29148): {sigup} performing signature update check... Apr 17 04:11:40 ispc maldet(29148): {sigup} local signature set is version 2017022510908 Apr 17 04:11:40 ispc maldet(29148): {sigup} could not download signature data from server, please try again later. Apr 17 04:11:40 ispc maldet(29229): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 17 04:11:42 ispc maldet(29229): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 17 04:11:42 ispc maldet(29229): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 17 04:11:42 ispc maldet(29229): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 17 04:11:42 ispc maldet(29229): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web328/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 17 04:26:25 ispc maldet(29229): {scan} file list completed in 883s, found 1300 files... Apr 17 04:26:25 ispc maldet(29229): {scan} scan of (1300 files) in progress... Apr 17 04:26:52 ispc maldet(29229): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd139^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 17 04:27:39 ispc maldet(29229): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd139^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 17 04:27:59 ispc maldet(29229): {scan} scan completed on : files 1300, malware hits 0, cleaned hits 0, time 979s Apr 17 04:27:59 ispc maldet(29229): {scan} scan report saved, to view run: maldet --report 170417-0411.29229 Apr 18 04:06:19 ispc maldet(2779): {update} checking for available updates... Apr 18 04:06:19 ispc maldet(2779): {update} could not download version file from server, please try again later. Apr 18 04:06:19 ispc maldet(2851): {sigup} performing signature update check... Apr 18 04:06:19 ispc maldet(2851): {sigup} local signature set is version 2017022510908 Apr 18 04:06:19 ispc maldet(2851): {sigup} could not download signature data from server, please try again later. Apr 18 04:06:20 ispc maldet(2932): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 18 04:06:21 ispc maldet(2932): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 18 04:06:21 ispc maldet(2932): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 18 04:06:21 ispc maldet(2932): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 18 04:06:22 ispc maldet(2932): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web328/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 18 04:20:24 ispc maldet(2932): {scan} file list completed in 843s, found 1530 files... Apr 18 04:20:24 ispc maldet(2932): {scan} scan of (1530 files) in progress... Apr 18 04:20:57 ispc maldet(2932): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd150^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 18 04:21:55 ispc maldet(2932): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd150^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 18 04:22:18 ispc maldet(2932): {scan} scan completed on : files 1530, malware hits 0, cleaned hits 0, time 958s Apr 18 04:22:18 ispc maldet(2932): {scan} scan report saved, to view run: maldet --report 170418-0406.2932 Apr 19 04:17:21 ispc maldet(15085): {update} checking for available updates... Apr 19 04:17:21 ispc maldet(15085): {update} could not download version file from server, please try again later. Apr 19 04:17:21 ispc maldet(15157): {sigup} performing signature update check... Apr 19 04:17:21 ispc maldet(15157): {sigup} local signature set is version 2017022510908 Apr 19 04:17:21 ispc maldet(15157): {sigup} could not download signature data from server, please try again later. Apr 19 04:17:21 ispc maldet(15238): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 19 04:17:23 ispc maldet(15238): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 19 04:17:23 ispc maldet(15238): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 19 04:17:23 ispc maldet(15238): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 19 04:17:23 ispc maldet(15238): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 19 04:30:52 ispc maldet(15238): {scan} file list completed in 809s, found 1321 files... Apr 19 04:30:52 ispc maldet(15238): {scan} scan of (1321 files) in progress... Apr 19 04:31:14 ispc maldet(15238): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd113^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 19 04:32:12 ispc maldet(15238): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd113^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 19 04:32:22 ispc maldet(15238): {scan} scan completed on : files 1321, malware hits 0, cleaned hits 0, time 901s Apr 19 04:32:22 ispc maldet(15238): {scan} scan report saved, to view run: maldet --report 170419-0417.15238 Apr 20 04:07:15 ispc maldet(24217): {update} checking for available updates... Apr 20 04:07:15 ispc maldet(24217): {update} could not download version file from server, please try again later. Apr 20 04:07:15 ispc maldet(24289): {sigup} performing signature update check... Apr 20 04:07:15 ispc maldet(24289): {sigup} local signature set is version 2017022510908 Apr 20 04:07:15 ispc maldet(24289): {sigup} could not download signature data from server, please try again later. Apr 20 04:07:15 ispc maldet(24370): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 20 04:07:17 ispc maldet(24370): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 20 04:07:17 ispc maldet(24370): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 20 04:07:17 ispc maldet(24370): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 20 04:07:17 ispc maldet(24370): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 20 04:20:14 ispc maldet(24370): {scan} file list completed in 777s, found 1061 files... Apr 20 04:20:14 ispc maldet(24370): {scan} scan of (1061 files) in progress... Apr 20 04:20:36 ispc maldet(24370): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? Apr 20 04:20:36 ispc maldet(24370): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? Apr 20 04:21:23 ispc maldet(24370): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? Apr 20 04:21:23 ispc maldet(24370): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? Apr 20 04:21:37 ispc maldet(24370): {scan} scan completed on : files 1061, malware hits 0, cleaned hits 0, time 862s Apr 20 04:21:37 ispc maldet(24370): {scan} scan report saved, to view run: maldet --report 170420-0407.24370 Apr 21 04:17:52 ispc maldet(2032): {update} checking for available updates... Apr 21 04:17:52 ispc maldet(2032): {update} could not download version file from server, please try again later. Apr 21 04:17:52 ispc maldet(2104): {sigup} performing signature update check... Apr 21 04:17:52 ispc maldet(2104): {sigup} local signature set is version 2017022510908 Apr 21 04:17:52 ispc maldet(2104): {sigup} could not download signature data from server, please try again later. Apr 21 04:17:52 ispc maldet(2185): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 21 04:17:54 ispc maldet(2185): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 21 04:17:54 ispc maldet(2185): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 21 04:17:54 ispc maldet(2185): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 21 04:17:54 ispc maldet(2185): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 21 04:32:00 ispc maldet(2185): {scan} file list completed in 846s, found 1812 files... Apr 21 04:32:00 ispc maldet(2185): {scan} scan of (1812 files) in progress... Apr 21 04:32:41 ispc maldet(2185): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? Apr 21 04:32:41 ispc maldet(2185): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? Apr 21 04:33:47 ispc maldet(2185): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? Apr 21 04:33:47 ispc maldet(2185): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? Apr 21 04:34:05 ispc maldet(2185): {scan} scan completed on : files 1812, malware hits 0, cleaned hits 0, time 973s Apr 21 04:34:05 ispc maldet(2185): {scan} scan report saved, to view run: maldet --report 170421-0417.2185 Apr 22 04:05:41 ispc maldet(28069): {update} checking for available updates... Apr 22 04:05:41 ispc maldet(28069): {update} could not download version file from server, please try again later. Apr 22 04:05:41 ispc maldet(28141): {sigup} performing signature update check... Apr 22 04:05:41 ispc maldet(28141): {sigup} local signature set is version 2017022510908 Apr 22 04:05:41 ispc maldet(28141): {sigup} could not download signature data from server, please try again later. Apr 22 04:05:41 ispc maldet(28222): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 22 04:05:43 ispc maldet(28222): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 22 04:05:43 ispc maldet(28222): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 22 04:05:43 ispc maldet(28222): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 22 04:05:43 ispc maldet(28222): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 22 04:19:31 ispc maldet(28222): {scan} file list completed in 828s, found 1290 files... Apr 22 04:19:31 ispc maldet(28222): {scan} scan of (1290 files) in progress... Apr 22 04:21:03 ispc maldet(28222): {scan} scan completed on : files 1290, malware hits 0, cleaned hits 0, time 921s Apr 22 04:21:03 ispc maldet(28222): {scan} scan report saved, to view run: maldet --report 170422-0405.28222 Apr 23 04:05:45 ispc maldet(6908): {update} checking for available updates... Apr 23 04:05:45 ispc maldet(6908): {update} could not download version file from server, please try again later. Apr 23 04:05:45 ispc maldet(6980): {sigup} performing signature update check... Apr 23 04:05:45 ispc maldet(6980): {sigup} local signature set is version 2017022510908 Apr 23 04:05:45 ispc maldet(6980): {sigup} could not download signature data from server, please try again later. Apr 23 04:05:45 ispc maldet(7061): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 23 04:05:47 ispc maldet(7061): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 23 04:05:47 ispc maldet(7061): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 23 04:05:47 ispc maldet(7061): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 23 04:05:47 ispc maldet(7061): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 23 04:18:47 ispc maldet(7061): {scan} file list completed in 780s, found 1060 files... Apr 23 04:18:47 ispc maldet(7061): {scan} scan of (1060 files) in progress... Apr 23 04:20:04 ispc maldet(7061): {scan} scan completed on : files 1060, malware hits 0, cleaned hits 0, time 859s Apr 23 04:20:04 ispc maldet(7061): {scan} scan report saved, to view run: maldet --report 170423-0405.7061 Apr 24 04:06:32 ispc maldet(14422): {update} checking for available updates... Apr 24 04:06:32 ispc maldet(14422): {update} could not download version file from server, please try again later. Apr 24 04:06:33 ispc maldet(14494): {sigup} performing signature update check... Apr 24 04:06:33 ispc maldet(14494): {sigup} local signature set is version 2017022510908 Apr 24 04:06:33 ispc maldet(14494): {sigup} could not download signature data from server, please try again later. Apr 24 04:06:33 ispc maldet(14575): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 24 04:06:35 ispc maldet(14575): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 24 04:06:35 ispc maldet(14575): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 24 04:06:35 ispc maldet(14575): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 24 04:06:35 ispc maldet(14575): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 24 04:20:52 ispc maldet(14575): {scan} file list completed in 857s, found 1150 files... Apr 24 04:20:52 ispc maldet(14575): {scan} scan of (1150 files) in progress... Apr 24 04:22:14 ispc maldet(14575): {scan} scan completed on : files 1150, malware hits 0, cleaned hits 0, time 941s Apr 24 04:22:14 ispc maldet(14575): {scan} scan report saved, to view run: maldet --report 170424-0406.14575 Apr 25 04:07:26 ispc maldet(29815): {update} checking for available updates... Apr 25 04:07:26 ispc maldet(29815): {update} could not download version file from server, please try again later. Apr 25 04:07:26 ispc maldet(29887): {sigup} performing signature update check... Apr 25 04:07:26 ispc maldet(29887): {sigup} local signature set is version 2017022510908 Apr 25 04:07:26 ispc maldet(29887): {sigup} could not download signature data from server, please try again later. Apr 25 04:07:27 ispc maldet(29968): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 25 04:07:29 ispc maldet(29968): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 25 04:07:29 ispc maldet(29968): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 25 04:07:29 ispc maldet(29968): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 25 04:07:29 ispc maldet(29968): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 25 04:21:34 ispc maldet(29968): {scan} file list completed in 845s, found 1161 files... Apr 25 04:21:34 ispc maldet(29968): {scan} scan of (1161 files) in progress... Apr 25 04:21:56 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? Apr 25 04:21:56 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? Apr 25 04:21:56 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? Apr 25 04:21:56 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/70246e303408baf77a9fa683495f0673^404d5b95c7dad15f573838190f97e7c57f58aa0e.module_db_tpl.MenuManager;top_menu.php, do we have permission? Apr 25 04:21:56 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/c37352a92b10606273c218b0be37c580^181e9c3097486fd7d9e24333a2b34522499b6f52.module_db_tpl.MenuManager;bosonohy menu.php, do we have permission? Apr 25 04:21:56 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^e97925fbb1dcac0611e24940ad8d3b768bb7136d.module_file_tpl.FileManager;filemanager.tpl.php, do we have permission? Apr 25 04:21:56 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^f12a60a341e501b238b12967d7d770753147e1c6.module_file_tpl.FileManager;uploadview.tpl.php, do we have permission? Apr 25 04:21:56 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^eaf9f47ff53167b7473763db5836aac555c43c90.module_file_tpl.MicroTiny;filepicker.tpl.php, do we have permission? Apr 25 04:21:56 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^e2f566efaf576c09742f2ff50f175c0d9a2acd22.module_file_tpl.FileManager;newdir.tpl.php, do we have permission? Apr 25 04:21:58 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/uploads/rozpočtová opatření od 2017 /RO 1.2.3.4.5-2017.pdf, do we have permission? Apr 25 04:22:38 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? Apr 25 04:22:38 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? Apr 25 04:22:38 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? Apr 25 04:22:38 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/70246e303408baf77a9fa683495f0673^404d5b95c7dad15f573838190f97e7c57f58aa0e.module_db_tpl.MenuManager;top_menu.php, do we have permission? Apr 25 04:22:38 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/c37352a92b10606273c218b0be37c580^181e9c3097486fd7d9e24333a2b34522499b6f52.module_db_tpl.MenuManager;bosonohy menu.php, do we have permission? Apr 25 04:22:38 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^e97925fbb1dcac0611e24940ad8d3b768bb7136d.module_file_tpl.FileManager;filemanager.tpl.php, do we have permission? Apr 25 04:22:38 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^f12a60a341e501b238b12967d7d770753147e1c6.module_file_tpl.FileManager;uploadview.tpl.php, do we have permission? Apr 25 04:22:38 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^eaf9f47ff53167b7473763db5836aac555c43c90.module_file_tpl.MicroTiny;filepicker.tpl.php, do we have permission? Apr 25 04:22:38 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^e2f566efaf576c09742f2ff50f175c0d9a2acd22.module_file_tpl.FileManager;newdir.tpl.php, do we have permission? Apr 25 04:22:39 ispc maldet(29968): {scan} error could not read or hash /var/www/clients/client24/web305/web/uploads/rozpočtová opatření od 2017 /RO 1.2.3.4.5-2017.pdf, do we have permission? Apr 25 04:22:56 ispc maldet(29968): {scan} scan completed on : files 1161, malware hits 0, cleaned hits 0, time 929s Apr 25 04:22:56 ispc maldet(29968): {scan} scan report saved, to view run: maldet --report 170425-0407.29968 Apr 26 04:06:20 ispc maldet(9377): {update} checking for available updates... Apr 26 04:06:20 ispc maldet(9377): {update} could not download version file from server, please try again later. Apr 26 04:06:21 ispc maldet(9449): {sigup} performing signature update check... Apr 26 04:06:21 ispc maldet(9449): {sigup} local signature set is version 2017022510908 Apr 26 04:06:21 ispc maldet(9449): {sigup} could not download signature data from server, please try again later. Apr 26 04:06:21 ispc maldet(9531): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 26 04:06:22 ispc maldet(9531): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 26 04:06:22 ispc maldet(9531): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 26 04:06:22 ispc maldet(9531): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 26 04:06:23 ispc maldet(9531): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 26 04:20:05 ispc maldet(9531): {scan} file list completed in 823s, found 1491 files... Apr 26 04:20:05 ispc maldet(9531): {scan} scan of (1491 files) in progress... Apr 26 04:21:56 ispc maldet(9531): {scan} scan completed on : files 1491, malware hits 0, cleaned hits 0, time 935s Apr 26 04:21:56 ispc maldet(9531): {scan} scan report saved, to view run: maldet --report 170426-0406.9531 Apr 27 04:07:41 ispc maldet(664): {update} checking for available updates... Apr 27 04:07:42 ispc maldet(664): {update} could not download version file from server, please try again later. Apr 27 04:07:42 ispc maldet(738): {sigup} performing signature update check... Apr 27 04:07:42 ispc maldet(738): {sigup} local signature set is version 2017022510908 Apr 27 04:07:42 ispc maldet(738): {sigup} could not download signature data from server, please try again later. Apr 27 04:07:42 ispc maldet(819): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 27 04:07:44 ispc maldet(819): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 27 04:07:44 ispc maldet(819): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 27 04:07:44 ispc maldet(819): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 27 04:07:44 ispc maldet(819): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 27 04:21:18 ispc maldet(819): {scan} file list completed in 814s, found 1452 files... Apr 27 04:21:18 ispc maldet(819): {scan} scan of (1452 files) in progress... Apr 27 04:21:48 ispc maldet(819): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? Apr 27 04:21:48 ispc maldet(819): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? Apr 27 04:21:48 ispc maldet(819): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? Apr 27 04:21:48 ispc maldet(819): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? Apr 27 04:21:48 ispc maldet(819): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? Apr 27 04:21:48 ispc maldet(819): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd253^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 27 04:22:56 ispc maldet(819): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? Apr 27 04:22:56 ispc maldet(819): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? Apr 27 04:22:56 ispc maldet(819): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? Apr 27 04:22:56 ispc maldet(819): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? Apr 27 04:22:56 ispc maldet(819): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? Apr 27 04:22:56 ispc maldet(819): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd253^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 27 04:23:21 ispc maldet(819): {scan} scan completed on : files 1452, malware hits 0, cleaned hits 0, time 939s Apr 27 04:23:21 ispc maldet(819): {scan} scan report saved, to view run: maldet --report 170427-0407.819 Apr 28 04:04:57 ispc maldet(19662): {update} checking for available updates... Apr 28 04:04:57 ispc maldet(19662): {update} could not download version file from server, please try again later. Apr 28 04:04:58 ispc maldet(19734): {sigup} performing signature update check... Apr 28 04:04:58 ispc maldet(19734): {sigup} local signature set is version 2017022510908 Apr 28 04:04:58 ispc maldet(19734): {sigup} could not download signature data from server, please try again later. Apr 28 04:04:58 ispc maldet(19815): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 28 04:04:59 ispc maldet(19815): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 28 04:04:59 ispc maldet(19815): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 28 04:04:59 ispc maldet(19815): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 28 04:04:59 ispc maldet(19815): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 28 04:19:25 ispc maldet(19815): {scan} file list completed in 866s, found 1078 files... Apr 28 04:19:25 ispc maldet(19815): {scan} scan of (1078 files) in progress... Apr 28 04:19:47 ispc maldet(19815): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd48^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 28 04:19:47 ispc maldet(19815): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd12^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 28 04:20:25 ispc maldet(19815): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd48^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 28 04:20:25 ispc maldet(19815): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd12^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? Apr 28 04:20:45 ispc maldet(19815): {scan} scan completed on : files 1078, malware hits 0, cleaned hits 0, time 947s Apr 28 04:20:45 ispc maldet(19815): {scan} scan report saved, to view run: maldet --report 170428-0404.19815 Apr 29 04:07:01 ispc maldet(27957): {update} checking for available updates... Apr 29 04:07:01 ispc maldet(27957): {update} could not download version file from server, please try again later. Apr 29 04:07:01 ispc maldet(28029): {sigup} performing signature update check... Apr 29 04:07:01 ispc maldet(28029): {sigup} local signature set is version 2017022510908 Apr 29 04:07:01 ispc maldet(28029): {sigup} could not download signature data from server, please try again later. Apr 29 04:07:01 ispc maldet(28117): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 29 04:07:03 ispc maldet(28117): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 29 04:07:03 ispc maldet(28117): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 29 04:07:03 ispc maldet(28117): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 29 04:07:03 ispc maldet(28117): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 29 04:21:13 ispc maldet(28117): {scan} file list completed in 850s, found 1188 files... Apr 29 04:21:13 ispc maldet(28117): {scan} scan of (1188 files) in progress... Apr 29 04:22:41 ispc maldet(28117): {scan} scan completed on : files 1188, malware hits 0, cleaned hits 0, time 939s Apr 29 04:22:41 ispc maldet(28117): {scan} scan report saved, to view run: maldet --report 170429-0407.28117 Apr 30 04:06:37 ispc maldet(3098): {update} checking for available updates... Apr 30 04:06:37 ispc maldet(3098): {update} could not download version file from server, please try again later. Apr 30 04:06:37 ispc maldet(3170): {sigup} performing signature update check... Apr 30 04:06:37 ispc maldet(3170): {sigup} local signature set is version 2017022510908 Apr 30 04:06:37 ispc maldet(3170): {sigup} could not download signature data from server, please try again later. Apr 30 04:06:38 ispc maldet(3251): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 30 04:06:39 ispc maldet(3251): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 30 04:06:39 ispc maldet(3251): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 30 04:06:39 ispc maldet(3251): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 30 04:06:39 ispc maldet(3251): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 30 04:20:35 ispc maldet(3251): {scan} file list completed in 836s, found 1406 files... Apr 30 04:20:35 ispc maldet(3251): {scan} scan of (1406 files) in progress... Apr 30 04:22:13 ispc maldet(3251): {scan} scan completed on : files 1406, malware hits 0, cleaned hits 0, time 935s Apr 30 04:22:13 ispc maldet(3251): {scan} scan report saved, to view run: maldet --report 170430-0406.3251 May 01 04:07:32 ispc maldet(16813): {update} checking for available updates... May 01 04:07:32 ispc maldet(16813): {update} could not download version file from server, please try again later. May 01 04:07:32 ispc maldet(16885): {sigup} performing signature update check... May 01 04:07:32 ispc maldet(16885): {sigup} local signature set is version 2017022510908 May 01 04:07:32 ispc maldet(16885): {sigup} could not download signature data from server, please try again later. May 01 04:07:32 ispc maldet(16966): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 01 04:07:34 ispc maldet(16966): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 01 04:07:34 ispc maldet(16966): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 01 04:07:34 ispc maldet(16966): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 01 04:07:34 ispc maldet(16966): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 01 04:20:00 ispc maldet(16966): {scan} file list completed in 746s, found 1609 files... May 01 04:20:00 ispc maldet(16966): {scan} scan of (1609 files) in progress... May 01 04:21:51 ispc maldet(16966): {scan} scan completed on : files 1609, malware hits 0, cleaned hits 0, time 859s May 01 04:21:51 ispc maldet(16966): {scan} scan report saved, to view run: maldet --report 170501-0407.16966 May 02 04:06:49 ispc maldet(3466): {update} checking for available updates... May 02 04:06:50 ispc maldet(3466): {update} could not download version file from server, please try again later. May 02 04:06:50 ispc maldet(3538): {sigup} performing signature update check... May 02 04:06:50 ispc maldet(3538): {sigup} local signature set is version 2017022510908 May 02 04:06:50 ispc maldet(3538): {sigup} could not download signature data from server, please try again later. May 02 04:06:50 ispc maldet(3619): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 02 04:06:52 ispc maldet(3619): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 02 04:06:52 ispc maldet(3619): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 02 04:06:52 ispc maldet(3619): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 02 04:06:52 ispc maldet(3619): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 02 04:22:18 ispc maldet(3619): {scan} file list completed in 926s, found 1049 files... May 02 04:22:18 ispc maldet(3619): {scan} scan of (1049 files) in progress... May 02 04:23:34 ispc maldet(3619): {scan} scan completed on : files 1049, malware hits 0, cleaned hits 0, time 1004s May 02 04:23:34 ispc maldet(3619): {scan} scan report saved, to view run: maldet --report 170502-0406.3619 May 03 04:07:49 ispc maldet(26562): {update} checking for available updates... May 03 04:07:49 ispc maldet(26562): {update} could not download version file from server, please try again later. May 03 04:07:50 ispc maldet(26634): {sigup} performing signature update check... May 03 04:07:50 ispc maldet(26634): {sigup} local signature set is version 2017022510908 May 03 04:07:50 ispc maldet(26634): {sigup} could not download signature data from server, please try again later. May 03 04:07:50 ispc maldet(26715): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 03 04:07:51 ispc maldet(26715): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 03 04:07:51 ispc maldet(26715): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 03 04:07:51 ispc maldet(26715): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 03 04:07:51 ispc maldet(26715): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 03 04:21:41 ispc maldet(26715): {scan} file list completed in 830s, found 1113 files... May 03 04:21:41 ispc maldet(26715): {scan} scan of (1113 files) in progress... May 03 04:22:03 ispc maldet(26715): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 03 04:22:03 ispc maldet(26715): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 03 04:22:48 ispc maldet(26715): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 03 04:22:48 ispc maldet(26715): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 03 04:23:08 ispc maldet(26715): {scan} scan completed on : files 1113, malware hits 0, cleaned hits 0, time 918s May 03 04:23:08 ispc maldet(26715): {scan} scan report saved, to view run: maldet --report 170503-0407.26715 May 04 04:18:34 ispc maldet(7045): {update} checking for available updates... May 04 04:18:34 ispc maldet(7045): {update} could not download version file from server, please try again later. May 04 04:18:34 ispc maldet(7117): {sigup} performing signature update check... May 04 04:18:34 ispc maldet(7117): {sigup} local signature set is version 2017022510908 May 04 04:18:34 ispc maldet(7117): {sigup} could not download signature data from server, please try again later. May 04 04:18:34 ispc maldet(7198): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 04 04:18:36 ispc maldet(7198): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 04 04:18:36 ispc maldet(7198): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 04 04:18:36 ispc maldet(7198): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 04 04:18:36 ispc maldet(7198): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 04 04:32:19 ispc maldet(7198): {scan} file list completed in 823s, found 1040 files... May 04 04:32:19 ispc maldet(7198): {scan} scan of (1040 files) in progress... May 04 04:32:40 ispc maldet(7198): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 04 04:32:40 ispc maldet(7198): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 04 04:32:40 ispc maldet(7198): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? May 04 04:32:40 ispc maldet(7198): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? May 04 04:32:40 ispc maldet(7198): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 04 04:32:40 ispc maldet(7198): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd254^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? May 04 04:33:26 ispc maldet(7198): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 04 04:33:26 ispc maldet(7198): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 04 04:33:26 ispc maldet(7198): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? May 04 04:33:27 ispc maldet(7198): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? May 04 04:33:27 ispc maldet(7198): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 04 04:33:27 ispc maldet(7198): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd254^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? May 04 04:33:46 ispc maldet(7198): {scan} scan completed on : files 1040, malware hits 0, cleaned hits 0, time 912s May 04 04:33:46 ispc maldet(7198): {scan} scan report saved, to view run: maldet --report 170504-0418.7198 May 05 04:06:08 ispc maldet(13161): {update} checking for available updates... May 05 04:06:08 ispc maldet(13161): {update} could not download version file from server, please try again later. May 05 04:06:09 ispc maldet(13233): {sigup} performing signature update check... May 05 04:06:09 ispc maldet(13233): {sigup} local signature set is version 2017022510908 May 05 04:06:09 ispc maldet(13233): {sigup} could not download signature data from server, please try again later. May 05 04:06:09 ispc maldet(13315): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 05 04:06:11 ispc maldet(13315): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 05 04:06:11 ispc maldet(13315): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 05 04:06:11 ispc maldet(13315): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 05 04:06:11 ispc maldet(13315): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 05 04:20:25 ispc maldet(13315): {scan} file list completed in 854s, found 1646 files... May 05 04:20:25 ispc maldet(13315): {scan} scan of (1646 files) in progress... May 05 04:20:59 ispc maldet(13315): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 05 04:21:00 ispc maldet(13315): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 05 04:21:57 ispc maldet(13315): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 05 04:21:57 ispc maldet(13315): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 05 04:22:21 ispc maldet(13315): {scan} scan completed on : files 1646, malware hits 0, cleaned hits 0, time 972s May 05 04:22:21 ispc maldet(13315): {scan} scan report saved, to view run: maldet --report 170505-0406.13315 May 06 04:05:38 ispc maldet(30604): {update} checking for available updates... May 06 04:05:38 ispc maldet(30604): {update} could not download version file from server, please try again later. May 06 04:05:38 ispc maldet(30676): {sigup} performing signature update check... May 06 04:05:38 ispc maldet(30676): {sigup} local signature set is version 2017022510908 May 06 04:05:38 ispc maldet(30676): {sigup} could not download signature data from server, please try again later. May 06 04:05:38 ispc maldet(30757): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 06 04:05:40 ispc maldet(30757): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 06 04:05:40 ispc maldet(30757): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 06 04:05:40 ispc maldet(30757): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 06 04:05:40 ispc maldet(30757): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 06 04:19:07 ispc maldet(30757): {scan} file list completed in 807s, found 1281 files... May 06 04:19:07 ispc maldet(30757): {scan} scan of (1281 files) in progress... May 06 04:19:30 ispc maldet(30757): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 06 04:19:30 ispc maldet(30757): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 06 04:19:30 ispc maldet(30757): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 06 04:19:30 ispc maldet(30757): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/70246e303408baf77a9fa683495f0673^404d5b95c7dad15f573838190f97e7c57f58aa0e.module_db_tpl.MenuManager;top_menu.php, do we have permission? May 06 04:19:30 ispc maldet(30757): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/c37352a92b10606273c218b0be37c580^181e9c3097486fd7d9e24333a2b34522499b6f52.module_db_tpl.MenuManager;bosonohy menu.php, do we have permission? May 06 04:19:30 ispc maldet(30757): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^e97925fbb1dcac0611e24940ad8d3b768bb7136d.module_file_tpl.FileManager;filemanager.tpl.php, do we have permission? May 06 04:19:30 ispc maldet(30757): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^f12a60a341e501b238b12967d7d770753147e1c6.module_file_tpl.FileManager;uploadview.tpl.php, do we have permission? May 06 04:19:30 ispc maldet(30757): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^eaf9f47ff53167b7473763db5836aac555c43c90.module_file_tpl.MicroTiny;filepicker.tpl.php, do we have permission? May 06 04:20:24 ispc maldet(30757): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 06 04:20:24 ispc maldet(30757): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 06 04:20:24 ispc maldet(30757): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 06 04:20:25 ispc maldet(30757): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/70246e303408baf77a9fa683495f0673^404d5b95c7dad15f573838190f97e7c57f58aa0e.module_db_tpl.MenuManager;top_menu.php, do we have permission? May 06 04:20:25 ispc maldet(30757): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/c37352a92b10606273c218b0be37c580^181e9c3097486fd7d9e24333a2b34522499b6f52.module_db_tpl.MenuManager;bosonohy menu.php, do we have permission? May 06 04:20:25 ispc maldet(30757): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^e97925fbb1dcac0611e24940ad8d3b768bb7136d.module_file_tpl.FileManager;filemanager.tpl.php, do we have permission? May 06 04:20:25 ispc maldet(30757): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^f12a60a341e501b238b12967d7d770753147e1c6.module_file_tpl.FileManager;uploadview.tpl.php, do we have permission? May 06 04:20:25 ispc maldet(30757): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^eaf9f47ff53167b7473763db5836aac555c43c90.module_file_tpl.MicroTiny;filepicker.tpl.php, do we have permission? May 06 04:20:44 ispc maldet(30757): {scan} scan completed on : files 1281, malware hits 0, cleaned hits 0, time 906s May 06 04:20:44 ispc maldet(30757): {scan} scan report saved, to view run: maldet --report 170506-0405.30757 May 07 04:08:12 ispc maldet(5821): {update} checking for available updates... May 07 04:08:12 ispc maldet(5821): {update} could not download version file from server, please try again later. May 07 04:08:12 ispc maldet(5893): {sigup} performing signature update check... May 07 04:08:12 ispc maldet(5893): {sigup} local signature set is version 2017022510908 May 07 04:08:12 ispc maldet(5893): {sigup} could not download signature data from server, please try again later. May 07 04:08:12 ispc maldet(5974): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 07 04:08:13 ispc maldet(5974): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 07 04:08:13 ispc maldet(5974): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 07 04:08:13 ispc maldet(5974): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 07 04:08:13 ispc maldet(5974): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 07 04:22:34 ispc maldet(5974): {scan} file list completed in 861s, found 832 files... May 07 04:22:34 ispc maldet(5974): {scan} scan of (832 files) in progress... May 07 04:23:39 ispc maldet(5974): {scan} scan completed on : files 832, malware hits 0, cleaned hits 0, time 927s May 07 04:23:39 ispc maldet(5974): {scan} scan report saved, to view run: maldet --report 170507-0408.5974 May 08 04:05:47 ispc maldet(16347): {update} checking for available updates... May 08 04:05:47 ispc maldet(16347): {update} could not download version file from server, please try again later. May 08 04:05:48 ispc maldet(16419): {sigup} performing signature update check... May 08 04:05:48 ispc maldet(16419): {sigup} local signature set is version 2017022510908 May 08 04:05:48 ispc maldet(16419): {sigup} could not download signature data from server, please try again later. May 08 04:05:48 ispc maldet(16500): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 08 04:05:50 ispc maldet(16500): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 08 04:05:50 ispc maldet(16500): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 08 04:05:50 ispc maldet(16500): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 08 04:05:50 ispc maldet(16500): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 08 04:19:03 ispc maldet(16500): {scan} file list completed in 793s, found 1135 files... May 08 04:19:03 ispc maldet(16500): {scan} scan of (1135 files) in progress... May 08 04:20:24 ispc maldet(16500): {scan} scan completed on : files 1135, malware hits 0, cleaned hits 0, time 876s May 08 04:20:24 ispc maldet(16500): {scan} scan report saved, to view run: maldet --report 170508-0405.16500 May 09 04:06:00 ispc maldet(25053): {update} checking for available updates... May 09 04:06:00 ispc maldet(25053): {update} could not download version file from server, please try again later. May 09 04:06:00 ispc maldet(25125): {sigup} performing signature update check... May 09 04:06:01 ispc maldet(25125): {sigup} local signature set is version 2017022510908 May 09 04:06:01 ispc maldet(25125): {sigup} could not download signature data from server, please try again later. May 09 04:06:01 ispc maldet(25206): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 09 04:06:03 ispc maldet(25206): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 09 04:06:03 ispc maldet(25206): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 09 04:06:03 ispc maldet(25206): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 09 04:06:03 ispc maldet(25206): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 09 04:19:42 ispc maldet(25206): {scan} file list completed in 819s, found 1404 files... May 09 04:19:42 ispc maldet(25206): {scan} scan of (1404 files) in progress... May 09 04:21:38 ispc maldet(25206): {scan} scan completed on : files 1404, malware hits 0, cleaned hits 0, time 937s May 09 04:21:38 ispc maldet(25206): {scan} scan report saved, to view run: maldet --report 170509-0406.25206 May 10 04:03:05 ispc maldet(4772): {update} checking for available updates... May 10 04:03:05 ispc maldet(4772): {update} could not download version file from server, please try again later. May 10 04:03:05 ispc maldet(4844): {sigup} performing signature update check... May 10 04:03:05 ispc maldet(4844): {sigup} local signature set is version 2017022510908 May 10 04:03:05 ispc maldet(4844): {sigup} could not download signature data from server, please try again later. May 10 04:03:05 ispc maldet(4925): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 10 04:03:07 ispc maldet(4925): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 10 04:03:07 ispc maldet(4925): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 10 04:03:07 ispc maldet(4925): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 10 04:03:07 ispc maldet(4925): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 10 04:16:27 ispc maldet(4925): {scan} file list completed in 800s, found 1935 files... May 10 04:16:27 ispc maldet(4925): {scan} scan of (1935 files) in progress... May 10 04:18:40 ispc maldet(4925): {scan} scan completed on : files 1935, malware hits 0, cleaned hits 0, time 935s May 10 04:18:40 ispc maldet(4925): {scan} scan report saved, to view run: maldet --report 170510-0403.4925 May 11 04:05:41 ispc maldet(19535): {update} checking for available updates... May 11 04:05:41 ispc maldet(19535): {update} could not download version file from server, please try again later. May 11 04:05:41 ispc maldet(19607): {sigup} performing signature update check... May 11 04:05:41 ispc maldet(19607): {sigup} local signature set is version 2017022510908 May 11 04:05:41 ispc maldet(19607): {sigup} could not download signature data from server, please try again later. May 11 04:05:42 ispc maldet(19688): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 11 04:05:44 ispc maldet(19688): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 11 04:05:44 ispc maldet(19688): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 11 04:05:44 ispc maldet(19688): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 11 04:05:44 ispc maldet(19688): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 11 04:19:45 ispc maldet(19688): {scan} file list completed in 840s, found 1163 files... May 11 04:19:45 ispc maldet(19688): {scan} scan of (1163 files) in progress... May 11 04:20:11 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 11 04:20:11 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 11 04:20:11 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? May 11 04:20:11 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? May 11 04:20:12 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 11 04:20:12 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/70246e303408baf77a9fa683495f0673^404d5b95c7dad15f573838190f97e7c57f58aa0e.module_db_tpl.MenuManager;top_menu.php, do we have permission? May 11 04:20:12 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/c37352a92b10606273c218b0be37c580^181e9c3097486fd7d9e24333a2b34522499b6f52.module_db_tpl.MenuManager;bosonohy menu.php, do we have permission? May 11 04:20:12 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd255^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? May 11 04:20:12 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/uploads/news/id255/den matek 14. 5. 2017.jpg, do we have permission? May 11 04:20:57 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 11 04:20:57 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 11 04:20:57 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? May 11 04:20:57 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? May 11 04:20:57 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 11 04:20:57 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/70246e303408baf77a9fa683495f0673^404d5b95c7dad15f573838190f97e7c57f58aa0e.module_db_tpl.MenuManager;top_menu.php, do we have permission? May 11 04:20:57 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/c37352a92b10606273c218b0be37c580^181e9c3097486fd7d9e24333a2b34522499b6f52.module_db_tpl.MenuManager;bosonohy menu.php, do we have permission? May 11 04:20:58 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd255^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? May 11 04:20:58 ispc maldet(19688): {scan} error could not read or hash /var/www/clients/client24/web305/web/uploads/news/id255/den matek 14. 5. 2017.jpg, do we have permission? May 11 04:21:14 ispc maldet(19688): {scan} scan completed on : files 1163, malware hits 0, cleaned hits 0, time 932s May 11 04:21:14 ispc maldet(19688): {scan} scan report saved, to view run: maldet --report 170511-0405.19688 May 12 04:08:36 ispc maldet(28010): {update} checking for available updates... May 12 04:08:36 ispc maldet(28010): {update} could not download version file from server, please try again later. May 12 04:08:36 ispc maldet(28082): {sigup} performing signature update check... May 12 04:08:36 ispc maldet(28082): {sigup} local signature set is version 2017022510908 May 12 04:08:36 ispc maldet(28082): {sigup} could not download signature data from server, please try again later. May 12 04:08:36 ispc maldet(28163): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 12 04:08:38 ispc maldet(28163): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 12 04:08:38 ispc maldet(28163): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 12 04:08:38 ispc maldet(28163): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 12 04:08:38 ispc maldet(28163): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 12 04:22:59 ispc maldet(28163): {scan} file list completed in 861s, found 1383 files... May 12 04:22:59 ispc maldet(28163): {scan} scan of (1383 files) in progress... May 12 04:23:21 ispc maldet(28163): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 12 04:23:21 ispc maldet(28163): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 12 04:24:16 ispc maldet(28163): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 12 04:24:16 ispc maldet(28163): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 12 04:24:48 ispc maldet(28163): {scan} scan completed on : files 1383, malware hits 0, cleaned hits 0, time 972s May 12 04:24:48 ispc maldet(28163): {scan} scan report saved, to view run: maldet --report 170512-0408.28163 May 13 04:05:09 ispc maldet(5318): {update} checking for available updates... May 13 04:05:09 ispc maldet(5318): {update} could not download version file from server, please try again later. May 13 04:05:09 ispc maldet(5390): {sigup} performing signature update check... May 13 04:05:09 ispc maldet(5390): {sigup} local signature set is version 2017022510908 May 13 04:05:09 ispc maldet(5390): {sigup} could not download signature data from server, please try again later. May 13 04:05:10 ispc maldet(5484): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 13 04:05:11 ispc maldet(5484): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 13 04:05:11 ispc maldet(5484): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 13 04:05:11 ispc maldet(5484): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 13 04:05:11 ispc maldet(5484): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 13 04:19:02 ispc maldet(5484): {scan} file list completed in 831s, found 1164 files... May 13 04:19:02 ispc maldet(5484): {scan} scan of (1164 files) in progress... May 13 04:20:28 ispc maldet(5484): {scan} scan completed on : files 1164, malware hits 0, cleaned hits 0, time 918s May 13 04:20:28 ispc maldet(5484): {scan} scan report saved, to view run: maldet --report 170513-0405.5484 May 14 04:06:45 ispc maldet(14381): {update} checking for available updates... May 14 04:06:45 ispc maldet(14381): {update} could not download version file from server, please try again later. May 14 04:06:45 ispc maldet(14453): {sigup} performing signature update check... May 14 04:06:45 ispc maldet(14453): {sigup} local signature set is version 2017022510908 May 14 04:06:45 ispc maldet(14453): {sigup} could not download signature data from server, please try again later. May 14 04:06:46 ispc maldet(14534): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 14 04:06:47 ispc maldet(14534): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 14 04:06:47 ispc maldet(14534): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 14 04:06:47 ispc maldet(14534): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 14 04:06:47 ispc maldet(14534): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 14 04:20:25 ispc maldet(14534): {scan} file list completed in 818s, found 1705 files... May 14 04:20:25 ispc maldet(14534): {scan} scan of (1705 files) in progress... May 14 04:22:23 ispc maldet(14534): {scan} scan completed on : files 1705, malware hits 0, cleaned hits 0, time 937s May 14 04:22:23 ispc maldet(14534): {scan} scan report saved, to view run: maldet --report 170514-0406.14534 May 15 04:05:45 ispc maldet(31380): {update} checking for available updates... May 15 04:05:45 ispc maldet(31380): {update} could not download version file from server, please try again later. May 15 04:05:46 ispc maldet(31452): {sigup} performing signature update check... May 15 04:05:46 ispc maldet(31452): {sigup} local signature set is version 2017022510908 May 15 04:05:46 ispc maldet(31452): {sigup} could not download signature data from server, please try again later. May 15 04:05:46 ispc maldet(31533): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 15 04:05:48 ispc maldet(31533): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 15 04:05:48 ispc maldet(31533): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 15 04:05:48 ispc maldet(31533): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 15 04:05:48 ispc maldet(31533): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 15 04:19:48 ispc maldet(31533): {scan} file list completed in 840s, found 1274 files... May 15 04:19:48 ispc maldet(31533): {scan} scan of (1274 files) in progress... May 15 04:21:36 ispc maldet(31533): {scan} scan completed on : files 1274, malware hits 0, cleaned hits 0, time 950s May 15 04:21:36 ispc maldet(31533): {scan} scan report saved, to view run: maldet --report 170515-0405.31533 May 16 04:07:13 ispc maldet(10496): {update} checking for available updates... May 16 04:07:13 ispc maldet(10496): {update} could not download version file from server, please try again later. May 16 04:07:13 ispc maldet(10568): {sigup} performing signature update check... May 16 04:07:13 ispc maldet(10568): {sigup} local signature set is version 2017022510908 May 16 04:07:14 ispc maldet(10568): {sigup} could not download signature data from server, please try again later. May 16 04:07:14 ispc maldet(10649): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 16 04:07:16 ispc maldet(10649): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 16 04:07:16 ispc maldet(10649): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 16 04:07:16 ispc maldet(10649): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 16 04:07:16 ispc maldet(10649): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 16 04:21:34 ispc maldet(10649): {scan} file list completed in 858s, found 1274 files... May 16 04:21:34 ispc maldet(10649): {scan} scan of (1274 files) in progress... May 16 04:21:59 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? May 16 04:21:59 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? May 16 04:21:59 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 16 04:21:59 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/70246e303408baf77a9fa683495f0673^404d5b95c7dad15f573838190f97e7c57f58aa0e.module_db_tpl.MenuManager;top_menu.php, do we have permission? May 16 04:21:59 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/c37352a92b10606273c218b0be37c580^181e9c3097486fd7d9e24333a2b34522499b6f52.module_db_tpl.MenuManager;bosonohy menu.php, do we have permission? May 16 04:21:59 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^e97925fbb1dcac0611e24940ad8d3b768bb7136d.module_file_tpl.FileManager;filemanager.tpl.php, do we have permission? May 16 04:21:59 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^f12a60a341e501b238b12967d7d770753147e1c6.module_file_tpl.FileManager;uploadview.tpl.php, do we have permission? May 16 04:21:59 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^eaf9f47ff53167b7473763db5836aac555c43c90.module_file_tpl.MicroTiny;filepicker.tpl.php, do we have permission? May 16 04:22:01 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd256^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? May 16 04:22:02 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/uploads/ZMČ_14-18_zapisy/zápis zmč 25-VII 19.4.2017 t.pdf, do we have permission? May 16 04:22:42 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? May 16 04:22:42 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? May 16 04:22:42 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 16 04:22:42 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/70246e303408baf77a9fa683495f0673^404d5b95c7dad15f573838190f97e7c57f58aa0e.module_db_tpl.MenuManager;top_menu.php, do we have permission? May 16 04:22:42 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/c37352a92b10606273c218b0be37c580^181e9c3097486fd7d9e24333a2b34522499b6f52.module_db_tpl.MenuManager;bosonohy menu.php, do we have permission? May 16 04:22:42 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^e97925fbb1dcac0611e24940ad8d3b768bb7136d.module_file_tpl.FileManager;filemanager.tpl.php, do we have permission? May 16 04:22:42 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^f12a60a341e501b238b12967d7d770753147e1c6.module_file_tpl.FileManager;uploadview.tpl.php, do we have permission? May 16 04:22:42 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^eaf9f47ff53167b7473763db5836aac555c43c90.module_file_tpl.MicroTiny;filepicker.tpl.php, do we have permission? May 16 04:22:44 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd256^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? May 16 04:22:45 ispc maldet(10649): {scan} error could not read or hash /var/www/clients/client24/web305/web/uploads/ZMČ_14-18_zapisy/zápis zmč 25-VII 19.4.2017 t.pdf, do we have permission? May 16 04:23:07 ispc maldet(10649): {scan} scan completed on : files 1274, malware hits 0, cleaned hits 0, time 953s May 16 04:23:07 ispc maldet(10649): {scan} scan report saved, to view run: maldet --report 170516-0407.10649 May 17 04:17:51 ispc maldet(20143): {update} checking for available updates... May 17 04:17:52 ispc maldet(20143): {update} could not download version file from server, please try again later. May 17 04:17:52 ispc maldet(20215): {sigup} performing signature update check... May 17 04:17:52 ispc maldet(20215): {sigup} local signature set is version 2017022510908 May 17 04:17:52 ispc maldet(20215): {sigup} could not download signature data from server, please try again later. May 17 04:17:52 ispc maldet(20296): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 17 04:17:54 ispc maldet(20296): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 17 04:17:54 ispc maldet(20296): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 17 04:17:54 ispc maldet(20296): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 17 04:17:54 ispc maldet(20296): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 17 04:31:17 ispc maldet(20296): {scan} file list completed in 803s, found 1648 files... May 17 04:31:17 ispc maldet(20296): {scan} scan of (1648 files) in progress... May 17 04:31:40 ispc maldet(20296): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 17 04:31:40 ispc maldet(20296): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 17 04:31:40 ispc maldet(20296): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 17 04:31:40 ispc maldet(20296): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/70246e303408baf77a9fa683495f0673^404d5b95c7dad15f573838190f97e7c57f58aa0e.module_db_tpl.MenuManager;top_menu.php, do we have permission? May 17 04:31:40 ispc maldet(20296): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/c37352a92b10606273c218b0be37c580^181e9c3097486fd7d9e24333a2b34522499b6f52.module_db_tpl.MenuManager;bosonohy menu.php, do we have permission? May 17 04:32:28 ispc maldet(20296): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 17 04:32:28 ispc maldet(20296): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 17 04:32:28 ispc maldet(20296): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 17 04:32:28 ispc maldet(20296): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/70246e303408baf77a9fa683495f0673^404d5b95c7dad15f573838190f97e7c57f58aa0e.module_db_tpl.MenuManager;top_menu.php, do we have permission? May 17 04:32:28 ispc maldet(20296): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/c37352a92b10606273c218b0be37c580^181e9c3097486fd7d9e24333a2b34522499b6f52.module_db_tpl.MenuManager;bosonohy menu.php, do we have permission? May 17 04:33:10 ispc maldet(20296): {scan} scan completed on : files 1648, malware hits 0, cleaned hits 0, time 918s May 17 04:33:10 ispc maldet(20296): {scan} scan report saved, to view run: maldet --report 170517-0417.20296 May 18 04:16:34 ispc maldet(2841): {update} checking for available updates... May 18 04:16:35 ispc maldet(2841): {update} could not download version file from server, please try again later. May 18 04:16:35 ispc maldet(2913): {sigup} performing signature update check... May 18 04:16:35 ispc maldet(2913): {sigup} local signature set is version 2017022510908 May 18 04:16:35 ispc maldet(2913): {sigup} could not download signature data from server, please try again later. May 18 04:16:35 ispc maldet(2994): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 18 04:16:37 ispc maldet(2994): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 18 04:16:37 ispc maldet(2994): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 18 04:16:37 ispc maldet(2994): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 18 04:16:37 ispc maldet(2994): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 18 04:28:58 ispc maldet(2994): {scan} file list completed in 741s, found 1367 files... May 18 04:28:58 ispc maldet(2994): {scan} scan of (1367 files) in progress... May 18 04:29:18 ispc maldet(2994): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 18 04:29:18 ispc maldet(2994): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 18 04:29:18 ispc maldet(2994): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? May 18 04:29:18 ispc maldet(2994): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? May 18 04:29:18 ispc maldet(2994): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 18 04:30:10 ispc maldet(2994): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 18 04:30:10 ispc maldet(2994): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 18 04:30:10 ispc maldet(2994): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? May 18 04:30:10 ispc maldet(2994): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? May 18 04:30:10 ispc maldet(2994): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 18 04:30:33 ispc maldet(2994): {scan} scan completed on : files 1367, malware hits 0, cleaned hits 0, time 838s May 18 04:30:33 ispc maldet(2994): {scan} scan report saved, to view run: maldet --report 170518-0416.2994 May 19 04:06:34 ispc maldet(12122): {update} checking for available updates... May 19 04:06:35 ispc maldet(12122): {update} could not download version file from server, please try again later. May 19 04:06:35 ispc maldet(12194): {sigup} performing signature update check... May 19 04:06:35 ispc maldet(12194): {sigup} local signature set is version 2017022510908 May 19 04:06:35 ispc maldet(12194): {sigup} could not download signature data from server, please try again later. May 19 04:06:35 ispc maldet(12275): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 19 04:06:37 ispc maldet(12275): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 19 04:06:37 ispc maldet(12275): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 19 04:06:37 ispc maldet(12275): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 19 04:06:37 ispc maldet(12275): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 19 04:19:58 ispc maldet(12275): {scan} file list completed in 800s, found 1024 files... May 19 04:19:58 ispc maldet(12275): {scan} scan of (1024 files) in progress... May 19 04:20:20 ispc maldet(12275): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 19 04:20:20 ispc maldet(12275): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 19 04:20:59 ispc maldet(12275): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 19 04:20:59 ispc maldet(12275): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 19 04:21:14 ispc maldet(12275): {scan} scan completed on : files 1024, malware hits 0, cleaned hits 0, time 879s May 19 04:21:15 ispc maldet(12275): {scan} scan report saved, to view run: maldet --report 170519-0406.12275 May 20 04:14:01 ispc maldet(21444): {update} checking for available updates... May 20 04:14:02 ispc maldet(21444): {update} could not download version file from server, please try again later. May 20 04:14:02 ispc maldet(21520): {sigup} performing signature update check... May 20 04:14:02 ispc maldet(21520): {sigup} local signature set is version 2017022510908 May 20 04:14:02 ispc maldet(21520): {sigup} could not download signature data from server, please try again later. May 20 04:14:03 ispc maldet(21601): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 20 04:14:05 ispc maldet(21601): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 20 04:14:05 ispc maldet(21601): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 20 04:14:05 ispc maldet(21601): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 20 04:14:05 ispc maldet(21601): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 20 04:28:32 ispc maldet(21601): {scan} file list completed in 867s, found 1820 files... May 20 04:28:32 ispc maldet(21601): {scan} scan of (1820 files) in progress... May 20 04:30:40 ispc maldet(21601): {scan} scan completed on : files 1820, malware hits 0, cleaned hits 0, time 997s May 20 04:30:40 ispc maldet(21601): {scan} scan report saved, to view run: maldet --report 170520-0414.21601 May 21 04:05:07 ispc maldet(3833): {update} checking for available updates... May 21 04:05:07 ispc maldet(3833): {update} could not download version file from server, please try again later. May 21 04:05:07 ispc maldet(3905): {sigup} performing signature update check... May 21 04:05:07 ispc maldet(3905): {sigup} local signature set is version 2017022510908 May 21 04:05:08 ispc maldet(3905): {sigup} could not download signature data from server, please try again later. May 21 04:05:08 ispc maldet(3986): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 21 04:05:09 ispc maldet(3986): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 21 04:05:09 ispc maldet(3986): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 21 04:05:09 ispc maldet(3986): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 21 04:05:09 ispc maldet(3986): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 21 04:19:12 ispc maldet(3986): {scan} file list completed in 843s, found 1241 files... May 21 04:19:12 ispc maldet(3986): {scan} scan of (1241 files) in progress... May 21 04:20:43 ispc maldet(3986): {scan} scan completed on : files 1241, malware hits 0, cleaned hits 0, time 935s May 21 04:20:43 ispc maldet(3986): {scan} scan report saved, to view run: maldet --report 170521-0405.3986 May 22 04:17:26 ispc maldet(15046): {update} checking for available updates... May 22 04:17:26 ispc maldet(15046): {update} could not download version file from server, please try again later. May 22 04:17:27 ispc maldet(15118): {sigup} performing signature update check... May 22 04:17:27 ispc maldet(15118): {sigup} local signature set is version 2017022510908 May 22 04:17:27 ispc maldet(15118): {sigup} could not download signature data from server, please try again later. May 22 04:17:27 ispc maldet(15199): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 22 04:17:29 ispc maldet(15199): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 22 04:17:29 ispc maldet(15199): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 22 04:17:29 ispc maldet(15199): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 22 04:17:29 ispc maldet(15199): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 22 04:31:03 ispc maldet(15199): {scan} file list completed in 814s, found 961 files... May 22 04:31:03 ispc maldet(15199): {scan} scan of (961 files) in progress... May 22 04:32:15 ispc maldet(15199): {scan} scan completed on : files 961, malware hits 0, cleaned hits 0, time 888s May 22 04:32:15 ispc maldet(15199): {scan} scan report saved, to view run: maldet --report 170522-0417.15199 May 23 04:17:01 ispc maldet(26269): {update} checking for available updates... May 23 04:17:01 ispc maldet(26269): {update} could not download version file from server, please try again later. May 23 04:17:01 ispc maldet(26341): {sigup} performing signature update check... May 23 04:17:01 ispc maldet(26341): {sigup} local signature set is version 2017022510908 May 23 04:17:02 ispc maldet(26341): {sigup} could not download signature data from server, please try again later. May 23 04:17:02 ispc maldet(26433): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 23 04:17:04 ispc maldet(26433): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 23 04:17:04 ispc maldet(26433): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 23 04:17:04 ispc maldet(26433): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 23 04:17:04 ispc maldet(26433): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 23 04:30:46 ispc maldet(26433): {scan} file list completed in 822s, found 994 files... May 23 04:30:46 ispc maldet(26433): {scan} scan of (994 files) in progress... May 23 04:32:15 ispc maldet(26433): {scan} scan completed on : files 994, malware hits 0, cleaned hits 0, time 913s May 23 04:32:15 ispc maldet(26433): {scan} scan report saved, to view run: maldet --report 170523-0417.26433 May 24 04:18:55 ispc maldet(6160): {update} checking for available updates... May 24 04:18:55 ispc maldet(6160): {update} could not download version file from server, please try again later. May 24 04:18:56 ispc maldet(6232): {sigup} performing signature update check... May 24 04:18:56 ispc maldet(6232): {sigup} local signature set is version 2017022510908 May 24 04:18:56 ispc maldet(6232): {sigup} could not download signature data from server, please try again later. May 24 04:18:56 ispc maldet(6314): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 24 04:18:58 ispc maldet(6314): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 24 04:18:58 ispc maldet(6314): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 24 04:18:58 ispc maldet(6314): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 24 04:18:58 ispc maldet(6314): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 24 04:32:08 ispc maldet(6314): {scan} file list completed in 790s, found 1368 files... May 24 04:32:08 ispc maldet(6314): {scan} scan of (1368 files) in progress... May 24 04:34:03 ispc maldet(6314): {scan} scan completed on : files 1368, malware hits 0, cleaned hits 0, time 907s May 24 04:34:03 ispc maldet(6314): {scan} scan report saved, to view run: maldet --report 170524-0418.6314 May 25 04:07:40 ispc maldet(17557): {update} checking for available updates... May 25 04:07:41 ispc maldet(17557): {update} could not download version file from server, please try again later. May 25 04:07:41 ispc maldet(17629): {sigup} performing signature update check... May 25 04:07:41 ispc maldet(17629): {sigup} local signature set is version 2017022510908 May 25 04:07:41 ispc maldet(17629): {sigup} could not download signature data from server, please try again later. May 25 04:07:42 ispc maldet(17712): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 25 04:07:43 ispc maldet(17712): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 25 04:07:44 ispc maldet(17712): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 25 04:07:44 ispc maldet(17712): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 25 04:07:44 ispc maldet(17712): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 25 04:22:11 ispc maldet(17712): {scan} file list completed in 866s, found 1852 files... May 25 04:22:11 ispc maldet(17712): {scan} scan of (1852 files) in progress... May 25 04:22:51 ispc maldet(17712): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 25 04:22:51 ispc maldet(17712): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 25 04:23:58 ispc maldet(17712): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 25 04:23:58 ispc maldet(17712): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 25 04:24:21 ispc maldet(17712): {scan} scan completed on : files 1852, malware hits 0, cleaned hits 0, time 999s May 25 04:24:21 ispc maldet(17712): {scan} scan report saved, to view run: maldet --report 170525-0407.17712 May 26 04:06:45 ispc maldet(1626): {update} checking for available updates... May 26 04:06:45 ispc maldet(1626): {update} could not download version file from server, please try again later. May 26 04:06:45 ispc maldet(1698): {sigup} performing signature update check... May 26 04:06:45 ispc maldet(1698): {sigup} local signature set is version 2017022510908 May 26 04:06:46 ispc maldet(1698): {sigup} could not download signature data from server, please try again later. May 26 04:06:46 ispc maldet(1779): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 26 04:06:48 ispc maldet(1779): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 26 04:06:48 ispc maldet(1779): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 26 04:06:48 ispc maldet(1779): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 26 04:06:48 ispc maldet(1779): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 26 04:20:32 ispc maldet(1779): {scan} file list completed in 824s, found 1076 files... May 26 04:20:32 ispc maldet(1779): {scan} scan of (1076 files) in progress... May 26 04:20:55 ispc maldet(1779): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 26 04:20:55 ispc maldet(1779): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/70246e303408baf77a9fa683495f0673^404d5b95c7dad15f573838190f97e7c57f58aa0e.module_db_tpl.MenuManager;top_menu.php, do we have permission? May 26 04:20:55 ispc maldet(1779): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/c37352a92b10606273c218b0be37c580^181e9c3097486fd7d9e24333a2b34522499b6f52.module_db_tpl.MenuManager;bosonohy menu.php, do we have permission? May 26 04:20:55 ispc maldet(1779): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^e97925fbb1dcac0611e24940ad8d3b768bb7136d.module_file_tpl.FileManager;filemanager.tpl.php, do we have permission? May 26 04:20:55 ispc maldet(1779): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^f12a60a341e501b238b12967d7d770753147e1c6.module_file_tpl.FileManager;uploadview.tpl.php, do we have permission? May 26 04:20:55 ispc maldet(1779): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^eaf9f47ff53167b7473763db5836aac555c43c90.module_file_tpl.MicroTiny;filepicker.tpl.php, do we have permission? May 26 04:20:56 ispc maldet(1779): {scan} error could not read or hash /var/www/clients/client24/web305/web/uploads/rozpočtová opatření od 2017 /schválené RO 6,7,8-2017-web.pdf, do we have permission? May 26 04:21:34 ispc maldet(1779): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 26 04:21:34 ispc maldet(1779): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/70246e303408baf77a9fa683495f0673^404d5b95c7dad15f573838190f97e7c57f58aa0e.module_db_tpl.MenuManager;top_menu.php, do we have permission? May 26 04:21:34 ispc maldet(1779): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/c37352a92b10606273c218b0be37c580^181e9c3097486fd7d9e24333a2b34522499b6f52.module_db_tpl.MenuManager;bosonohy menu.php, do we have permission? May 26 04:21:34 ispc maldet(1779): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^e97925fbb1dcac0611e24940ad8d3b768bb7136d.module_file_tpl.FileManager;filemanager.tpl.php, do we have permission? May 26 04:21:34 ispc maldet(1779): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/FileManager^f12a60a341e501b238b12967d7d770753147e1c6.module_file_tpl.FileManager;uploadview.tpl.php, do we have permission? May 26 04:21:34 ispc maldet(1779): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^eaf9f47ff53167b7473763db5836aac555c43c90.module_file_tpl.MicroTiny;filepicker.tpl.php, do we have permission? May 26 04:21:36 ispc maldet(1779): {scan} error could not read or hash /var/www/clients/client24/web305/web/uploads/rozpočtová opatření od 2017 /schválené RO 6,7,8-2017-web.pdf, do we have permission? May 26 04:21:50 ispc maldet(1779): {scan} scan completed on : files 1076, malware hits 0, cleaned hits 0, time 904s May 26 04:21:50 ispc maldet(1779): {scan} scan report saved, to view run: maldet --report 170526-0406.1779 May 27 04:06:24 ispc maldet(14201): {update} checking for available updates... May 27 04:06:25 ispc maldet(14201): {update} could not download version file from server, please try again later. May 27 04:06:25 ispc maldet(14273): {sigup} performing signature update check... May 27 04:06:25 ispc maldet(14273): {sigup} local signature set is version 2017022510908 May 27 04:06:25 ispc maldet(14273): {sigup} could not download signature data from server, please try again later. May 27 04:06:25 ispc maldet(14354): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 27 04:06:27 ispc maldet(14354): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 27 04:06:27 ispc maldet(14354): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 27 04:06:27 ispc maldet(14354): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 27 04:06:27 ispc maldet(14354): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 27 04:20:36 ispc maldet(14354): {scan} file list completed in 849s, found 1668 files... May 27 04:20:36 ispc maldet(14354): {scan} scan of (1668 files) in progress... May 27 04:21:04 ispc maldet(14354): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 27 04:21:04 ispc maldet(14354): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 27 04:21:50 ispc maldet(14354): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 27 04:21:50 ispc maldet(14354): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 27 04:22:37 ispc maldet(14354): {scan} scan completed on : files 1668, malware hits 0, cleaned hits 0, time 972s May 27 04:22:37 ispc maldet(14354): {scan} scan report saved, to view run: maldet --report 170527-0406.14354 May 28 04:06:37 ispc maldet(791): {update} checking for available updates... May 28 04:06:38 ispc maldet(791): {update} could not download version file from server, please try again later. May 28 04:06:38 ispc maldet(864): {sigup} performing signature update check... May 28 04:06:38 ispc maldet(864): {sigup} local signature set is version 2017022510908 May 28 04:06:38 ispc maldet(864): {sigup} could not download signature data from server, please try again later. May 28 04:06:39 ispc maldet(945): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 28 04:06:40 ispc maldet(945): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 28 04:06:40 ispc maldet(945): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 28 04:06:40 ispc maldet(945): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 28 04:06:40 ispc maldet(945): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 28 04:20:44 ispc maldet(945): {scan} file list completed in 844s, found 1461 files... May 28 04:20:44 ispc maldet(945): {scan} scan of (1461 files) in progress... May 28 04:22:30 ispc maldet(945): {scan} scan completed on : files 1461, malware hits 0, cleaned hits 0, time 951s May 28 04:22:30 ispc maldet(945): {scan} scan report saved, to view run: maldet --report 170528-0406.945 May 29 04:11:00 ispc maldet(12413): {update} checking for available updates... May 29 04:11:00 ispc maldet(12413): {update} could not download version file from server, please try again later. May 29 04:11:00 ispc maldet(12485): {sigup} performing signature update check... May 29 04:11:00 ispc maldet(12485): {sigup} local signature set is version 2017022510908 May 29 04:11:00 ispc maldet(12485): {sigup} could not download signature data from server, please try again later. May 29 04:11:00 ispc maldet(12566): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 29 04:11:02 ispc maldet(12566): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 29 04:11:02 ispc maldet(12566): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 29 04:11:02 ispc maldet(12566): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 29 04:11:02 ispc maldet(12566): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 29 04:24:53 ispc maldet(12566): {scan} file list completed in 831s, found 1127 files... May 29 04:24:53 ispc maldet(12566): {scan} scan of (1127 files) in progress... May 29 04:26:39 ispc maldet(12566): {scan} scan completed on : files 1127, malware hits 0, cleaned hits 0, time 939s May 29 04:26:39 ispc maldet(12566): {scan} scan report saved, to view run: maldet --report 170529-0411.12566 May 30 04:07:06 ispc maldet(3218): {update} checking for available updates... May 30 04:07:07 ispc maldet(3218): {update} could not download version file from server, please try again later. May 30 04:07:07 ispc maldet(3290): {sigup} performing signature update check... May 30 04:07:07 ispc maldet(3290): {sigup} local signature set is version 2017022510908 May 30 04:07:07 ispc maldet(3290): {sigup} could not download signature data from server, please try again later. May 30 04:07:07 ispc maldet(3371): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 30 04:07:09 ispc maldet(3371): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 30 04:07:09 ispc maldet(3371): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 30 04:07:09 ispc maldet(3371): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 30 04:07:09 ispc maldet(3371): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 30 04:21:04 ispc maldet(3371): {scan} file list completed in 835s, found 1662 files... May 30 04:21:04 ispc maldet(3371): {scan} scan of (1662 files) in progress... May 30 04:21:44 ispc maldet(3371): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? May 30 04:21:44 ispc maldet(3371): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? May 30 04:21:44 ispc maldet(3371): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 30 04:22:39 ispc maldet(3371): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? May 30 04:22:39 ispc maldet(3371): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? May 30 04:22:39 ispc maldet(3371): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 30 04:22:59 ispc maldet(3371): {scan} scan completed on : files 1662, malware hits 0, cleaned hits 0, time 952s May 30 04:22:59 ispc maldet(3371): {scan} scan report saved, to view run: maldet --report 170530-0407.3371 May 31 04:07:43 ispc maldet(15005): {update} checking for available updates... May 31 04:07:43 ispc maldet(15005): {update} could not download version file from server, please try again later. May 31 04:07:43 ispc maldet(15077): {sigup} performing signature update check... May 31 04:07:43 ispc maldet(15077): {sigup} local signature set is version 2017022510908 May 31 04:07:44 ispc maldet(15077): {sigup} could not download signature data from server, please try again later. May 31 04:07:44 ispc maldet(15158): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 31 04:07:46 ispc maldet(15158): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 31 04:07:46 ispc maldet(15158): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 31 04:07:46 ispc maldet(15158): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 31 04:07:46 ispc maldet(15158): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/find "/var/www/clients/client0/web18/web" "/var/www/clients/client0/web8/web" "/var/www/clients/client0/web99/web" "/var/www/clients/client1/web200/web" "/var/www/clients/client1/web343/web" "/var/www/clients/client10/web103/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web147/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web199/web" "/var/www/clients/client10/web211/web" "/var/www/clients/client10/web225/web" "/var/www/clients/client10/web226/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client10/web284/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web115/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client12/web16/web" "/var/www/clients/client12/web19/web" "/var/www/clients/client12/web20/web" "/var/www/clients/client12/web21/web" "/var/www/clients/client12/web22/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client15/web38/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web29/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client17/web215/web" "/var/www/clients/client17/web274/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client19/web104/web" "/var/www/clients/client19/web62/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web138/web" "/var/www/clients/client21/web144/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web210/web" "/var/www/clients/client21/web275/web" "/var/www/clients/client21/web279/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web290/web" "/var/www/clients/client21/web291/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web322/web" "/var/www/clients/client21/web323/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client21/web344/web" "/var/www/clients/client21/web345/web" "/var/www/clients/client21/web346/web" "/var/www/clients/client21/web347/web" "/var/www/clients/client21/web348/web" "/var/www/clients/client21/web359/web" "/var/www/clients/client21/web363/web" "/var/www/clients/client22/web106/web" "/var/www/clients/client24/web110/web" "/var/www/clients/client24/web187/web" "/var/www/clients/client24/web191/web" "/var/www/clients/client24/web192/web" "/var/www/clients/client24/web193/web" "/var/www/clients/client24/web242/web" "/var/www/clients/client24/web276/web" "/var/www/clients/client24/web278/web" "/var/www/clients/client24/web283/web" "/var/www/clients/client24/web287/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web299/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web314/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web337/web" "/var/www/clients/client24/web338/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web341/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web352/web" "/var/www/clients/client24/web356/web" "/var/www/clients/client25/web111/web" "/var/www/clients/client26/web116/web" "/var/www/clients/client27/web119/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web174/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client29/web129/web" "/var/www/clients/client30/web136/web" "/var/www/clients/client33/web149/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client35/web182/web" "/var/www/clients/client35/web237/web" "/var/www/clients/client35/web265/web" "/var/www/clients/client36/web184/web" "/var/www/clients/client36/web190/web" "/var/www/clients/client36/web295/web" "/var/www/clients/client36/web296/web" "/var/www/clients/client36/web330/web" "/var/www/clients/client37/web189/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client43/web351/web" "/var/www/clients/client44/web231/web" "/var/www/clients/client45/web243/web" "/var/www/clients/client46/web263/web" "/var/www/clients/client47/web267/web" "/var/www/clients/client47/web273/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client50/web312/web" "/var/www/clients/client50/web313/web" "/var/www/clients/client51/web326/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web25/web" "/var/www/clients/client6/web277/web" "/var/www/clients/client6/web9/web" "/var/www/clients/client7/web10/web" "/var/www/clients/client7/web122/web" "/var/www/clients/client7/web366/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 31 04:22:13 ispc maldet(15158): {scan} file list completed in 867s, found 1103 files... May 31 04:22:13 ispc maldet(15158): {scan} scan of (1103 files) in progress... May 31 04:22:35 ispc maldet(15158): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 31 04:22:35 ispc maldet(15158): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 31 04:22:35 ispc maldet(15158): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? May 31 04:22:35 ispc maldet(15158): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? May 31 04:22:35 ispc maldet(15158): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 31 04:22:35 ispc maldet(15158): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd257^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? May 31 04:23:16 ispc maldet(15158): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^838e483562eca3253d4cc3e54eba290c6a37120b.module_file_tpl.UredniDeska;defaultadmin.items.tpl.php, do we have permission? May 31 04:23:16 ispc maldet(15158): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/UredniDeska^5f6809d0abd0aa741e5f6d44f63721739ce04204.module_file_tpl.UredniDeska;edit.tpl.php, do we have permission? May 31 04:23:16 ispc maldet(15158): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^60befe20a75d407574fe658fe037d1dc98318fd0.module_file_tpl.News;articlelist.tpl.php, do we have permission? May 31 04:23:16 ispc maldet(15158): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/News^45074dbff892af300d36f79789acf106c29db5df.module_file_tpl.News;editarticle.tpl.php, do we have permission? May 31 04:23:16 ispc maldet(15158): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/MicroTiny^b3b12ff97862cde4faf01f4bf655ec3dd2eb43e8.module_file_tpl.MicroTiny;microtinyconfig.tpl.php, do we have permission? May 31 04:23:16 ispc maldet(15158): {scan} error could not read or hash /var/www/clients/client24/web305/web/tmp/templates_c/nd257^921be07a4c28fa6126351fe67bf6c34fb5ce78f3.module_db_tpl.News;detailnews_detail.php, do we have permission? May 31 04:23:42 ispc maldet(15158): {scan} scan completed on : files 1103, malware hits 0, cleaned hits 0, time 958s May 31 04:23:42 ispc maldet(15158): {scan} scan report saved, to view run: maldet --report 170531-0407.15158 Jun 01 04:05:23 ispc maldet(21894): {update} checking for available updates... Dec 09 04:10:16 ispc maldet(1853723): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 09 04:10:16 ispc maldet(1853723): {scan} scan of (126 files) in progress... Dec 09 04:10:16 ispc maldet(1853723): {scan} scan completed on : files 126, malware hits 0, cleaned hits 0, time 25s Dec 09 04:10:16 ispc maldet(1853723): {scan} scan report saved, to view run: maldet --report 241209-0409.1853723 Dec 10 04:10:23 ispc maldet(1988792): {update} checking for available updates... Dec 10 04:10:23 ispc maldet(1988792): {update} could not download version file from server, please try again later. Dec 10 04:10:23 ispc maldet(1988864): {sigup} performing signature update check... Dec 10 04:10:23 ispc maldet(1988864): {sigup} local signature set is version 2017022510908 Dec 10 04:10:23 ispc maldet(1988864): {sigup} could not download signature data from server, please try again later. Dec 10 04:10:24 ispc maldet(1988945): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 10 04:10:24 ispc maldet(1988945): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 10 04:10:24 ispc maldet(1988945): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 10 04:10:24 ispc maldet(1988945): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 10 04:10:24 ispc maldet(1988945): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 10 04:10:43 ispc maldet(1988945): {scan} file list completed in 19s, found 80 files... Dec 10 04:10:43 ispc maldet(1988945): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 10 04:10:43 ispc maldet(1988945): {scan} scan of (80 files) in progress... Dec 10 04:10:43 ispc maldet(1988945): {scan} scan completed on : files 80, malware hits 0, cleaned hits 0, time 19s Dec 10 04:10:43 ispc maldet(1988945): {scan} scan report saved, to view run: maldet --report 241210-0410.1988945 Dec 11 04:18:06 ispc maldet(2118335): {update} checking for available updates... Dec 11 04:18:06 ispc maldet(2118335): {update} could not download version file from server, please try again later. Dec 11 04:18:06 ispc maldet(2118407): {sigup} performing signature update check... Dec 11 04:18:06 ispc maldet(2118407): {sigup} local signature set is version 2017022510908 Dec 11 04:18:06 ispc maldet(2118407): {sigup} could not download signature data from server, please try again later. Dec 11 04:18:06 ispc maldet(2118488): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 11 04:18:06 ispc maldet(2118488): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 11 04:18:06 ispc maldet(2118488): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 11 04:18:06 ispc maldet(2118488): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 11 04:18:06 ispc maldet(2118488): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 11 04:18:23 ispc maldet(2118488): {scan} file list completed in 17s, found 56 files... Dec 11 04:18:23 ispc maldet(2118488): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 11 04:18:23 ispc maldet(2118488): {scan} scan of (56 files) in progress... Dec 11 04:18:23 ispc maldet(2118488): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 17s Dec 11 04:18:23 ispc maldet(2118488): {scan} scan report saved, to view run: maldet --report 241211-0418.2118488 Dec 12 04:08:40 ispc maldet(2247755): {update} checking for available updates... Dec 12 04:08:40 ispc maldet(2247755): {update} could not download version file from server, please try again later. Dec 12 04:08:40 ispc maldet(2247828): {sigup} performing signature update check... Dec 12 04:08:40 ispc maldet(2247828): {sigup} local signature set is version 2017022510908 Dec 12 04:08:40 ispc maldet(2247828): {sigup} could not download signature data from server, please try again later. Dec 12 04:08:40 ispc maldet(2247909): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 12 04:08:41 ispc maldet(2247909): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 12 04:08:41 ispc maldet(2247909): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 12 04:08:41 ispc maldet(2247909): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 12 04:08:41 ispc maldet(2247909): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 12 04:09:05 ispc maldet(2247909): {scan} file list completed in 24s, found 60 files... Dec 12 04:09:05 ispc maldet(2247909): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 12 04:09:05 ispc maldet(2247909): {scan} scan of (60 files) in progress... Dec 12 04:09:05 ispc maldet(2247909): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 25s Dec 12 04:09:05 ispc maldet(2247909): {scan} scan report saved, to view run: maldet --report 241212-0408.2247909 Dec 13 04:08:43 ispc maldet(2381812): {update} checking for available updates... Dec 13 04:08:43 ispc maldet(2381812): {update} could not download version file from server, please try again later. Dec 13 04:08:44 ispc maldet(2381884): {sigup} performing signature update check... Dec 13 04:08:44 ispc maldet(2381884): {sigup} local signature set is version 2017022510908 Dec 13 04:08:44 ispc maldet(2381884): {sigup} could not download signature data from server, please try again later. Dec 13 04:08:44 ispc maldet(2381965): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 13 04:08:44 ispc maldet(2381965): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 13 04:08:44 ispc maldet(2381965): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 13 04:08:44 ispc maldet(2381965): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 13 04:08:44 ispc maldet(2381965): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 13 04:09:04 ispc maldet(2381965): {scan} file list completed in 20s, found 64 files... Dec 13 04:09:04 ispc maldet(2381965): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 13 04:09:04 ispc maldet(2381965): {scan} scan of (64 files) in progress... Dec 13 04:09:04 ispc maldet(2381965): {scan} scan completed on : files 64, malware hits 0, cleaned hits 0, time 20s Dec 13 04:09:04 ispc maldet(2381965): {scan} scan report saved, to view run: maldet --report 241213-0408.2381965 Dec 14 04:13:20 ispc maldet(2517175): {update} checking for available updates... Dec 14 04:13:20 ispc maldet(2517175): {update} could not download version file from server, please try again later. Dec 14 04:13:20 ispc maldet(2517247): {sigup} performing signature update check... Dec 14 04:13:20 ispc maldet(2517247): {sigup} local signature set is version 2017022510908 Dec 14 04:13:20 ispc maldet(2517247): {sigup} could not download signature data from server, please try again later. Dec 14 04:13:21 ispc maldet(2517328): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 14 04:13:21 ispc maldet(2517328): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 14 04:13:21 ispc maldet(2517328): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 14 04:13:21 ispc maldet(2517328): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 14 04:13:21 ispc maldet(2517328): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 14 04:13:40 ispc maldet(2517328): {scan} file list completed in 19s, found 62 files... Dec 14 04:13:40 ispc maldet(2517328): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 14 04:13:40 ispc maldet(2517328): {scan} scan of (62 files) in progress... Dec 14 04:13:40 ispc maldet(2517328): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 19s Dec 14 04:13:40 ispc maldet(2517328): {scan} scan report saved, to view run: maldet --report 241214-0413.2517328 Dec 15 04:23:25 ispc maldet(2655736): {update} checking for available updates... Dec 15 04:23:25 ispc maldet(2655736): {update} could not download version file from server, please try again later. Dec 15 04:23:26 ispc maldet(2655809): {sigup} performing signature update check... Dec 15 04:23:26 ispc maldet(2655809): {sigup} local signature set is version 2017022510908 Dec 15 04:23:26 ispc maldet(2655809): {sigup} could not download signature data from server, please try again later. Dec 15 04:23:26 ispc maldet(2655890): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 15 04:23:26 ispc maldet(2655890): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 15 04:23:26 ispc maldet(2655890): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 15 04:23:26 ispc maldet(2655890): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 15 04:23:26 ispc maldet(2655890): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 15 04:23:49 ispc maldet(2655890): {scan} file list completed in 23s, found 196 files... Dec 15 04:23:49 ispc maldet(2655890): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 15 04:23:49 ispc maldet(2655890): {scan} scan of (196 files) in progress... Dec 15 04:23:49 ispc maldet(2655890): {scan} scan completed on : files 196, malware hits 0, cleaned hits 0, time 23s Dec 15 04:23:49 ispc maldet(2655890): {scan} scan report saved, to view run: maldet --report 241215-0423.2655890 Dec 16 04:09:27 ispc maldet(2787120): {update} checking for available updates... Dec 16 04:09:27 ispc maldet(2787120): {update} could not download version file from server, please try again later. Dec 16 04:09:27 ispc maldet(2787192): {sigup} performing signature update check... Dec 16 04:09:27 ispc maldet(2787192): {sigup} local signature set is version 2017022510908 Dec 16 04:09:27 ispc maldet(2787192): {sigup} could not download signature data from server, please try again later. Dec 16 04:09:27 ispc maldet(2787273): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 16 04:09:27 ispc maldet(2787273): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 16 04:09:27 ispc maldet(2787273): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 16 04:09:27 ispc maldet(2787273): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 16 04:09:27 ispc maldet(2787273): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 16 04:09:44 ispc maldet(2787273): {scan} file list completed in 17s, found 94 files... Dec 16 04:09:44 ispc maldet(2787273): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 16 04:09:44 ispc maldet(2787273): {scan} scan of (94 files) in progress... Dec 16 04:09:44 ispc maldet(2787273): {scan} scan completed on : files 94, malware hits 0, cleaned hits 0, time 17s Dec 16 04:09:44 ispc maldet(2787273): {scan} scan report saved, to view run: maldet --report 241216-0409.2787273 Dec 17 04:13:25 ispc maldet(2921616): {update} checking for available updates... Dec 17 04:13:26 ispc maldet(2921616): {update} could not download version file from server, please try again later. Dec 17 04:13:30 ispc maldet(2921696): {sigup} performing signature update check... Dec 17 04:13:30 ispc maldet(2921696): {sigup} local signature set is version 2017022510908 Dec 17 04:13:30 ispc maldet(2921696): {sigup} could not download signature data from server, please try again later. Dec 17 04:13:34 ispc maldet(2921779): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 17 04:13:40 ispc maldet(2921779): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 17 04:13:40 ispc maldet(2921779): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 17 04:13:40 ispc maldet(2921779): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 17 04:13:40 ispc maldet(2921779): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 17 04:33:00 ispc maldet(2921779): {scan} file list completed in 1159s, found 136 files... Dec 17 04:33:00 ispc maldet(2921779): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 17 04:33:01 ispc maldet(2921779): {scan} scan of (136 files) in progress... Dec 17 04:33:03 ispc maldet(2921779): {scan} scan completed on : files 136, malware hits 0, cleaned hits 0, time 1168s Dec 17 04:33:03 ispc maldet(2921779): {scan} scan report saved, to view run: maldet --report 241217-0413.2921779 Dec 18 04:09:28 ispc maldet(3055167): {update} checking for available updates... Dec 18 04:09:28 ispc maldet(3055167): {update} could not download version file from server, please try again later. Dec 18 04:09:32 ispc maldet(3055239): {sigup} performing signature update check... Dec 18 04:09:33 ispc maldet(3055239): {sigup} local signature set is version 2017022510908 Dec 18 04:09:33 ispc maldet(3055239): {sigup} could not download signature data from server, please try again later. Dec 18 04:09:37 ispc maldet(3055322): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 18 04:09:40 ispc maldet(3055322): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 18 04:09:41 ispc maldet(3055322): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 18 04:09:41 ispc maldet(3055322): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 18 04:09:41 ispc maldet(3055322): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 18 04:31:26 ispc maldet(3055322): {scan} file list completed in 1304s, found 78 files... Dec 18 04:31:26 ispc maldet(3055322): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 18 04:31:26 ispc maldet(3055322): {scan} scan of (78 files) in progress... Dec 18 04:31:28 ispc maldet(3055322): {scan} scan completed on : files 78, malware hits 0, cleaned hits 0, time 1310s Dec 18 04:31:28 ispc maldet(3055322): {scan} scan report saved, to view run: maldet --report 241218-0409.3055322 Dec 19 04:11:25 ispc maldet(3189489): {update} checking for available updates... Dec 19 04:11:25 ispc maldet(3189489): {update} could not download version file from server, please try again later. Dec 19 04:11:26 ispc maldet(3189561): {sigup} performing signature update check... Dec 19 04:11:26 ispc maldet(3189561): {sigup} local signature set is version 2017022510908 Dec 19 04:11:26 ispc maldet(3189561): {sigup} could not download signature data from server, please try again later. Dec 19 04:11:28 ispc maldet(3189642): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 19 04:11:33 ispc maldet(3189642): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 19 04:11:33 ispc maldet(3189642): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 19 04:11:33 ispc maldet(3189642): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 19 04:11:34 ispc maldet(3189642): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 19 04:30:37 ispc maldet(3189642): {scan} file list completed in 1144s, found 58 files... Dec 19 04:30:37 ispc maldet(3189642): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 19 04:30:37 ispc maldet(3189642): {scan} scan of (58 files) in progress... Dec 19 04:30:38 ispc maldet(3189642): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 1149s Dec 19 04:30:38 ispc maldet(3189642): {scan} scan report saved, to view run: maldet --report 241219-0411.3189642 Dec 20 04:10:17 ispc maldet(3323755): {update} checking for available updates... Dec 20 04:10:18 ispc maldet(3323755): {update} could not download version file from server, please try again later. Dec 20 04:10:21 ispc maldet(3323828): {sigup} performing signature update check... Dec 20 04:10:21 ispc maldet(3323828): {sigup} local signature set is version 2017022510908 Dec 20 04:10:22 ispc maldet(3323828): {sigup} could not download signature data from server, please try again later. Dec 20 04:10:26 ispc maldet(3323912): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 20 04:10:29 ispc maldet(3323912): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 20 04:10:29 ispc maldet(3323912): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 20 04:10:29 ispc maldet(3323912): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 20 04:10:29 ispc maldet(3323912): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 20 04:26:22 ispc maldet(3323912): {scan} file list completed in 953s, found 60 files... Dec 20 04:26:22 ispc maldet(3323912): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 20 04:26:22 ispc maldet(3323912): {scan} scan of (60 files) in progress... Dec 20 04:26:25 ispc maldet(3323912): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 958s Dec 20 04:26:25 ispc maldet(3323912): {scan} scan report saved, to view run: maldet --report 241220-0410.3323912 Dec 21 04:13:02 ispc maldet(3454122): {update} checking for available updates... Dec 21 04:13:02 ispc maldet(3454122): {update} could not download version file from server, please try again later. Dec 21 04:13:05 ispc maldet(3454211): {sigup} performing signature update check... Dec 21 04:13:05 ispc maldet(3454211): {sigup} local signature set is version 2017022510908 Dec 21 04:13:06 ispc maldet(3454211): {sigup} could not download signature data from server, please try again later. Dec 21 04:13:06 ispc maldet(3454292): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 21 04:13:11 ispc maldet(3454292): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 21 04:13:12 ispc maldet(3454292): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 21 04:13:12 ispc maldet(3454292): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 21 04:13:12 ispc maldet(3454292): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 21 04:47:58 ispc maldet(3454292): {scan} file list completed in 2086s, found 65 files... Dec 21 04:47:59 ispc maldet(3454292): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 21 04:47:59 ispc maldet(3454292): {scan} scan of (65 files) in progress... Dec 21 04:48:01 ispc maldet(3454292): {scan} scan completed on : files 65, malware hits 0, cleaned hits 0, time 2095s Dec 21 04:48:01 ispc maldet(3454292): {scan} scan report saved, to view run: maldet --report 241221-0413.3454292 Dec 22 04:12:10 ispc maldet(3581572): {update} checking for available updates... Dec 22 04:12:10 ispc maldet(3581572): {update} could not download version file from server, please try again later. Dec 22 04:12:14 ispc maldet(3581644): {sigup} performing signature update check... Dec 22 04:12:14 ispc maldet(3581644): {sigup} local signature set is version 2017022510908 Dec 22 04:12:14 ispc maldet(3581644): {sigup} could not download signature data from server, please try again later. Dec 22 04:12:18 ispc maldet(3581729): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 22 04:12:23 ispc maldet(3581729): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 22 04:12:23 ispc maldet(3581729): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 22 04:12:24 ispc maldet(3581729): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 22 04:12:24 ispc maldet(3581729): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 22 04:44:59 ispc maldet(3581729): {scan} file list completed in 1955s, found 192 files... Dec 22 04:45:00 ispc maldet(3581729): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 22 04:45:00 ispc maldet(3581729): {scan} scan of (192 files) in progress... Dec 22 04:45:02 ispc maldet(3581729): {scan} scan completed on : files 192, malware hits 0, cleaned hits 0, time 1963s Dec 22 04:45:02 ispc maldet(3581729): {scan} scan report saved, to view run: maldet --report 241222-0412.3581729 Dec 23 04:09:29 ispc maldet(3709189): {update} checking for available updates... Dec 23 04:09:30 ispc maldet(3709189): {update} could not download version file from server, please try again later. Dec 23 04:09:33 ispc maldet(3709262): {sigup} performing signature update check... Dec 23 04:09:33 ispc maldet(3709262): {sigup} local signature set is version 2017022510908 Dec 23 04:09:33 ispc maldet(3709262): {sigup} could not download signature data from server, please try again later. Dec 23 04:09:34 ispc maldet(3709344): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 23 04:09:40 ispc maldet(3709344): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 23 04:09:40 ispc maldet(3709344): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 23 04:09:40 ispc maldet(3709344): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 23 04:09:41 ispc maldet(3709344): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 23 04:32:30 ispc maldet(3709344): {scan} file list completed in 1369s, found 55 files... Dec 23 04:32:30 ispc maldet(3709344): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 23 04:32:30 ispc maldet(3709344): {scan} scan of (55 files) in progress... Dec 23 04:32:33 ispc maldet(3709344): {scan} scan completed on : files 55, malware hits 0, cleaned hits 0, time 1378s Dec 23 04:32:33 ispc maldet(3709344): {scan} scan report saved, to view run: maldet --report 241223-0409.3709344 Dec 24 04:12:58 ispc maldet(3837542): {update} checking for available updates... Dec 24 04:12:59 ispc maldet(3837542): {update} could not download version file from server, please try again later. Dec 24 04:13:02 ispc maldet(3837614): {sigup} performing signature update check... Dec 24 04:13:02 ispc maldet(3837614): {sigup} local signature set is version 2017022510908 Dec 24 04:13:03 ispc maldet(3837614): {sigup} could not download signature data from server, please try again later. Dec 24 04:13:07 ispc maldet(3837706): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 24 04:13:12 ispc maldet(3837706): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 24 04:13:13 ispc maldet(3837706): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 24 04:13:13 ispc maldet(3837706): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 24 04:13:13 ispc maldet(3837706): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 24 04:30:52 ispc maldet(3837706): {scan} file list completed in 1059s, found 62 files... Dec 24 04:30:53 ispc maldet(3837706): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 24 04:30:53 ispc maldet(3837706): {scan} scan of (62 files) in progress... Dec 24 04:30:55 ispc maldet(3837706): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 1068s Dec 24 04:30:55 ispc maldet(3837706): {scan} scan report saved, to view run: maldet --report 241224-0413.3837706 Dec 25 04:11:42 ispc maldet(3965962): {update} checking for available updates... Dec 25 04:11:42 ispc maldet(3965962): {update} could not download version file from server, please try again later. Dec 25 04:11:45 ispc maldet(3966034): {sigup} performing signature update check... Dec 25 04:11:45 ispc maldet(3966034): {sigup} local signature set is version 2017022510908 Dec 25 04:11:46 ispc maldet(3966034): {sigup} could not download signature data from server, please try again later. Dec 25 04:11:50 ispc maldet(3966120): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 25 04:11:54 ispc maldet(3966120): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 25 04:11:55 ispc maldet(3966120): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 25 04:11:55 ispc maldet(3966120): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 25 04:11:55 ispc maldet(3966120): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 25 04:36:40 ispc maldet(3966120): {scan} file list completed in 1484s, found 56 files... Dec 25 04:36:40 ispc maldet(3966120): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 25 04:36:40 ispc maldet(3966120): {scan} scan of (56 files) in progress... Dec 25 04:36:42 ispc maldet(3966120): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 1492s Dec 25 04:36:42 ispc maldet(3966120): {scan} scan report saved, to view run: maldet --report 241225-0411.3966120 Dec 26 04:11:54 ispc maldet(4094758): {update} checking for available updates... Dec 26 04:11:54 ispc maldet(4094758): {update} could not download version file from server, please try again later. Dec 26 04:11:57 ispc maldet(4094836): {sigup} performing signature update check... Dec 26 04:11:57 ispc maldet(4094836): {sigup} local signature set is version 2017022510908 Dec 26 04:11:58 ispc maldet(4094836): {sigup} could not download signature data from server, please try again later. Dec 26 04:12:02 ispc maldet(4094921): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 26 04:12:07 ispc maldet(4094921): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 26 04:12:07 ispc maldet(4094921): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 26 04:12:07 ispc maldet(4094921): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 26 04:12:07 ispc maldet(4094921): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 26 04:25:44 ispc maldet(4094921): {scan} file list completed in 817s, found 58 files... Dec 26 04:25:44 ispc maldet(4094921): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 26 04:25:44 ispc maldet(4094921): {scan} scan of (58 files) in progress... Dec 26 04:25:45 ispc maldet(4094921): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 823s Dec 26 04:25:45 ispc maldet(4094921): {scan} scan report saved, to view run: maldet --report 241226-0411.4094921 Dec 27 04:09:59 ispc maldet(27163): {update} checking for available updates... Dec 27 04:09:59 ispc maldet(27163): {update} could not download version file from server, please try again later. Dec 27 04:10:03 ispc maldet(27236): {sigup} performing signature update check... Dec 27 04:10:03 ispc maldet(27236): {sigup} local signature set is version 2017022510908 Dec 27 04:10:04 ispc maldet(27236): {sigup} could not download signature data from server, please try again later. Dec 27 04:10:07 ispc maldet(27419): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 27 04:10:11 ispc maldet(27419): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 27 04:10:11 ispc maldet(27419): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 27 04:10:11 ispc maldet(27419): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 27 04:10:11 ispc maldet(27419): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 27 04:28:44 ispc maldet(27419): {scan} file list completed in 1113s, found 52 files... Dec 27 04:28:44 ispc maldet(27419): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 27 04:28:45 ispc maldet(27419): {scan} scan of (52 files) in progress... Dec 27 04:28:47 ispc maldet(27419): {scan} scan completed on : files 52, malware hits 0, cleaned hits 0, time 1119s Dec 27 04:28:47 ispc maldet(27419): {scan} scan report saved, to view run: maldet --report 241227-0410.27419 Dec 28 04:08:14 ispc maldet(156788): {update} checking for available updates... Dec 28 04:08:14 ispc maldet(156788): {update} could not download version file from server, please try again later. Dec 28 04:08:17 ispc maldet(156864): {sigup} performing signature update check... Dec 28 04:08:17 ispc maldet(156864): {sigup} local signature set is version 2017022510908 Dec 28 04:08:17 ispc maldet(156864): {sigup} could not download signature data from server, please try again later. Dec 28 04:08:21 ispc maldet(156947): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 28 04:08:27 ispc maldet(156947): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 28 04:08:27 ispc maldet(156947): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 28 04:08:27 ispc maldet(156947): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 28 04:08:28 ispc maldet(156947): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 28 04:25:22 ispc maldet(156947): {scan} file list completed in 1014s, found 56 files... Dec 28 04:25:22 ispc maldet(156947): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 28 04:25:22 ispc maldet(156947): {scan} scan of (56 files) in progress... Dec 28 04:25:23 ispc maldet(156947): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 1021s Dec 28 04:25:23 ispc maldet(156947): {scan} scan report saved, to view run: maldet --report 241228-0408.156947 Dec 29 04:11:04 ispc maldet(287107): {update} checking for available updates... Dec 29 04:11:04 ispc maldet(287107): {update} could not download version file from server, please try again later. Dec 29 04:11:07 ispc maldet(287179): {sigup} performing signature update check... Dec 29 04:11:07 ispc maldet(287179): {sigup} local signature set is version 2017022510908 Dec 29 04:11:08 ispc maldet(287179): {sigup} could not download signature data from server, please try again later. Dec 29 04:11:12 ispc maldet(287263): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 29 04:11:16 ispc maldet(287263): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 29 04:11:17 ispc maldet(287263): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 29 04:11:17 ispc maldet(287263): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 29 04:11:18 ispc maldet(287263): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 29 04:50:42 ispc maldet(287263): {scan} file list completed in 2365s, found 195 files... Dec 29 04:50:43 ispc maldet(287263): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 29 04:50:43 ispc maldet(287263): {scan} scan of (195 files) in progress... Dec 29 04:50:44 ispc maldet(287263): {scan} scan completed on : files 195, malware hits 0, cleaned hits 0, time 2372s Dec 29 04:50:44 ispc maldet(287263): {scan} scan report saved, to view run: maldet --report 241229-0411.287263 Dec 30 04:11:36 ispc maldet(418133): {update} checking for available updates... Dec 30 04:11:37 ispc maldet(418133): {update} could not download version file from server, please try again later. Dec 30 04:11:41 ispc maldet(418210): {sigup} performing signature update check... Dec 30 04:11:41 ispc maldet(418210): {sigup} local signature set is version 2017022510908 Dec 30 04:11:41 ispc maldet(418210): {sigup} could not download signature data from server, please try again later. Dec 30 04:11:46 ispc maldet(418292): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 30 04:11:52 ispc maldet(418292): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 30 04:11:52 ispc maldet(418292): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 30 04:11:52 ispc maldet(418292): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 30 04:11:53 ispc maldet(418292): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 30 04:27:56 ispc maldet(418292): {scan} file list completed in 963s, found 64 files... Dec 30 04:27:56 ispc maldet(418292): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 30 04:27:57 ispc maldet(418292): {scan} scan of (64 files) in progress... Dec 30 04:27:59 ispc maldet(418292): {scan} scan completed on : files 64, malware hits 0, cleaned hits 0, time 972s Dec 30 04:27:59 ispc maldet(418292): {scan} scan report saved, to view run: maldet --report 241230-0411.418292 Dec 31 04:09:23 ispc maldet(550400): {update} checking for available updates... Dec 31 04:09:23 ispc maldet(550400): {update} could not download version file from server, please try again later. Dec 31 04:09:25 ispc maldet(550472): {sigup} performing signature update check... Dec 31 04:09:25 ispc maldet(550472): {sigup} local signature set is version 2017022510908 Dec 31 04:09:26 ispc maldet(550472): {sigup} could not download signature data from server, please try again later. Dec 31 04:09:28 ispc maldet(550560): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 31 04:09:33 ispc maldet(550560): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 31 04:09:33 ispc maldet(550560): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 31 04:09:33 ispc maldet(550560): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 31 04:09:34 ispc maldet(550560): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 31 04:29:40 ispc maldet(550560): {scan} file list completed in 1206s, found 70 files... Dec 31 04:29:40 ispc maldet(550560): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 31 04:29:40 ispc maldet(550560): {scan} scan of (70 files) in progress... Dec 31 04:29:41 ispc maldet(550560): {scan} scan completed on : files 70, malware hits 0, cleaned hits 0, time 1212s Dec 31 04:29:41 ispc maldet(550560): {scan} scan report saved, to view run: maldet --report 241231-0409.550560 Jan 01 04:07:32 ispc maldet(682696): {update} checking for available updates... Jan 01 04:07:32 ispc maldet(682696): {update} could not download version file from server, please try again later. Jan 01 04:07:36 ispc maldet(682769): {sigup} performing signature update check... Jan 01 04:07:37 ispc maldet(682769): {sigup} local signature set is version 2017022510908 Jan 01 04:07:37 ispc maldet(682769): {sigup} could not download signature data from server, please try again later. Jan 01 04:07:42 ispc maldet(682852): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 01 04:07:48 ispc maldet(682852): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 01 04:07:48 ispc maldet(682852): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 01 04:07:48 ispc maldet(682852): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 01 04:07:49 ispc maldet(682852): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 01 04:29:29 ispc maldet(682852): {scan} file list completed in 1300s, found 68 files... Jan 01 04:29:29 ispc maldet(682852): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 01 04:29:29 ispc maldet(682852): {scan} scan of (68 files) in progress... Jan 01 04:29:30 ispc maldet(682852): {scan} scan completed on : files 68, malware hits 0, cleaned hits 0, time 1307s Jan 01 04:29:31 ispc maldet(682852): {scan} scan report saved, to view run: maldet --report 250101-0407.682852 Jan 02 04:22:08 ispc maldet(812412): {update} checking for available updates... Jan 02 04:22:09 ispc maldet(812412): {update} could not download version file from server, please try again later. Jan 02 04:22:13 ispc maldet(812485): {sigup} performing signature update check... Jan 02 04:22:13 ispc maldet(812485): {sigup} local signature set is version 2017022510908 Jan 02 04:22:13 ispc maldet(812485): {sigup} could not download signature data from server, please try again later. Jan 02 04:22:17 ispc maldet(812570): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 02 04:22:23 ispc maldet(812570): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 02 04:22:23 ispc maldet(812570): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 02 04:22:23 ispc maldet(812570): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 02 04:22:23 ispc maldet(812570): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 02 05:37:06 ispc maldet(812570): {scan} file list completed in 4483s, found 62 files... Jan 02 05:37:06 ispc maldet(812570): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 02 05:37:06 ispc maldet(812570): {scan} scan of (62 files) in progress... Jan 02 05:37:09 ispc maldet(812570): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 4490s Jan 02 05:37:09 ispc maldet(812570): {scan} scan report saved, to view run: maldet --report 250102-0422.812570 Jan 03 04:09:01 ispc maldet(940447): {update} checking for available updates... Jan 03 04:09:01 ispc maldet(940447): {update} could not download version file from server, please try again later. Jan 03 04:09:05 ispc maldet(940520): {sigup} performing signature update check... Jan 03 04:09:06 ispc maldet(940520): {sigup} local signature set is version 2017022510908 Jan 03 04:09:06 ispc maldet(940520): {sigup} could not download signature data from server, please try again later. Jan 03 04:09:10 ispc maldet(940627): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 03 04:09:16 ispc maldet(940627): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 03 04:09:16 ispc maldet(940627): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 03 04:09:16 ispc maldet(940627): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 03 04:09:17 ispc maldet(940627): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 03 05:44:58 ispc maldet(940627): {scan} file list completed in 5741s, found 62 files... Jan 03 05:44:58 ispc maldet(940627): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 03 05:44:58 ispc maldet(940627): {scan} scan of (62 files) in progress... Jan 03 05:45:01 ispc maldet(940627): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 5751s Jan 03 05:45:01 ispc maldet(940627): {scan} scan report saved, to view run: maldet --report 250103-0409.940627 Jan 04 04:12:14 ispc maldet(1065569): {update} checking for available updates... Jan 04 04:12:14 ispc maldet(1065569): {update} could not download version file from server, please try again later. Jan 04 04:12:18 ispc maldet(1065642): {sigup} performing signature update check... Jan 04 04:12:18 ispc maldet(1065642): {sigup} local signature set is version 2017022510908 Jan 04 04:12:19 ispc maldet(1065642): {sigup} could not download signature data from server, please try again later. Jan 04 04:12:22 ispc maldet(1065728): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 04 04:12:26 ispc maldet(1065728): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 04 04:12:26 ispc maldet(1065728): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 04 04:12:26 ispc maldet(1065728): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 04 04:12:26 ispc maldet(1065728): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 04 05:45:13 ispc maldet(1065728): {scan} file list completed in 5567s, found 69 files... Jan 04 05:45:14 ispc maldet(1065728): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 04 05:45:14 ispc maldet(1065728): {scan} scan of (69 files) in progress... Jan 04 05:45:17 ispc maldet(1065728): {scan} scan completed on : files 69, malware hits 0, cleaned hits 0, time 5574s Jan 04 05:45:17 ispc maldet(1065728): {scan} scan report saved, to view run: maldet --report 250104-0412.1065728 Jan 05 04:22:03 ispc maldet(1191939): {update} checking for available updates... Jan 05 04:22:04 ispc maldet(1191939): {update} could not download version file from server, please try again later. Jan 05 04:22:08 ispc maldet(1192023): {sigup} performing signature update check... Jan 05 04:22:08 ispc maldet(1192023): {sigup} local signature set is version 2017022510908 Jan 05 04:22:09 ispc maldet(1192023): {sigup} could not download signature data from server, please try again later. Jan 05 04:22:10 ispc maldet(1192111): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 05 04:22:14 ispc maldet(1192111): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 05 04:22:14 ispc maldet(1192111): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 05 04:22:14 ispc maldet(1192111): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 05 04:22:14 ispc maldet(1192111): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 05 05:43:02 ispc maldet(1192111): {scan} file list completed in 4847s, found 253 files... Jan 05 05:43:02 ispc maldet(1192111): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 05 05:43:03 ispc maldet(1192111): {scan} scan of (253 files) in progress... Jan 05 05:43:05 ispc maldet(1192111): {scan} scan completed on : files 253, malware hits 0, cleaned hits 0, time 4855s Jan 05 05:43:06 ispc maldet(1192111): {scan} scan report saved, to view run: maldet --report 250105-0422.1192111 Jan 06 04:19:57 ispc maldet(1315176): {update} checking for available updates... Jan 06 04:19:57 ispc maldet(1315176): {update} could not download version file from server, please try again later. Jan 06 04:20:00 ispc maldet(1315252): {sigup} performing signature update check... Jan 06 04:20:01 ispc maldet(1315252): {sigup} local signature set is version 2017022510908 Jan 06 04:20:01 ispc maldet(1315252): {sigup} could not download signature data from server, please try again later. Jan 06 04:20:05 ispc maldet(1315369): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 06 04:20:12 ispc maldet(1315369): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 06 04:20:12 ispc maldet(1315369): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 06 04:20:12 ispc maldet(1315369): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 06 04:20:13 ispc maldet(1315369): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 06 05:45:11 ispc maldet(1315369): {scan} file list completed in 5099s, found 69 files... Jan 06 05:45:11 ispc maldet(1315369): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 06 05:45:11 ispc maldet(1315369): {scan} scan of (69 files) in progress... Jan 06 05:45:12 ispc maldet(1315369): {scan} scan completed on : files 69, malware hits 0, cleaned hits 0, time 5106s Jan 06 05:45:12 ispc maldet(1315369): {scan} scan report saved, to view run: maldet --report 250106-0420.1315369 Jan 07 04:12:48 ispc maldet(1442650): {update} checking for available updates... Jan 07 04:12:48 ispc maldet(1442650): {update} could not download version file from server, please try again later. Jan 07 04:12:52 ispc maldet(1442725): {sigup} performing signature update check... Jan 07 04:12:53 ispc maldet(1442725): {sigup} local signature set is version 2017022510908 Jan 07 04:12:53 ispc maldet(1442725): {sigup} could not download signature data from server, please try again later. Jan 07 04:12:57 ispc maldet(1442807): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 07 04:13:02 ispc maldet(1442807): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 07 04:13:02 ispc maldet(1442807): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 07 04:13:02 ispc maldet(1442807): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 07 04:13:03 ispc maldet(1442807): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 07 05:42:30 ispc maldet(1442807): {scan} file list completed in 5367s, found 62 files... Jan 07 05:42:30 ispc maldet(1442807): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 07 05:42:30 ispc maldet(1442807): {scan} scan of (62 files) in progress... Jan 07 05:42:33 ispc maldet(1442807): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 5375s Jan 07 05:42:33 ispc maldet(1442807): {scan} scan report saved, to view run: maldet --report 250107-0412.1442807 Jan 08 05:24:40 ispc maldet(1573582): {update} checking for available updates... Jan 08 05:24:40 ispc maldet(1573582): {update} could not download version file from server, please try again later. Jan 08 05:24:45 ispc maldet(1573655): {sigup} performing signature update check... Jan 08 05:24:45 ispc maldet(1573655): {sigup} local signature set is version 2017022510908 Jan 08 05:24:46 ispc maldet(1573655): {sigup} could not download signature data from server, please try again later. Jan 08 05:24:50 ispc maldet(1573744): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 08 05:24:56 ispc maldet(1573744): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 08 05:24:56 ispc maldet(1573744): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 08 05:24:56 ispc maldet(1573744): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 08 05:24:57 ispc maldet(1573744): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 08 06:56:45 ispc maldet(1573744): {scan} file list completed in 5508s, found 61 files... Jan 08 06:56:45 ispc maldet(1573744): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 08 06:56:45 ispc maldet(1573744): {scan} scan of (61 files) in progress... Jan 08 06:56:48 ispc maldet(1573744): {scan} scan completed on : files 61, malware hits 0, cleaned hits 0, time 5517s Jan 08 06:56:48 ispc maldet(1573744): {scan} scan report saved, to view run: maldet --report 250108-0524.1573744 Jan 09 04:19:46 ispc maldet(1697006): {update} checking for available updates... Jan 09 04:19:46 ispc maldet(1697006): {update} could not download version file from server, please try again later. Jan 09 04:19:51 ispc maldet(1697078): {sigup} performing signature update check... Jan 09 04:19:51 ispc maldet(1697078): {sigup} local signature set is version 2017022510908 Jan 09 04:19:51 ispc maldet(1697078): {sigup} could not download signature data from server, please try again later. Jan 09 04:19:56 ispc maldet(1697163): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 09 04:20:01 ispc maldet(1697163): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 09 04:20:01 ispc maldet(1697163): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 09 04:20:01 ispc maldet(1697163): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 09 04:20:02 ispc maldet(1697163): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 09 05:49:20 ispc maldet(1697163): {scan} file list completed in 5358s, found 53 files... Jan 09 05:49:20 ispc maldet(1697163): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 09 05:49:20 ispc maldet(1697163): {scan} scan of (53 files) in progress... Jan 09 05:49:20 ispc maldet(1697163): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 5364s Jan 09 05:49:20 ispc maldet(1697163): {scan} scan report saved, to view run: maldet --report 250109-0419.1697163 Jan 10 04:12:21 ispc maldet(1825021): {update} checking for available updates... Jan 10 04:12:21 ispc maldet(1825021): {update} could not download version file from server, please try again later. Jan 10 04:12:25 ispc maldet(1825105): {sigup} performing signature update check... Jan 10 04:12:25 ispc maldet(1825105): {sigup} local signature set is version 2017022510908 Jan 10 04:12:25 ispc maldet(1825105): {sigup} could not download signature data from server, please try again later. Jan 10 04:12:30 ispc maldet(1825188): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 10 04:12:36 ispc maldet(1825188): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 10 04:12:36 ispc maldet(1825188): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 10 04:12:36 ispc maldet(1825188): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 10 04:12:37 ispc maldet(1825188): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 10 05:46:08 ispc maldet(1825188): {scan} file list completed in 5611s, found 80 files... Jan 10 05:46:08 ispc maldet(1825188): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 10 05:46:08 ispc maldet(1825188): {scan} scan of (80 files) in progress... Jan 10 05:46:10 ispc maldet(1825188): {scan} scan completed on : files 80, malware hits 0, cleaned hits 0, time 5619s Jan 10 05:46:10 ispc maldet(1825188): {scan} scan report saved, to view run: maldet --report 250110-0412.1825188 Jan 11 04:21:07 ispc maldet(1970209): {update} checking for available updates... Jan 11 04:21:07 ispc maldet(1970209): {update} could not download version file from server, please try again later. Jan 11 04:21:11 ispc maldet(1970286): {sigup} performing signature update check... Jan 11 04:21:12 ispc maldet(1970286): {sigup} local signature set is version 2017022510908 Jan 11 04:21:12 ispc maldet(1970286): {sigup} could not download signature data from server, please try again later. Jan 11 04:21:17 ispc maldet(1970367): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 11 04:21:22 ispc maldet(1970367): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 11 04:21:22 ispc maldet(1970367): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 11 04:21:22 ispc maldet(1970367): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 11 04:21:22 ispc maldet(1970367): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 11 05:32:27 ispc maldet(1970367): {scan} file list completed in 4265s, found 50 files... Jan 11 05:32:28 ispc maldet(1970367): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 11 05:32:28 ispc maldet(1970367): {scan} scan of (50 files) in progress... Jan 11 05:32:31 ispc maldet(1970367): {scan} scan completed on : files 50, malware hits 0, cleaned hits 0, time 4273s Jan 11 05:32:31 ispc maldet(1970367): {scan} scan report saved, to view run: maldet --report 250111-0421.1970367 Jan 12 04:12:39 ispc maldet(2125443): {update} checking for available updates... Jan 12 04:12:40 ispc maldet(2125443): {update} could not download version file from server, please try again later. Jan 12 04:12:44 ispc maldet(2125519): {sigup} performing signature update check... Jan 12 04:12:44 ispc maldet(2125519): {sigup} local signature set is version 2017022510908 Jan 12 04:12:45 ispc maldet(2125519): {sigup} could not download signature data from server, please try again later. Jan 12 04:12:49 ispc maldet(2125600): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 12 04:12:55 ispc maldet(2125600): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 12 04:12:55 ispc maldet(2125600): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 12 04:12:56 ispc maldet(2125600): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 12 04:12:56 ispc maldet(2125600): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 12 05:41:37 ispc maldet(2125600): {scan} file list completed in 5321s, found 190 files... Jan 12 05:41:38 ispc maldet(2125600): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 12 05:41:38 ispc maldet(2125600): {scan} scan of (190 files) in progress... Jan 12 05:41:39 ispc maldet(2125600): {scan} scan completed on : files 190, malware hits 0, cleaned hits 0, time 5330s Jan 12 05:41:39 ispc maldet(2125600): {scan} scan report saved, to view run: maldet --report 250112-0412.2125600 Jan 13 04:14:26 ispc maldet(2270082): {update} checking for available updates... Jan 13 04:14:26 ispc maldet(2270082): {update} could not download version file from server, please try again later. Jan 13 04:14:30 ispc maldet(2270155): {sigup} performing signature update check... Jan 13 04:14:31 ispc maldet(2270155): {sigup} local signature set is version 2017022510908 Jan 13 04:14:31 ispc maldet(2270155): {sigup} could not download signature data from server, please try again later. Jan 13 04:14:35 ispc maldet(2270240): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 13 04:14:41 ispc maldet(2270240): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 13 04:14:41 ispc maldet(2270240): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 13 04:14:41 ispc maldet(2270240): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 13 04:14:41 ispc maldet(2270240): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 13 05:56:36 ispc maldet(2270240): {scan} file list completed in 6115s, found 59 files... Jan 13 05:56:36 ispc maldet(2270240): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 13 05:56:36 ispc maldet(2270240): {scan} scan of (59 files) in progress... Jan 13 05:56:39 ispc maldet(2270240): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 6123s Jan 13 05:56:39 ispc maldet(2270240): {scan} scan report saved, to view run: maldet --report 250113-0414.2270240 Jan 14 04:13:08 ispc maldet(2416969): {update} checking for available updates... Jan 14 04:13:08 ispc maldet(2416969): {update} could not download version file from server, please try again later. Jan 14 04:13:13 ispc maldet(2417043): {sigup} performing signature update check... Jan 14 04:13:13 ispc maldet(2417043): {sigup} local signature set is version 2017022510908 Jan 14 04:13:14 ispc maldet(2417043): {sigup} could not download signature data from server, please try again later. Jan 14 04:13:17 ispc maldet(2417128): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 14 04:13:22 ispc maldet(2417128): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 14 04:13:22 ispc maldet(2417128): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 14 04:13:22 ispc maldet(2417128): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 14 04:13:23 ispc maldet(2417128): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 14 05:52:35 ispc maldet(2417128): {scan} file list completed in 5953s, found 61 files... Jan 14 05:52:36 ispc maldet(2417128): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 14 05:52:36 ispc maldet(2417128): {scan} scan of (61 files) in progress... Jan 14 05:52:38 ispc maldet(2417128): {scan} scan completed on : files 61, malware hits 0, cleaned hits 0, time 5960s Jan 14 05:52:38 ispc maldet(2417128): {scan} scan report saved, to view run: maldet --report 250114-0413.2417128 Jan 15 04:10:17 ispc maldet(2553209): {update} checking for available updates... Jan 15 04:10:17 ispc maldet(2553209): {update} could not download version file from server, please try again later. Jan 15 04:10:22 ispc maldet(2553284): {sigup} performing signature update check... Jan 15 04:10:22 ispc maldet(2553284): {sigup} local signature set is version 2017022510908 Jan 15 04:10:22 ispc maldet(2553284): {sigup} could not download signature data from server, please try again later. Jan 15 04:10:26 ispc maldet(2553374): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 15 04:10:30 ispc maldet(2553374): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 15 04:10:30 ispc maldet(2553374): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 15 04:10:30 ispc maldet(2553374): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 15 04:10:30 ispc maldet(2553374): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 15 05:50:27 ispc maldet(2553374): {scan} file list completed in 5997s, found 75 files... Jan 15 05:50:27 ispc maldet(2553374): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 15 05:50:27 ispc maldet(2553374): {scan} scan of (75 files) in progress... Jan 15 05:50:29 ispc maldet(2553374): {scan} scan completed on : files 75, malware hits 0, cleaned hits 0, time 6002s Jan 15 05:50:29 ispc maldet(2553374): {scan} scan report saved, to view run: maldet --report 250115-0410.2553374 Jan 16 04:11:28 ispc maldet(2682177): {update} checking for available updates... Jan 16 04:11:29 ispc maldet(2682177): {update} could not download version file from server, please try again later. Jan 16 04:11:32 ispc maldet(2682249): {sigup} performing signature update check... Jan 16 04:11:32 ispc maldet(2682249): {sigup} local signature set is version 2017022510908 Jan 16 04:11:33 ispc maldet(2682249): {sigup} could not download signature data from server, please try again later. Jan 16 04:11:37 ispc maldet(2682335): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 16 04:11:42 ispc maldet(2682335): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 16 04:11:42 ispc maldet(2682335): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 16 04:11:43 ispc maldet(2682335): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 16 04:11:43 ispc maldet(2682335): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 16 05:39:54 ispc maldet(2682335): {scan} file list completed in 5291s, found 91 files... Jan 16 05:39:54 ispc maldet(2682335): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 16 05:39:54 ispc maldet(2682335): {scan} scan of (91 files) in progress... Jan 16 05:39:56 ispc maldet(2682335): {scan} scan completed on : files 91, malware hits 0, cleaned hits 0, time 5298s Jan 16 05:39:56 ispc maldet(2682335): {scan} scan report saved, to view run: maldet --report 250116-0411.2682335 Jan 17 04:12:07 ispc maldet(2812622): {update} checking for available updates... Jan 17 04:12:08 ispc maldet(2812622): {update} could not download version file from server, please try again later. Jan 17 04:12:11 ispc maldet(2812694): {sigup} performing signature update check... Jan 17 04:12:11 ispc maldet(2812694): {sigup} local signature set is version 2017022510908 Jan 17 04:12:12 ispc maldet(2812694): {sigup} could not download signature data from server, please try again later. Jan 17 04:12:15 ispc maldet(2812776): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 17 04:12:21 ispc maldet(2812776): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 17 04:12:21 ispc maldet(2812776): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 17 04:12:21 ispc maldet(2812776): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 17 04:12:22 ispc maldet(2812776): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 17 05:41:24 ispc maldet(2812776): {scan} file list completed in 5342s, found 62 files... Jan 17 05:41:25 ispc maldet(2812776): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 17 05:41:25 ispc maldet(2812776): {scan} scan of (62 files) in progress... Jan 17 05:41:27 ispc maldet(2812776): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 5351s Jan 17 05:41:27 ispc maldet(2812776): {scan} scan report saved, to view run: maldet --report 250117-0412.2812776 Jan 18 04:14:44 ispc maldet(2946287): {update} checking for available updates... Jan 18 04:14:45 ispc maldet(2946287): {update} could not download version file from server, please try again later. Jan 18 04:14:49 ispc maldet(2946359): {sigup} performing signature update check... Jan 18 04:14:49 ispc maldet(2946359): {sigup} local signature set is version 2017022510908 Jan 18 04:14:50 ispc maldet(2946359): {sigup} could not download signature data from server, please try again later. Jan 18 04:14:54 ispc maldet(2946446): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 18 04:14:59 ispc maldet(2946446): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 18 04:14:59 ispc maldet(2946446): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 18 04:15:00 ispc maldet(2946446): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 18 04:15:00 ispc maldet(2946446): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 18 05:55:16 ispc maldet(2946446): {scan} file list completed in 6015s, found 56 files... Jan 18 05:55:16 ispc maldet(2946446): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 18 05:55:16 ispc maldet(2946446): {scan} scan of (56 files) in progress... Jan 18 05:55:18 ispc maldet(2946446): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 6023s Jan 18 05:55:18 ispc maldet(2946446): {scan} scan report saved, to view run: maldet --report 250118-0414.2946446 Jan 19 04:14:27 ispc maldet(3078843): {update} checking for available updates... Jan 19 04:14:27 ispc maldet(3078843): {update} could not download version file from server, please try again later. Jan 19 04:14:30 ispc maldet(3078918): {sigup} performing signature update check... Jan 19 04:14:30 ispc maldet(3078918): {sigup} local signature set is version 2017022510908 Jan 19 04:14:31 ispc maldet(3078918): {sigup} could not download signature data from server, please try again later. Jan 19 04:14:36 ispc maldet(3079001): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 19 04:14:41 ispc maldet(3079001): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 19 04:14:42 ispc maldet(3079001): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 19 04:14:42 ispc maldet(3079001): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 19 04:14:42 ispc maldet(3079001): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 19 05:33:04 ispc maldet(3079001): {scan} file list completed in 4701s, found 190 files... Jan 19 05:33:04 ispc maldet(3079001): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 19 05:33:04 ispc maldet(3079001): {scan} scan of (190 files) in progress... Jan 19 05:33:07 ispc maldet(3079001): {scan} scan completed on : files 190, malware hits 0, cleaned hits 0, time 4710s Jan 19 05:33:07 ispc maldet(3079001): {scan} scan report saved, to view run: maldet --report 250119-0414.3079001 Jan 20 04:11:39 ispc maldet(3210056): {update} checking for available updates... Jan 20 04:11:40 ispc maldet(3210056): {update} could not download version file from server, please try again later. Jan 20 04:11:44 ispc maldet(3210128): {sigup} performing signature update check... Jan 20 04:11:45 ispc maldet(3210128): {sigup} local signature set is version 2017022510908 Jan 20 04:11:45 ispc maldet(3210128): {sigup} could not download signature data from server, please try again later. Jan 20 04:11:50 ispc maldet(3210213): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 20 04:11:56 ispc maldet(3210213): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 20 04:11:57 ispc maldet(3210213): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 20 04:11:57 ispc maldet(3210213): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 20 04:11:57 ispc maldet(3210213): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 20 04:42:39 ispc maldet(3210213): {scan} file list completed in 1842s, found 48 files... Jan 20 04:42:39 ispc maldet(3210213): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 20 04:42:39 ispc maldet(3210213): {scan} scan of (48 files) in progress... Jan 20 04:42:40 ispc maldet(3210213): {scan} scan completed on : files 48, malware hits 0, cleaned hits 0, time 1850s Jan 20 04:42:40 ispc maldet(3210213): {scan} scan report saved, to view run: maldet --report 250120-0411.3210213 Jan 21 04:13:57 ispc maldet(3358039): {update} checking for available updates... Jan 21 04:13:57 ispc maldet(3358039): {update} could not download version file from server, please try again later. Jan 21 04:14:02 ispc maldet(3358115): {sigup} performing signature update check... Jan 21 04:14:02 ispc maldet(3358115): {sigup} local signature set is version 2017022510908 Jan 21 04:14:03 ispc maldet(3358115): {sigup} could not download signature data from server, please try again later. Jan 21 04:14:07 ispc maldet(3358211): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 21 04:14:12 ispc maldet(3358211): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 21 04:14:12 ispc maldet(3358211): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 21 04:14:13 ispc maldet(3358211): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 21 04:14:13 ispc maldet(3358211): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 21 05:37:52 ispc maldet(3358211): {scan} file list completed in 5019s, found 56 files... Jan 21 05:37:53 ispc maldet(3358211): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 21 05:37:53 ispc maldet(3358211): {scan} scan of (56 files) in progress... Jan 21 05:37:55 ispc maldet(3358211): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 5028s Jan 21 05:37:55 ispc maldet(3358211): {scan} scan report saved, to view run: maldet --report 250121-0414.3358211 Jan 22 04:15:16 ispc maldet(3504433): {update} checking for available updates... Jan 22 04:15:16 ispc maldet(3504433): {update} could not download version file from server, please try again later. Jan 22 04:15:21 ispc maldet(3504543): {sigup} performing signature update check... Jan 22 04:15:21 ispc maldet(3504543): {sigup} local signature set is version 2017022510908 Jan 22 04:15:21 ispc maldet(3504543): {sigup} could not download signature data from server, please try again later. Jan 22 04:15:26 ispc maldet(3504626): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 22 04:15:32 ispc maldet(3504626): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 22 04:15:32 ispc maldet(3504626): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 22 04:15:32 ispc maldet(3504626): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 22 04:15:33 ispc maldet(3504626): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 22 05:35:46 ispc maldet(3504626): {scan} file list completed in 4812s, found 55 files... Jan 22 05:35:46 ispc maldet(3504626): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 22 05:35:47 ispc maldet(3504626): {scan} scan of (55 files) in progress... Jan 22 05:35:49 ispc maldet(3504626): {scan} scan completed on : files 55, malware hits 0, cleaned hits 0, time 4823s Jan 22 05:35:50 ispc maldet(3504626): {scan} scan report saved, to view run: maldet --report 250122-0415.3504626 Jan 23 04:15:28 ispc maldet(3644559): {update} checking for available updates... Jan 23 04:15:28 ispc maldet(3644559): {update} could not download version file from server, please try again later. Jan 23 04:15:33 ispc maldet(3644633): {sigup} performing signature update check... Jan 23 04:15:33 ispc maldet(3644633): {sigup} local signature set is version 2017022510908 Jan 23 04:15:34 ispc maldet(3644633): {sigup} could not download signature data from server, please try again later. Jan 23 04:15:38 ispc maldet(3644721): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 23 04:15:42 ispc maldet(3644721): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 23 04:15:43 ispc maldet(3644721): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 23 04:15:43 ispc maldet(3644721): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 23 04:15:44 ispc maldet(3644721): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 23 05:43:24 ispc maldet(3644721): {scan} file list completed in 5260s, found 55 files... Jan 23 05:43:24 ispc maldet(3644721): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 23 05:43:24 ispc maldet(3644721): {scan} scan of (55 files) in progress... Jan 23 05:43:26 ispc maldet(3644721): {scan} scan completed on : files 55, malware hits 0, cleaned hits 0, time 5268s Jan 23 05:43:26 ispc maldet(3644721): {scan} scan report saved, to view run: maldet --report 250123-0415.3644721 Jan 24 04:13:05 ispc maldet(3782564): {update} checking for available updates... Jan 24 04:13:05 ispc maldet(3782564): {update} could not download version file from server, please try again later. Jan 24 04:13:10 ispc maldet(3782645): {sigup} performing signature update check... Jan 24 04:13:10 ispc maldet(3782645): {sigup} local signature set is version 2017022510908 Jan 24 04:13:11 ispc maldet(3782645): {sigup} could not download signature data from server, please try again later. Jan 24 04:13:15 ispc maldet(3782728): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 24 04:13:20 ispc maldet(3782728): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 24 04:13:21 ispc maldet(3782728): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 24 04:13:21 ispc maldet(3782728): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 24 04:13:22 ispc maldet(3782728): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 24 05:45:48 ispc maldet(3782728): {scan} file list completed in 5546s, found 221 files... Jan 24 05:45:48 ispc maldet(3782728): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 24 05:45:48 ispc maldet(3782728): {scan} scan of (221 files) in progress... Jan 24 05:45:51 ispc maldet(3782728): {scan} scan completed on : files 221, malware hits 0, cleaned hits 0, time 5555s Jan 24 05:45:51 ispc maldet(3782728): {scan} scan report saved, to view run: maldet --report 250124-0413.3782728 Jan 25 04:12:51 ispc maldet(3925477): {update} checking for available updates... Jan 25 04:12:52 ispc maldet(3925477): {update} could not download version file from server, please try again later. Jan 25 04:12:56 ispc maldet(3925550): {sigup} performing signature update check... Jan 25 04:12:56 ispc maldet(3925550): {sigup} local signature set is version 2017022510908 Jan 25 04:12:56 ispc maldet(3925550): {sigup} could not download signature data from server, please try again later. Jan 25 04:13:00 ispc maldet(3925638): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 25 04:13:06 ispc maldet(3925638): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 25 04:13:06 ispc maldet(3925638): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 25 04:13:06 ispc maldet(3925638): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 25 04:13:06 ispc maldet(3925638): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 25 05:55:59 ispc maldet(3925638): {scan} file list completed in 6173s, found 63 files... Jan 25 05:56:00 ispc maldet(3925638): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 25 05:56:00 ispc maldet(3925638): {scan} scan of (63 files) in progress... Jan 25 05:56:03 ispc maldet(3925638): {scan} scan completed on : files 63, malware hits 0, cleaned hits 0, time 6182s Jan 25 05:56:03 ispc maldet(3925638): {scan} scan report saved, to view run: maldet --report 250125-0412.3925638 Jan 26 04:19:37 ispc maldet(4069854): {update} checking for available updates... Jan 26 04:19:38 ispc maldet(4069854): {update} could not download version file from server, please try again later. Jan 26 04:19:42 ispc maldet(4069932): {sigup} performing signature update check... Jan 26 04:19:42 ispc maldet(4069932): {sigup} local signature set is version 2017022510908 Jan 26 04:19:43 ispc maldet(4069932): {sigup} could not download signature data from server, please try again later. Jan 26 04:19:48 ispc maldet(4070016): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 26 04:19:55 ispc maldet(4070016): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 26 04:19:55 ispc maldet(4070016): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 26 04:19:55 ispc maldet(4070016): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 26 04:19:56 ispc maldet(4070016): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 26 05:54:29 ispc maldet(4070016): {scan} file list completed in 5672s, found 191 files... Jan 26 05:54:29 ispc maldet(4070016): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 26 05:54:29 ispc maldet(4070016): {scan} scan of (191 files) in progress... Jan 26 05:54:32 ispc maldet(4070016): {scan} scan completed on : files 191, malware hits 0, cleaned hits 0, time 5683s Jan 26 05:54:32 ispc maldet(4070016): {scan} scan report saved, to view run: maldet --report 250126-0419.4070016 Jan 27 04:11:51 ispc maldet(18860): {update} checking for available updates... Jan 27 04:11:51 ispc maldet(18860): {update} could not download version file from server, please try again later. Jan 27 04:11:56 ispc maldet(18933): {sigup} performing signature update check... Jan 27 04:11:56 ispc maldet(18933): {sigup} local signature set is version 2017022510908 Jan 27 04:11:56 ispc maldet(18933): {sigup} could not download signature data from server, please try again later. Jan 27 04:12:01 ispc maldet(19019): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 27 04:12:08 ispc maldet(19019): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 27 04:12:08 ispc maldet(19019): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 27 04:12:08 ispc maldet(19019): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 27 04:12:08 ispc maldet(19019): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 27 05:34:31 ispc maldet(19019): {scan} file list completed in 4942s, found 54 files... Jan 27 05:34:31 ispc maldet(19019): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 27 05:34:31 ispc maldet(19019): {scan} scan of (54 files) in progress... Jan 27 05:34:34 ispc maldet(19019): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 4951s Jan 27 05:34:35 ispc maldet(19019): {scan} scan report saved, to view run: maldet --report 250127-0411.19019 Jan 28 04:15:23 ispc maldet(161144): {update} checking for available updates... Jan 28 04:15:23 ispc maldet(161144): {update} could not download version file from server, please try again later. Jan 28 04:15:28 ispc maldet(161229): {sigup} performing signature update check... Jan 28 04:15:28 ispc maldet(161229): {sigup} local signature set is version 2017022510908 Jan 28 04:15:29 ispc maldet(161229): {sigup} could not download signature data from server, please try again later. Jan 28 04:15:34 ispc maldet(161310): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 28 04:15:39 ispc maldet(161310): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 28 04:15:39 ispc maldet(161310): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 28 04:15:39 ispc maldet(161310): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 28 04:15:39 ispc maldet(161310): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 28 05:48:11 ispc maldet(161310): {scan} file list completed in 5552s, found 161 files... Jan 28 05:48:12 ispc maldet(161310): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 28 05:48:12 ispc maldet(161310): {scan} scan of (161 files) in progress... Jan 28 05:48:14 ispc maldet(161310): {scan} scan completed on : files 161, malware hits 0, cleaned hits 0, time 5560s Jan 28 05:48:14 ispc maldet(161310): {scan} scan report saved, to view run: maldet --report 250128-0415.161310 Jan 29 04:15:32 ispc maldet(301411): {update} checking for available updates... Jan 29 04:15:32 ispc maldet(301411): {update} could not download version file from server, please try again later. Jan 29 04:15:36 ispc maldet(301483): {sigup} performing signature update check... Jan 29 04:15:36 ispc maldet(301483): {sigup} local signature set is version 2017022510908 Jan 29 04:15:37 ispc maldet(301483): {sigup} could not download signature data from server, please try again later. Jan 29 04:15:41 ispc maldet(301568): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 29 04:15:47 ispc maldet(301568): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 29 04:15:47 ispc maldet(301568): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 29 04:15:48 ispc maldet(301568): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 29 04:15:48 ispc maldet(301568): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 29 06:01:15 ispc maldet(301568): {scan} file list completed in 6327s, found 61 files... Jan 29 06:01:15 ispc maldet(301568): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 29 06:01:16 ispc maldet(301568): {scan} scan of (61 files) in progress... Jan 29 06:01:17 ispc maldet(301568): {scan} scan completed on : files 61, malware hits 0, cleaned hits 0, time 6336s Jan 29 06:01:17 ispc maldet(301568): {scan} scan report saved, to view run: maldet --report 250129-0415.301568 Jan 30 04:15:03 ispc maldet(441804): {update} checking for available updates... Jan 30 04:15:04 ispc maldet(441804): {update} could not download version file from server, please try again later. Jan 30 04:15:08 ispc maldet(441944): {sigup} performing signature update check... Jan 30 04:15:09 ispc maldet(441944): {sigup} local signature set is version 2017022510908 Jan 30 04:15:09 ispc maldet(441944): {sigup} could not download signature data from server, please try again later. Jan 30 04:15:14 ispc maldet(442056): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 30 04:15:19 ispc maldet(442056): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 30 04:15:19 ispc maldet(442056): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 30 04:15:20 ispc maldet(442056): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 30 04:15:20 ispc maldet(442056): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 30 05:55:26 ispc maldet(442056): {scan} file list completed in 6006s, found 54 files... Jan 30 05:55:27 ispc maldet(442056): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 30 05:55:27 ispc maldet(442056): {scan} scan of (54 files) in progress... Jan 30 05:55:29 ispc maldet(442056): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 6014s Jan 30 05:55:29 ispc maldet(442056): {scan} scan report saved, to view run: maldet --report 250130-0415.442056 Jan 31 04:16:03 ispc maldet(586422): {update} checking for available updates... Jan 31 04:16:03 ispc maldet(586422): {update} could not download version file from server, please try again later. Jan 31 04:16:07 ispc maldet(586507): {sigup} performing signature update check... Jan 31 04:16:07 ispc maldet(586507): {sigup} local signature set is version 2017022510908 Jan 31 04:16:08 ispc maldet(586507): {sigup} could not download signature data from server, please try again later. Jan 31 04:16:10 ispc maldet(586590): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 31 04:16:16 ispc maldet(586590): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jan 31 04:16:16 ispc maldet(586590): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 31 04:16:16 ispc maldet(586590): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 31 04:16:16 ispc maldet(586590): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 31 04:34:17 ispc maldet(586590): {scan} file list completed in 1080s, found 69 files... Jan 31 04:34:17 ispc maldet(586590): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jan 31 04:34:17 ispc maldet(586590): {scan} scan of (69 files) in progress... Jan 31 04:34:20 ispc maldet(586590): {scan} scan completed on : files 69, malware hits 0, cleaned hits 0, time 1089s Jan 31 04:34:20 ispc maldet(586590): {scan} scan report saved, to view run: maldet --report 250131-0416.586590 Feb 01 04:25:51 ispc maldet(724396): {update} checking for available updates... Feb 01 04:25:52 ispc maldet(724396): {update} could not download version file from server, please try again later. Feb 01 04:25:56 ispc maldet(724469): {sigup} performing signature update check... Feb 01 04:25:56 ispc maldet(724469): {sigup} local signature set is version 2017022510908 Feb 01 04:25:57 ispc maldet(724469): {sigup} could not download signature data from server, please try again later. Feb 01 04:26:01 ispc maldet(724552): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 01 04:26:06 ispc maldet(724552): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 01 04:26:06 ispc maldet(724552): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 01 04:26:06 ispc maldet(724552): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 01 04:26:07 ispc maldet(724552): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 01 04:41:53 ispc maldet(724552): {scan} file list completed in 946s, found 46 files... Feb 01 04:41:54 ispc maldet(724552): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 01 04:41:54 ispc maldet(724552): {scan} scan of (46 files) in progress... Feb 01 04:41:55 ispc maldet(724552): {scan} scan completed on : files 46, malware hits 0, cleaned hits 0, time 954s Feb 01 04:41:56 ispc maldet(724552): {scan} scan report saved, to view run: maldet --report 250201-0425.724552 Feb 02 04:14:39 ispc maldet(982219): {update} checking for available updates... Feb 02 04:14:39 ispc maldet(982219): {update} could not download version file from server, please try again later. Feb 02 04:14:42 ispc maldet(982293): {sigup} performing signature update check... Feb 02 04:14:43 ispc maldet(982293): {sigup} local signature set is version 2017022510908 Feb 02 04:14:43 ispc maldet(982293): {sigup} could not download signature data from server, please try again later. Feb 02 04:14:47 ispc maldet(982380): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 02 04:14:52 ispc maldet(982380): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 02 04:14:52 ispc maldet(982380): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 02 04:14:52 ispc maldet(982380): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 02 04:14:53 ispc maldet(982380): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 02 04:20:50 ispc maldet(982380): {scan} file list completed in 357s, found 44 files... Feb 02 04:20:50 ispc maldet(982380): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 02 04:20:50 ispc maldet(982380): {scan} scan of (44 files) in progress... Feb 02 04:20:52 ispc maldet(982380): {scan} scan completed on : files 44, malware hits 0, cleaned hits 0, time 364s Feb 02 04:20:52 ispc maldet(982380): {scan} scan report saved, to view run: maldet --report 250202-0414.982380 Feb 03 04:11:47 ispc maldet(2876679): {update} checking for available updates... Feb 03 04:11:47 ispc maldet(2876679): {update} could not download version file from server, please try again later. Feb 03 04:11:50 ispc maldet(2876921): {sigup} performing signature update check... Feb 03 04:11:50 ispc maldet(2876921): {sigup} local signature set is version 2017022510908 Feb 03 04:11:51 ispc maldet(2876921): {sigup} could not download signature data from server, please try again later. Feb 03 04:11:54 ispc maldet(2877177): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 03 04:11:57 ispc maldet(2877177): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 03 04:11:57 ispc maldet(2877177): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 03 04:11:57 ispc maldet(2877177): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 03 04:11:58 ispc maldet(2877177): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 03 04:18:32 ispc maldet(2877177): {scan} file list completed in 394s, found 52 files... Feb 03 04:18:32 ispc maldet(2877177): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 03 04:18:32 ispc maldet(2877177): {scan} scan of (52 files) in progress... Feb 03 04:18:33 ispc maldet(2877177): {scan} scan completed on : files 52, malware hits 0, cleaned hits 0, time 399s Feb 03 04:18:33 ispc maldet(2877177): {scan} scan report saved, to view run: maldet --report 250203-0411.2877177 Feb 04 04:11:01 ispc maldet(31356): {update} checking for available updates... Feb 04 04:11:02 ispc maldet(31356): {update} could not download version file from server, please try again later. Feb 04 04:11:05 ispc maldet(31475): {sigup} performing signature update check... Feb 04 04:11:06 ispc maldet(31475): {sigup} local signature set is version 2017022510908 Feb 04 04:11:06 ispc maldet(31475): {sigup} could not download signature data from server, please try again later. Feb 04 04:11:10 ispc maldet(31603): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 04 04:11:14 ispc maldet(31603): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 04 04:11:14 ispc maldet(31603): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 04 04:11:14 ispc maldet(31603): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 04 04:11:15 ispc maldet(31603): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 04 04:23:28 ispc maldet(31603): {scan} file list completed in 733s, found 51 files... Feb 04 04:23:28 ispc maldet(31603): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 04 04:23:29 ispc maldet(31603): {scan} scan of (51 files) in progress... Feb 04 04:23:31 ispc maldet(31603): {scan} scan completed on : files 51, malware hits 0, cleaned hits 0, time 740s Feb 04 04:23:31 ispc maldet(31603): {scan} scan report saved, to view run: maldet --report 250204-0411.31603 Feb 05 04:11:33 ispc maldet(1780489): {update} checking for available updates... Feb 05 04:11:33 ispc maldet(1780489): {update} could not download version file from server, please try again later. Feb 05 04:11:36 ispc maldet(1780702): {sigup} performing signature update check... Feb 05 04:11:36 ispc maldet(1780702): {sigup} local signature set is version 2017022510908 Feb 05 04:11:36 ispc maldet(1780702): {sigup} could not download signature data from server, please try again later. Feb 05 04:11:39 ispc maldet(1780947): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 05 04:11:42 ispc maldet(1780947): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 05 04:11:42 ispc maldet(1780947): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 05 04:11:42 ispc maldet(1780947): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 05 04:11:42 ispc maldet(1780947): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 05 04:17:08 ispc maldet(1780947): {scan} file list completed in 326s, found 46 files... Feb 05 04:17:08 ispc maldet(1780947): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 05 04:17:08 ispc maldet(1780947): {scan} scan of (46 files) in progress... Feb 05 04:17:10 ispc maldet(1780947): {scan} scan completed on : files 46, malware hits 0, cleaned hits 0, time 329s Feb 05 04:17:10 ispc maldet(1780947): {scan} scan report saved, to view run: maldet --report 250205-0411.1780947 Feb 06 04:10:57 ispc maldet(369093): {update} checking for available updates... Feb 06 04:10:58 ispc maldet(369093): {update} could not download version file from server, please try again later. Feb 06 04:11:01 ispc maldet(369274): {sigup} performing signature update check... Feb 06 04:11:02 ispc maldet(369274): {sigup} local signature set is version 2017022510908 Feb 06 04:11:02 ispc maldet(369274): {sigup} could not download signature data from server, please try again later. Feb 06 04:11:06 ispc maldet(369504): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 06 04:11:10 ispc maldet(369504): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 06 04:11:10 ispc maldet(369504): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 06 04:11:11 ispc maldet(369504): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 06 04:11:11 ispc maldet(369504): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 06 04:17:55 ispc maldet(369504): {scan} file list completed in 404s, found 56 files... Feb 06 04:17:55 ispc maldet(369504): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 06 04:17:55 ispc maldet(369504): {scan} scan of (56 files) in progress... Feb 06 04:17:56 ispc maldet(369504): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 410s Feb 06 04:17:56 ispc maldet(369504): {scan} scan report saved, to view run: maldet --report 250206-0411.369504 Feb 07 04:14:02 ispc maldet(3476137): {update} checking for available updates... Feb 07 04:14:03 ispc maldet(3476137): {update} could not download version file from server, please try again later. Feb 07 04:14:06 ispc maldet(3476358): {sigup} performing signature update check... Feb 07 04:14:07 ispc maldet(3476358): {sigup} local signature set is version 2017022510908 Feb 07 04:14:07 ispc maldet(3476358): {sigup} could not download signature data from server, please try again later. Feb 07 04:14:11 ispc maldet(3476617): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 07 04:14:13 ispc maldet(3476617): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 07 04:14:13 ispc maldet(3476617): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 07 04:14:13 ispc maldet(3476617): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 07 04:14:14 ispc maldet(3476617): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 07 04:20:48 ispc maldet(3476617): {scan} file list completed in 394s, found 54 files... Feb 07 04:20:49 ispc maldet(3476617): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 07 04:20:49 ispc maldet(3476617): {scan} scan of (54 files) in progress... Feb 07 04:20:52 ispc maldet(3476617): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 400s Feb 07 04:20:52 ispc maldet(3476617): {scan} scan report saved, to view run: maldet --report 250207-0414.3476617 Feb 08 04:11:43 ispc maldet(179857): {update} checking for available updates... Feb 08 04:11:43 ispc maldet(179857): {update} could not download version file from server, please try again later. Feb 08 04:11:48 ispc maldet(179933): {sigup} performing signature update check... Feb 08 04:11:48 ispc maldet(179933): {sigup} local signature set is version 2017022510908 Feb 08 04:11:48 ispc maldet(179933): {sigup} could not download signature data from server, please try again later. Feb 08 04:11:52 ispc maldet(180019): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 08 04:11:57 ispc maldet(180019): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 08 04:11:57 ispc maldet(180019): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 08 04:11:57 ispc maldet(180019): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 08 04:11:58 ispc maldet(180019): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 08 04:33:48 ispc maldet(180019): {scan} file list completed in 1311s, found 52 files... Feb 08 04:33:48 ispc maldet(180019): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 08 04:33:49 ispc maldet(180019): {scan} scan of (52 files) in progress... Feb 08 04:33:51 ispc maldet(180019): {scan} scan completed on : files 52, malware hits 0, cleaned hits 0, time 1317s Feb 08 04:33:51 ispc maldet(180019): {scan} scan report saved, to view run: maldet --report 250208-0411.180019 Feb 09 04:32:54 ispc maldet(324104): {update} checking for available updates... Feb 09 04:32:54 ispc maldet(324104): {update} could not download version file from server, please try again later. Feb 09 04:32:58 ispc maldet(324182): {sigup} performing signature update check... Feb 09 04:32:59 ispc maldet(324182): {sigup} local signature set is version 2017022510908 Feb 09 04:32:59 ispc maldet(324182): {sigup} could not download signature data from server, please try again later. Feb 09 04:33:03 ispc maldet(324269): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 09 04:33:09 ispc maldet(324269): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 09 04:33:09 ispc maldet(324269): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 09 04:33:09 ispc maldet(324269): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 09 04:33:10 ispc maldet(324269): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 09 04:46:33 ispc maldet(324269): {scan} file list completed in 803s, found 58 files... Feb 09 04:46:33 ispc maldet(324269): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 09 04:46:33 ispc maldet(324269): {scan} scan of (58 files) in progress... Feb 09 04:46:34 ispc maldet(324269): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 810s Feb 09 04:46:35 ispc maldet(324269): {scan} scan report saved, to view run: maldet --report 250209-0433.324269 Feb 10 04:13:26 ispc maldet(448417): {update} checking for available updates... Feb 10 04:13:26 ispc maldet(448417): {update} could not download version file from server, please try again later. Feb 10 04:13:30 ispc maldet(448491): {sigup} performing signature update check... Feb 10 04:13:31 ispc maldet(448491): {sigup} local signature set is version 2017022510908 Feb 10 04:13:31 ispc maldet(448491): {sigup} could not download signature data from server, please try again later. Feb 10 04:13:36 ispc maldet(448576): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 10 04:13:41 ispc maldet(448576): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 10 04:13:42 ispc maldet(448576): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 10 04:13:42 ispc maldet(448576): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 10 04:13:42 ispc maldet(448576): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 10 04:31:15 ispc maldet(448576): {scan} file list completed in 1052s, found 57 files... Feb 10 04:31:15 ispc maldet(448576): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 10 04:31:15 ispc maldet(448576): {scan} scan of (57 files) in progress... Feb 10 04:31:18 ispc maldet(448576): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 1061s Feb 10 04:31:18 ispc maldet(448576): {scan} scan report saved, to view run: maldet --report 250210-0413.448576 Feb 11 04:11:55 ispc maldet(570548): {update} checking for available updates... Feb 11 04:11:55 ispc maldet(570548): {update} could not download version file from server, please try again later. Feb 11 04:11:59 ispc maldet(570623): {sigup} performing signature update check... Feb 11 04:12:00 ispc maldet(570623): {sigup} local signature set is version 2017022510908 Feb 11 04:12:00 ispc maldet(570623): {sigup} could not download signature data from server, please try again later. Feb 11 04:12:03 ispc maldet(570706): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 11 04:12:10 ispc maldet(570706): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 11 04:12:10 ispc maldet(570706): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 11 04:12:10 ispc maldet(570706): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 11 04:12:11 ispc maldet(570706): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 11 04:31:26 ispc maldet(570706): {scan} file list completed in 1156s, found 50 files... Feb 11 04:31:26 ispc maldet(570706): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 11 04:31:27 ispc maldet(570706): {scan} scan of (50 files) in progress... Feb 11 04:31:28 ispc maldet(570706): {scan} scan completed on : files 50, malware hits 0, cleaned hits 0, time 1164s Feb 11 04:31:29 ispc maldet(570706): {scan} scan report saved, to view run: maldet --report 250211-0412.570706 Feb 12 04:16:21 ispc maldet(695281): {update} checking for available updates... Feb 12 04:16:22 ispc maldet(695281): {update} could not download version file from server, please try again later. Feb 12 04:16:26 ispc maldet(695359): {sigup} performing signature update check... Feb 12 04:16:26 ispc maldet(695359): {sigup} local signature set is version 2017022510908 Feb 12 04:16:26 ispc maldet(695359): {sigup} could not download signature data from server, please try again later. Feb 12 04:16:30 ispc maldet(695441): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 12 04:16:35 ispc maldet(695441): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 12 04:16:36 ispc maldet(695441): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 12 04:16:36 ispc maldet(695441): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 12 04:16:37 ispc maldet(695441): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 12 04:29:09 ispc maldet(695441): {scan} file list completed in 753s, found 58 files... Feb 12 04:29:10 ispc maldet(695441): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 12 04:29:10 ispc maldet(695441): {scan} scan of (58 files) in progress... Feb 12 04:29:12 ispc maldet(695441): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 761s Feb 12 04:29:12 ispc maldet(695441): {scan} scan report saved, to view run: maldet --report 250212-0416.695441 Feb 13 04:24:09 ispc maldet(823250): {update} checking for available updates... Feb 13 04:24:10 ispc maldet(823250): {update} could not download version file from server, please try again later. Feb 13 04:24:14 ispc maldet(823323): {sigup} performing signature update check... Feb 13 04:24:14 ispc maldet(823323): {sigup} local signature set is version 2017022510908 Feb 13 04:24:15 ispc maldet(823323): {sigup} could not download signature data from server, please try again later. Feb 13 04:24:19 ispc maldet(823408): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 13 04:24:25 ispc maldet(823408): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 13 04:24:25 ispc maldet(823408): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 13 04:24:25 ispc maldet(823408): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 13 04:24:26 ispc maldet(823408): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 13 04:41:52 ispc maldet(823408): {scan} file list completed in 1046s, found 56 files... Feb 13 04:41:52 ispc maldet(823408): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 13 04:41:52 ispc maldet(823408): {scan} scan of (56 files) in progress... Feb 13 04:41:54 ispc maldet(823408): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 1053s Feb 13 04:41:54 ispc maldet(823408): {scan} scan report saved, to view run: maldet --report 250213-0424.823408 Feb 14 04:11:30 ispc maldet(950900): {update} checking for available updates... Feb 14 04:11:31 ispc maldet(950900): {update} could not download version file from server, please try again later. Feb 14 04:11:35 ispc maldet(950973): {sigup} performing signature update check... Feb 14 04:11:35 ispc maldet(950973): {sigup} local signature set is version 2017022510908 Feb 14 04:11:35 ispc maldet(950973): {sigup} could not download signature data from server, please try again later. Feb 14 04:11:40 ispc maldet(951059): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 14 04:11:45 ispc maldet(951059): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 14 04:11:46 ispc maldet(951059): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 14 04:11:46 ispc maldet(951059): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 14 04:11:46 ispc maldet(951059): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 14 04:29:35 ispc maldet(951059): {scan} file list completed in 1068s, found 56 files... Feb 14 04:29:35 ispc maldet(951059): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 14 04:29:35 ispc maldet(951059): {scan} scan of (56 files) in progress... Feb 14 04:29:37 ispc maldet(951059): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 1076s Feb 14 04:29:38 ispc maldet(951059): {scan} scan report saved, to view run: maldet --report 250214-0411.951059 Feb 15 04:11:54 ispc maldet(1085090): {update} checking for available updates... Feb 15 04:11:54 ispc maldet(1085090): {update} could not download version file from server, please try again later. Feb 15 04:11:59 ispc maldet(1085165): {sigup} performing signature update check... Feb 15 04:11:59 ispc maldet(1085165): {sigup} local signature set is version 2017022510908 Feb 15 04:12:00 ispc maldet(1085165): {sigup} could not download signature data from server, please try again later. Feb 15 04:12:04 ispc maldet(1085251): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 15 04:12:09 ispc maldet(1085251): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 15 04:12:09 ispc maldet(1085251): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 15 04:12:10 ispc maldet(1085251): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 15 04:12:10 ispc maldet(1085251): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 15 04:24:53 ispc maldet(1085251): {scan} file list completed in 762s, found 59 files... Feb 15 04:24:53 ispc maldet(1085251): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 15 04:24:53 ispc maldet(1085251): {scan} scan of (59 files) in progress... Feb 15 04:24:56 ispc maldet(1085251): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 771s Feb 15 04:24:56 ispc maldet(1085251): {scan} scan report saved, to view run: maldet --report 250215-0412.1085251 Feb 16 04:14:01 ispc maldet(1219003): {update} checking for available updates... Feb 16 04:14:02 ispc maldet(1219003): {update} could not download version file from server, please try again later. Feb 16 04:14:06 ispc maldet(1219087): {sigup} performing signature update check... Feb 16 04:14:06 ispc maldet(1219087): {sigup} local signature set is version 2017022510908 Feb 16 04:14:06 ispc maldet(1219087): {sigup} could not download signature data from server, please try again later. Feb 16 04:14:09 ispc maldet(1219175): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 16 04:14:15 ispc maldet(1219175): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 16 04:14:16 ispc maldet(1219175): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 16 04:14:16 ispc maldet(1219175): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 16 04:14:17 ispc maldet(1219175): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 16 04:33:18 ispc maldet(1219175): {scan} file list completed in 1142s, found 62 files... Feb 16 04:33:19 ispc maldet(1219175): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 16 04:33:19 ispc maldet(1219175): {scan} scan of (62 files) in progress... Feb 16 04:33:20 ispc maldet(1219175): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 1150s Feb 16 04:33:21 ispc maldet(1219175): {scan} scan report saved, to view run: maldet --report 250216-0414.1219175 Feb 17 04:21:25 ispc maldet(1354372): {update} checking for available updates... Feb 17 04:21:25 ispc maldet(1354372): {update} could not download version file from server, please try again later. Feb 17 04:21:29 ispc maldet(1354448): {sigup} performing signature update check... Feb 17 04:21:30 ispc maldet(1354448): {sigup} local signature set is version 2017022510908 Feb 17 04:21:30 ispc maldet(1354448): {sigup} could not download signature data from server, please try again later. Feb 17 04:21:35 ispc maldet(1354534): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 17 04:21:41 ispc maldet(1354534): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 17 04:21:42 ispc maldet(1354534): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 17 04:21:42 ispc maldet(1354534): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 17 04:21:42 ispc maldet(1354534): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 17 04:33:42 ispc maldet(1354534): {scan} file list completed in 720s, found 59 files... Feb 17 04:33:42 ispc maldet(1354534): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 17 04:33:42 ispc maldet(1354534): {scan} scan of (59 files) in progress... Feb 17 04:33:43 ispc maldet(1354534): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 728s Feb 17 04:33:43 ispc maldet(1354534): {scan} scan report saved, to view run: maldet --report 250217-0421.1354534 Feb 18 04:24:16 ispc maldet(1490745): {update} checking for available updates... Feb 18 04:24:17 ispc maldet(1490745): {update} could not download version file from server, please try again later. Feb 18 04:24:21 ispc maldet(1490822): {sigup} performing signature update check... Feb 18 04:24:21 ispc maldet(1490822): {sigup} local signature set is version 2017022510908 Feb 18 04:24:22 ispc maldet(1490822): {sigup} could not download signature data from server, please try again later. Feb 18 04:24:26 ispc maldet(1490905): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 18 04:24:31 ispc maldet(1490905): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 18 04:24:31 ispc maldet(1490905): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 18 04:24:31 ispc maldet(1490905): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 18 04:24:32 ispc maldet(1490905): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 18 04:37:57 ispc maldet(1490905): {scan} file list completed in 805s, found 52 files... Feb 18 04:37:57 ispc maldet(1490905): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 18 04:37:57 ispc maldet(1490905): {scan} scan of (52 files) in progress... Feb 18 04:37:59 ispc maldet(1490905): {scan} scan completed on : files 52, malware hits 0, cleaned hits 0, time 812s Feb 18 04:37:59 ispc maldet(1490905): {scan} scan report saved, to view run: maldet --report 250218-0424.1490905 Feb 19 04:16:36 ispc maldet(1624435): {update} checking for available updates... Feb 19 04:16:37 ispc maldet(1624435): {update} could not download version file from server, please try again later. Feb 19 04:16:40 ispc maldet(1624514): {sigup} performing signature update check... Feb 19 04:16:41 ispc maldet(1624514): {sigup} local signature set is version 2017022510908 Feb 19 04:16:41 ispc maldet(1624514): {sigup} could not download signature data from server, please try again later. Feb 19 04:16:45 ispc maldet(1624595): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 19 04:16:49 ispc maldet(1624595): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 19 04:16:50 ispc maldet(1624595): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 19 04:16:50 ispc maldet(1624595): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 19 04:16:50 ispc maldet(1624595): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 19 04:33:53 ispc maldet(1624595): {scan} file list completed in 1022s, found 94 files... Feb 19 04:33:53 ispc maldet(1624595): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 19 04:33:53 ispc maldet(1624595): {scan} scan of (94 files) in progress... Feb 19 04:33:55 ispc maldet(1624595): {scan} scan completed on : files 94, malware hits 0, cleaned hits 0, time 1030s Feb 19 04:33:56 ispc maldet(1624595): {scan} scan report saved, to view run: maldet --report 250219-0416.1624595 Feb 20 04:15:28 ispc maldet(1756031): {update} checking for available updates... Feb 20 04:15:28 ispc maldet(1756031): {update} could not download version file from server, please try again later. Feb 20 04:15:31 ispc maldet(1756108): {sigup} performing signature update check... Feb 20 04:15:31 ispc maldet(1756108): {sigup} local signature set is version 2017022510908 Feb 20 04:15:32 ispc maldet(1756108): {sigup} could not download signature data from server, please try again later. Feb 20 04:15:36 ispc maldet(1756190): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 20 04:15:42 ispc maldet(1756190): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 20 04:15:42 ispc maldet(1756190): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 20 04:15:42 ispc maldet(1756190): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 20 04:15:42 ispc maldet(1756190): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 20 04:31:01 ispc maldet(1756190): {scan} file list completed in 919s, found 68 files... Feb 20 04:31:01 ispc maldet(1756190): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 20 04:31:02 ispc maldet(1756190): {scan} scan of (68 files) in progress... Feb 20 04:31:03 ispc maldet(1756190): {scan} scan completed on : files 68, malware hits 0, cleaned hits 0, time 927s Feb 20 04:31:04 ispc maldet(1756190): {scan} scan report saved, to view run: maldet --report 250220-0415.1756190 Feb 21 04:14:09 ispc maldet(1893937): {update} checking for available updates... Feb 21 04:14:09 ispc maldet(1893937): {update} could not download version file from server, please try again later. Feb 21 04:14:12 ispc maldet(1894014): {sigup} performing signature update check... Feb 21 04:14:13 ispc maldet(1894014): {sigup} local signature set is version 2017022510908 Feb 21 04:14:13 ispc maldet(1894014): {sigup} could not download signature data from server, please try again later. Feb 21 04:14:18 ispc maldet(1894099): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 21 04:14:22 ispc maldet(1894099): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 21 04:14:23 ispc maldet(1894099): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 21 04:14:23 ispc maldet(1894099): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 21 04:14:23 ispc maldet(1894099): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 21 04:33:06 ispc maldet(1894099): {scan} file list completed in 1123s, found 59 files... Feb 21 04:33:07 ispc maldet(1894099): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 21 04:33:07 ispc maldet(1894099): {scan} scan of (59 files) in progress... Feb 21 04:33:09 ispc maldet(1894099): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 1130s Feb 21 04:33:09 ispc maldet(1894099): {scan} scan report saved, to view run: maldet --report 250221-0414.1894099 Feb 22 04:23:26 ispc maldet(2023769): {update} checking for available updates... Feb 22 04:23:27 ispc maldet(2023769): {update} could not download version file from server, please try again later. Feb 22 04:23:31 ispc maldet(2023842): {sigup} performing signature update check... Feb 22 04:23:31 ispc maldet(2023842): {sigup} local signature set is version 2017022510908 Feb 22 04:23:32 ispc maldet(2023842): {sigup} could not download signature data from server, please try again later. Feb 22 04:23:36 ispc maldet(2023926): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 22 04:23:41 ispc maldet(2023926): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 22 04:23:41 ispc maldet(2023926): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 22 04:23:42 ispc maldet(2023926): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 22 04:23:42 ispc maldet(2023926): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 22 04:42:18 ispc maldet(2023926): {scan} file list completed in 1116s, found 66 files... Feb 22 04:42:19 ispc maldet(2023926): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 22 04:42:19 ispc maldet(2023926): {scan} scan of (66 files) in progress... Feb 22 04:42:22 ispc maldet(2023926): {scan} scan completed on : files 66, malware hits 0, cleaned hits 0, time 1125s Feb 22 04:42:22 ispc maldet(2023926): {scan} scan report saved, to view run: maldet --report 250222-0423.2023926 Feb 23 04:14:58 ispc maldet(2139339): {update} checking for available updates... Feb 23 04:14:59 ispc maldet(2139339): {update} could not download version file from server, please try again later. Feb 23 04:15:02 ispc maldet(2139417): {sigup} performing signature update check... Feb 23 04:15:03 ispc maldet(2139417): {sigup} local signature set is version 2017022510908 Feb 23 04:15:03 ispc maldet(2139417): {sigup} could not download signature data from server, please try again later. Feb 23 04:15:07 ispc maldet(2139556): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 23 04:15:11 ispc maldet(2139556): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 23 04:15:11 ispc maldet(2139556): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 23 04:15:11 ispc maldet(2139556): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 23 04:15:12 ispc maldet(2139556): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 23 04:35:37 ispc maldet(2139556): {scan} file list completed in 1226s, found 61 files... Feb 23 04:35:37 ispc maldet(2139556): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 23 04:35:38 ispc maldet(2139556): {scan} scan of (61 files) in progress... Feb 23 04:35:39 ispc maldet(2139556): {scan} scan completed on : files 61, malware hits 0, cleaned hits 0, time 1232s Feb 23 04:35:40 ispc maldet(2139556): {scan} scan report saved, to view run: maldet --report 250223-0415.2139556 Feb 24 04:10:18 ispc maldet(2262009): {update} checking for available updates... Feb 24 04:10:19 ispc maldet(2262009): {update} could not download version file from server, please try again later. Feb 24 04:10:23 ispc maldet(2262081): {sigup} performing signature update check... Feb 24 04:10:23 ispc maldet(2262081): {sigup} local signature set is version 2017022510908 Feb 24 04:10:24 ispc maldet(2262081): {sigup} could not download signature data from server, please try again later. Feb 24 04:10:28 ispc maldet(2262166): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 24 04:10:33 ispc maldet(2262166): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 24 04:10:33 ispc maldet(2262166): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 24 04:10:34 ispc maldet(2262166): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 24 04:10:34 ispc maldet(2262166): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 24 04:37:17 ispc maldet(2262166): {scan} file list completed in 1602s, found 54 files... Feb 24 04:37:17 ispc maldet(2262166): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 24 04:37:17 ispc maldet(2262166): {scan} scan of (54 files) in progress... Feb 24 04:37:20 ispc maldet(2262166): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 1610s Feb 24 04:37:20 ispc maldet(2262166): {scan} scan report saved, to view run: maldet --report 250224-0410.2262166 Feb 25 04:10:48 ispc maldet(2388311): {update} checking for available updates... Feb 25 04:10:48 ispc maldet(2388311): {update} could not download version file from server, please try again later. Feb 25 04:10:52 ispc maldet(2388384): {sigup} performing signature update check... Feb 25 04:10:52 ispc maldet(2388384): {sigup} local signature set is version 2017022510908 Feb 25 04:10:53 ispc maldet(2388384): {sigup} could not download signature data from server, please try again later. Feb 25 04:10:57 ispc maldet(2388471): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 25 04:11:03 ispc maldet(2388471): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 25 04:11:04 ispc maldet(2388471): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 25 04:11:04 ispc maldet(2388471): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 25 04:11:05 ispc maldet(2388471): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 25 04:37:02 ispc maldet(2388471): {scan} file list completed in 1557s, found 63 files... Feb 25 04:37:02 ispc maldet(2388471): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 25 04:37:02 ispc maldet(2388471): {scan} scan of (63 files) in progress... Feb 25 04:37:05 ispc maldet(2388471): {scan} scan completed on : files 63, malware hits 0, cleaned hits 0, time 1567s Feb 25 04:37:05 ispc maldet(2388471): {scan} scan report saved, to view run: maldet --report 250225-0410.2388471 Feb 26 04:12:18 ispc maldet(2517221): {update} checking for available updates... Feb 26 04:12:18 ispc maldet(2517221): {update} could not download version file from server, please try again later. Feb 26 04:12:22 ispc maldet(2517299): {sigup} performing signature update check... Feb 26 04:12:23 ispc maldet(2517299): {sigup} local signature set is version 2017022510908 Feb 26 04:12:23 ispc maldet(2517299): {sigup} could not download signature data from server, please try again later. Feb 26 04:12:27 ispc maldet(2517381): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 26 04:12:32 ispc maldet(2517381): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 26 04:12:32 ispc maldet(2517381): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 26 04:12:33 ispc maldet(2517381): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 26 04:12:33 ispc maldet(2517381): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 26 04:28:54 ispc maldet(2517381): {scan} file list completed in 980s, found 62 files... Feb 26 04:28:54 ispc maldet(2517381): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 26 04:28:54 ispc maldet(2517381): {scan} scan of (62 files) in progress... Feb 26 04:28:57 ispc maldet(2517381): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 988s Feb 26 04:28:57 ispc maldet(2517381): {scan} scan report saved, to view run: maldet --report 250226-0412.2517381 Feb 27 04:11:05 ispc maldet(2648977): {update} checking for available updates... Feb 27 04:11:06 ispc maldet(2648977): {update} could not download version file from server, please try again later. Feb 27 04:11:10 ispc maldet(2649056): {sigup} performing signature update check... Feb 27 04:11:11 ispc maldet(2649056): {sigup} local signature set is version 2017022510908 Feb 27 04:11:11 ispc maldet(2649056): {sigup} could not download signature data from server, please try again later. Feb 27 04:11:16 ispc maldet(2649142): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 27 04:11:21 ispc maldet(2649142): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 27 04:11:22 ispc maldet(2649142): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 27 04:11:22 ispc maldet(2649142): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 27 04:11:22 ispc maldet(2649142): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 27 04:35:16 ispc maldet(2649142): {scan} file list completed in 1434s, found 144 files... Feb 27 04:35:17 ispc maldet(2649142): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 27 04:35:17 ispc maldet(2649142): {scan} scan of (144 files) in progress... Feb 27 04:35:19 ispc maldet(2649142): {scan} scan completed on : files 144, malware hits 0, cleaned hits 0, time 1442s Feb 27 04:35:19 ispc maldet(2649142): {scan} scan report saved, to view run: maldet --report 250227-0411.2649142 Feb 28 04:14:46 ispc maldet(2779031): {update} checking for available updates... Feb 28 04:14:46 ispc maldet(2779031): {update} could not download version file from server, please try again later. Feb 28 04:14:50 ispc maldet(2779108): {sigup} performing signature update check... Feb 28 04:14:50 ispc maldet(2779108): {sigup} local signature set is version 2017022510908 Feb 28 04:14:50 ispc maldet(2779108): {sigup} could not download signature data from server, please try again later. Feb 28 04:14:54 ispc maldet(2779193): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 28 04:15:01 ispc maldet(2779193): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Feb 28 04:15:01 ispc maldet(2779193): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 28 04:15:02 ispc maldet(2779193): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 28 04:15:02 ispc maldet(2779193): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 28 04:31:14 ispc maldet(2779193): {scan} file list completed in 972s, found 60 files... Feb 28 04:31:14 ispc maldet(2779193): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Feb 28 04:31:15 ispc maldet(2779193): {scan} scan of (60 files) in progress... Feb 28 04:31:15 ispc maldet(2779193): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 980s Feb 28 04:31:16 ispc maldet(2779193): {scan} scan report saved, to view run: maldet --report 250228-0414.2779193 Mar 01 04:24:34 ispc maldet(2896832): {update} checking for available updates... Mar 01 04:24:34 ispc maldet(2896832): {update} could not download version file from server, please try again later. Mar 01 04:24:38 ispc maldet(2896911): {sigup} performing signature update check... Mar 01 04:24:38 ispc maldet(2896911): {sigup} local signature set is version 2017022510908 Mar 01 04:24:39 ispc maldet(2896911): {sigup} could not download signature data from server, please try again later. Mar 01 04:24:44 ispc maldet(2896996): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 01 04:24:50 ispc maldet(2896996): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 01 04:24:50 ispc maldet(2896996): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 01 04:24:50 ispc maldet(2896996): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 01 04:24:51 ispc maldet(2896996): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 01 04:47:32 ispc maldet(2896996): {scan} file list completed in 1362s, found 54 files... Mar 01 04:47:32 ispc maldet(2896996): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 01 04:47:32 ispc maldet(2896996): {scan} scan of (54 files) in progress... Mar 01 04:47:34 ispc maldet(2896996): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 1370s Mar 01 04:47:34 ispc maldet(2896996): {scan} scan report saved, to view run: maldet --report 250301-0424.2896996 Mar 02 04:11:52 ispc maldet(3009229): {update} checking for available updates... Mar 02 04:11:53 ispc maldet(3009229): {update} could not download version file from server, please try again later. Mar 02 04:11:56 ispc maldet(3009301): {sigup} performing signature update check... Mar 02 04:11:57 ispc maldet(3009301): {sigup} local signature set is version 2017022510908 Mar 02 04:11:57 ispc maldet(3009301): {sigup} could not download signature data from server, please try again later. Mar 02 04:12:01 ispc maldet(3009389): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 02 04:12:08 ispc maldet(3009389): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 02 04:12:08 ispc maldet(3009389): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 02 04:12:08 ispc maldet(3009389): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 02 04:12:09 ispc maldet(3009389): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 02 04:32:50 ispc maldet(3009389): {scan} file list completed in 1242s, found 53 files... Mar 02 04:32:50 ispc maldet(3009389): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 02 04:32:50 ispc maldet(3009389): {scan} scan of (53 files) in progress... Mar 02 04:32:53 ispc maldet(3009389): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 1250s Mar 02 04:32:53 ispc maldet(3009389): {scan} scan report saved, to view run: maldet --report 250302-0411.3009389 Mar 03 04:10:29 ispc maldet(3121699): {update} checking for available updates... Mar 03 04:10:29 ispc maldet(3121699): {update} could not download version file from server, please try again later. Mar 03 04:10:33 ispc maldet(3121776): {sigup} performing signature update check... Mar 03 04:10:33 ispc maldet(3121776): {sigup} local signature set is version 2017022510908 Mar 03 04:10:34 ispc maldet(3121776): {sigup} could not download signature data from server, please try again later. Mar 03 04:10:38 ispc maldet(3121857): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 03 04:10:43 ispc maldet(3121857): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 03 04:10:43 ispc maldet(3121857): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 03 04:10:43 ispc maldet(3121857): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 03 04:10:44 ispc maldet(3121857): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 03 04:25:59 ispc maldet(3121857): {scan} file list completed in 916s, found 50 files... Mar 03 04:25:59 ispc maldet(3121857): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 03 04:26:00 ispc maldet(3121857): {scan} scan of (50 files) in progress... Mar 03 04:26:02 ispc maldet(3121857): {scan} scan completed on : files 50, malware hits 0, cleaned hits 0, time 922s Mar 03 04:26:02 ispc maldet(3121857): {scan} scan report saved, to view run: maldet --report 250303-0410.3121857 Mar 04 04:19:12 ispc maldet(3234067): {update} checking for available updates... Mar 04 04:19:13 ispc maldet(3234067): {update} could not download version file from server, please try again later. Mar 04 04:19:17 ispc maldet(3234143): {sigup} performing signature update check... Mar 04 04:19:17 ispc maldet(3234143): {sigup} local signature set is version 2017022510908 Mar 04 04:19:18 ispc maldet(3234143): {sigup} could not download signature data from server, please try again later. Mar 04 04:19:22 ispc maldet(3234224): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 04 04:19:27 ispc maldet(3234224): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 04 04:19:27 ispc maldet(3234224): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 04 04:19:27 ispc maldet(3234224): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 04 04:19:27 ispc maldet(3234224): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 04 04:38:56 ispc maldet(3234224): {scan} file list completed in 1169s, found 59 files... Mar 04 04:38:56 ispc maldet(3234224): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 04 04:38:57 ispc maldet(3234224): {scan} scan of (59 files) in progress... Mar 04 04:38:59 ispc maldet(3234224): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 1176s Mar 04 04:38:59 ispc maldet(3234224): {scan} scan report saved, to view run: maldet --report 250304-0419.3234224 Mar 05 04:10:52 ispc maldet(3345750): {update} checking for available updates... Mar 05 04:10:52 ispc maldet(3345750): {update} could not download version file from server, please try again later. Mar 05 04:10:56 ispc maldet(3345823): {sigup} performing signature update check... Mar 05 04:10:57 ispc maldet(3345823): {sigup} local signature set is version 2017022510908 Mar 05 04:10:57 ispc maldet(3345823): {sigup} could not download signature data from server, please try again later. Mar 05 04:11:01 ispc maldet(3345908): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 05 04:11:07 ispc maldet(3345908): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 05 04:11:07 ispc maldet(3345908): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 05 04:11:08 ispc maldet(3345908): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 05 04:11:08 ispc maldet(3345908): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 05 04:30:59 ispc maldet(3345908): {scan} file list completed in 1190s, found 59 files... Mar 05 04:30:59 ispc maldet(3345908): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 05 04:30:59 ispc maldet(3345908): {scan} scan of (59 files) in progress... Mar 05 04:31:01 ispc maldet(3345908): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 1199s Mar 05 04:31:01 ispc maldet(3345908): {scan} scan report saved, to view run: maldet --report 250305-0410.3345908 Mar 06 04:09:14 ispc maldet(3465561): {update} checking for available updates... Mar 06 04:09:14 ispc maldet(3465561): {update} could not download version file from server, please try again later. Mar 06 04:09:18 ispc maldet(3465639): {sigup} performing signature update check... Mar 06 04:09:18 ispc maldet(3465639): {sigup} local signature set is version 2017022510908 Mar 06 04:09:19 ispc maldet(3465639): {sigup} could not download signature data from server, please try again later. Mar 06 04:09:23 ispc maldet(3465722): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 06 04:09:29 ispc maldet(3465722): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 06 04:09:29 ispc maldet(3465722): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 06 04:09:30 ispc maldet(3465722): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 06 04:09:30 ispc maldet(3465722): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 06 04:27:12 ispc maldet(3465722): {scan} file list completed in 1061s, found 59 files... Mar 06 04:27:12 ispc maldet(3465722): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 06 04:27:12 ispc maldet(3465722): {scan} scan of (59 files) in progress... Mar 06 04:27:13 ispc maldet(3465722): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 1069s Mar 06 04:27:13 ispc maldet(3465722): {scan} scan report saved, to view run: maldet --report 250306-0409.3465722 Mar 07 04:10:22 ispc maldet(3593753): {update} checking for available updates... Mar 07 04:10:22 ispc maldet(3593753): {update} could not download version file from server, please try again later. Mar 07 04:10:26 ispc maldet(3593831): {sigup} performing signature update check... Mar 07 04:10:27 ispc maldet(3593831): {sigup} local signature set is version 2017022510908 Mar 07 04:10:27 ispc maldet(3593831): {sigup} could not download signature data from server, please try again later. Mar 07 04:10:31 ispc maldet(3593914): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 07 04:10:37 ispc maldet(3593914): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 07 04:10:37 ispc maldet(3593914): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 07 04:10:37 ispc maldet(3593914): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 07 04:10:38 ispc maldet(3593914): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 07 04:34:54 ispc maldet(3593914): {scan} file list completed in 1456s, found 60 files... Mar 07 04:34:54 ispc maldet(3593914): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 07 04:34:54 ispc maldet(3593914): {scan} scan of (60 files) in progress... Mar 07 04:34:57 ispc maldet(3593914): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 1465s Mar 07 04:34:58 ispc maldet(3593914): {scan} scan report saved, to view run: maldet --report 250307-0410.3593914 Mar 08 04:24:40 ispc maldet(3726740): {update} checking for available updates... Mar 08 04:24:41 ispc maldet(3726740): {update} could not download version file from server, please try again later. Mar 08 04:24:45 ispc maldet(3726812): {sigup} performing signature update check... Mar 08 04:24:45 ispc maldet(3726812): {sigup} local signature set is version 2017022510908 Mar 08 04:24:45 ispc maldet(3726812): {sigup} could not download signature data from server, please try again later. Mar 08 04:24:49 ispc maldet(3726906): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 08 04:24:56 ispc maldet(3726906): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 08 04:24:56 ispc maldet(3726906): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 08 04:24:56 ispc maldet(3726906): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 08 04:24:56 ispc maldet(3726906): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 08 05:54:24 ispc maldet(3726906): {scan} file list completed in 5368s, found 53 files... Mar 08 05:54:24 ispc maldet(3726906): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 08 05:54:24 ispc maldet(3726906): {scan} scan of (53 files) in progress... Mar 08 05:54:26 ispc maldet(3726906): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 5375s Mar 08 05:54:26 ispc maldet(3726906): {scan} scan report saved, to view run: maldet --report 250308-0424.3726906 Mar 09 04:13:17 ispc maldet(3858722): {update} checking for available updates... Mar 09 04:13:18 ispc maldet(3858722): {update} could not download version file from server, please try again later. Mar 09 04:13:22 ispc maldet(3858794): {sigup} performing signature update check... Mar 09 04:13:22 ispc maldet(3858794): {sigup} local signature set is version 2017022510908 Mar 09 04:13:23 ispc maldet(3858794): {sigup} could not download signature data from server, please try again later. Mar 09 04:13:27 ispc maldet(3858878): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 09 04:13:33 ispc maldet(3858878): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 09 04:13:33 ispc maldet(3858878): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 09 04:13:33 ispc maldet(3858878): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 09 04:13:34 ispc maldet(3858878): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 09 05:50:07 ispc maldet(3858878): {scan} file list completed in 5792s, found 54 files... Mar 09 05:50:07 ispc maldet(3858878): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 09 05:50:08 ispc maldet(3858878): {scan} scan of (54 files) in progress... Mar 09 05:50:11 ispc maldet(3858878): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 5803s Mar 09 05:50:11 ispc maldet(3858878): {scan} scan report saved, to view run: maldet --report 250309-0413.3858878 Mar 10 04:09:31 ispc maldet(3988703): {update} checking for available updates... Mar 10 04:09:32 ispc maldet(3988703): {update} could not download version file from server, please try again later. Mar 10 04:09:36 ispc maldet(3988779): {sigup} performing signature update check... Mar 10 04:09:36 ispc maldet(3988779): {sigup} local signature set is version 2017022510908 Mar 10 04:09:37 ispc maldet(3988779): {sigup} could not download signature data from server, please try again later. Mar 10 04:09:41 ispc maldet(3988864): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 10 04:09:44 ispc maldet(3988864): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 10 04:09:45 ispc maldet(3988864): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 10 04:09:45 ispc maldet(3988864): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 10 04:09:45 ispc maldet(3988864): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 10 05:43:43 ispc maldet(3988864): {scan} file list completed in 5637s, found 57 files... Mar 10 05:43:43 ispc maldet(3988864): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 10 05:43:43 ispc maldet(3988864): {scan} scan of (57 files) in progress... Mar 10 05:43:47 ispc maldet(3988864): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 5645s Mar 10 05:43:47 ispc maldet(3988864): {scan} scan report saved, to view run: maldet --report 250310-0409.3988864 Mar 11 04:09:01 ispc maldet(4121344): {update} checking for available updates... Mar 11 04:09:01 ispc maldet(4121344): {update} could not download version file from server, please try again later. Mar 11 04:09:06 ispc maldet(4121431): {sigup} performing signature update check... Mar 11 04:09:06 ispc maldet(4121431): {sigup} local signature set is version 2017022510908 Mar 11 04:09:06 ispc maldet(4121431): {sigup} could not download signature data from server, please try again later. Mar 11 04:09:11 ispc maldet(4121525): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 11 04:09:16 ispc maldet(4121525): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 11 04:09:17 ispc maldet(4121525): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 11 04:09:17 ispc maldet(4121525): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 11 04:09:17 ispc maldet(4121525): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 11 05:38:44 ispc maldet(4121525): {scan} file list completed in 5366s, found 58 files... Mar 11 05:38:44 ispc maldet(4121525): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 11 05:38:44 ispc maldet(4121525): {scan} scan of (58 files) in progress... Mar 11 05:38:46 ispc maldet(4121525): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 5374s Mar 11 05:38:46 ispc maldet(4121525): {scan} scan report saved, to view run: maldet --report 250311-0409.4121525 Mar 12 04:12:57 ispc maldet(87185): {update} checking for available updates... Mar 12 04:12:58 ispc maldet(87185): {update} could not download version file from server, please try again later. Mar 12 04:13:01 ispc maldet(87259): {sigup} performing signature update check... Mar 12 04:13:01 ispc maldet(87259): {sigup} local signature set is version 2017022510908 Mar 12 04:13:02 ispc maldet(87259): {sigup} could not download signature data from server, please try again later. Mar 12 04:13:06 ispc maldet(87355): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 12 04:13:10 ispc maldet(87355): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 12 04:13:10 ispc maldet(87355): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 12 04:13:11 ispc maldet(87355): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 12 04:13:11 ispc maldet(87355): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 12 05:46:31 ispc maldet(87355): {scan} file list completed in 5599s, found 54 files... Mar 12 05:46:31 ispc maldet(87355): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 12 05:46:31 ispc maldet(87355): {scan} scan of (54 files) in progress... Mar 12 05:46:34 ispc maldet(87355): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 5607s Mar 12 05:46:34 ispc maldet(87355): {scan} scan report saved, to view run: maldet --report 250312-0413.87355 Mar 13 04:21:38 ispc maldet(225691): {update} checking for available updates... Mar 13 04:21:39 ispc maldet(225691): {update} could not download version file from server, please try again later. Mar 13 04:21:43 ispc maldet(225767): {sigup} performing signature update check... Mar 13 04:21:43 ispc maldet(225767): {sigup} local signature set is version 2017022510908 Mar 13 04:21:43 ispc maldet(225767): {sigup} could not download signature data from server, please try again later. Mar 13 04:21:48 ispc maldet(225855): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 13 04:21:51 ispc maldet(225855): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 13 04:21:52 ispc maldet(225855): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 13 04:21:52 ispc maldet(225855): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 13 04:21:53 ispc maldet(225855): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 13 06:04:45 ispc maldet(225855): {scan} file list completed in 6172s, found 59 files... Mar 13 06:04:46 ispc maldet(225855): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 13 06:04:46 ispc maldet(225855): {scan} scan of (59 files) in progress... Mar 13 06:04:49 ispc maldet(225855): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 6180s Mar 13 06:04:49 ispc maldet(225855): {scan} scan report saved, to view run: maldet --report 250313-0421.225855 Mar 14 04:15:49 ispc maldet(368456): {update} checking for available updates... Mar 14 04:15:49 ispc maldet(368456): {update} could not download version file from server, please try again later. Mar 14 04:15:54 ispc maldet(368528): {sigup} performing signature update check... Mar 14 04:15:55 ispc maldet(368528): {sigup} local signature set is version 2017022510908 Mar 14 04:15:55 ispc maldet(368528): {sigup} could not download signature data from server, please try again later. Mar 14 04:16:00 ispc maldet(368611): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 14 04:16:07 ispc maldet(368611): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 14 04:16:07 ispc maldet(368611): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 14 04:16:07 ispc maldet(368611): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 14 04:16:08 ispc maldet(368611): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 14 06:01:08 ispc maldet(368611): {scan} file list completed in 6300s, found 58 files... Mar 14 06:01:08 ispc maldet(368611): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 14 06:01:08 ispc maldet(368611): {scan} scan of (58 files) in progress... Mar 14 06:01:09 ispc maldet(368611): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 6309s Mar 14 06:01:09 ispc maldet(368611): {scan} scan report saved, to view run: maldet --report 250314-0415.368611 Mar 15 04:15:02 ispc maldet(514396): {update} checking for available updates... Mar 15 04:15:02 ispc maldet(514396): {update} could not download version file from server, please try again later. Mar 15 04:15:06 ispc maldet(514508): {sigup} performing signature update check... Mar 15 04:15:06 ispc maldet(514508): {sigup} local signature set is version 2017022510908 Mar 15 04:15:07 ispc maldet(514508): {sigup} could not download signature data from server, please try again later. Mar 15 04:15:11 ispc maldet(514635): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 15 04:15:17 ispc maldet(514635): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 15 04:15:18 ispc maldet(514635): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 15 04:15:18 ispc maldet(514635): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 15 04:15:18 ispc maldet(514635): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 15 05:38:20 ispc maldet(514635): {scan} file list completed in 4982s, found 63 files... Mar 15 05:38:21 ispc maldet(514635): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 15 05:38:21 ispc maldet(514635): {scan} scan of (63 files) in progress... Mar 15 05:38:23 ispc maldet(514635): {scan} scan completed on : files 63, malware hits 0, cleaned hits 0, time 4992s Mar 15 05:38:24 ispc maldet(514635): {scan} scan report saved, to view run: maldet --report 250315-0415.514635 Mar 16 04:15:10 ispc maldet(658358): {update} checking for available updates... Mar 16 04:15:11 ispc maldet(658358): {update} could not download version file from server, please try again later. Mar 16 04:15:16 ispc maldet(658440): {sigup} performing signature update check... Mar 16 04:15:16 ispc maldet(658440): {sigup} local signature set is version 2017022510908 Mar 16 04:15:16 ispc maldet(658440): {sigup} could not download signature data from server, please try again later. Mar 16 04:15:20 ispc maldet(658523): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 16 04:15:27 ispc maldet(658523): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 16 04:15:27 ispc maldet(658523): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 16 04:15:27 ispc maldet(658523): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 16 04:15:28 ispc maldet(658523): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 16 05:57:24 ispc maldet(658523): {scan} file list completed in 6115s, found 64 files... Mar 16 05:57:24 ispc maldet(658523): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 16 05:57:25 ispc maldet(658523): {scan} scan of (64 files) in progress... Mar 16 05:57:27 ispc maldet(658523): {scan} scan completed on : files 64, malware hits 0, cleaned hits 0, time 6125s Mar 16 05:57:27 ispc maldet(658523): {scan} scan report saved, to view run: maldet --report 250316-0415.658523 Mar 17 04:12:02 ispc maldet(805005): {update} checking for available updates... Mar 17 04:12:02 ispc maldet(805005): {update} could not download version file from server, please try again later. Mar 17 04:12:06 ispc maldet(805088): {sigup} performing signature update check... Mar 17 04:12:06 ispc maldet(805088): {sigup} local signature set is version 2017022510908 Mar 17 04:12:06 ispc maldet(805088): {sigup} could not download signature data from server, please try again later. Mar 17 04:12:11 ispc maldet(805174): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 17 04:12:17 ispc maldet(805174): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 17 04:12:17 ispc maldet(805174): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 17 04:12:17 ispc maldet(805174): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 17 04:12:17 ispc maldet(805174): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 17 05:48:35 ispc maldet(805174): {scan} file list completed in 5777s, found 69 files... Mar 17 05:48:35 ispc maldet(805174): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 17 05:48:36 ispc maldet(805174): {scan} scan of (69 files) in progress... Mar 17 05:48:38 ispc maldet(805174): {scan} scan completed on : files 69, malware hits 0, cleaned hits 0, time 5786s Mar 17 05:48:38 ispc maldet(805174): {scan} scan report saved, to view run: maldet --report 250317-0412.805174 Mar 18 04:08:58 ispc maldet(935676): {update} checking for available updates... Mar 18 04:08:58 ispc maldet(935676): {update} could not download version file from server, please try again later. Mar 18 04:09:01 ispc maldet(935753): {sigup} performing signature update check... Mar 18 04:09:01 ispc maldet(935753): {sigup} local signature set is version 2017022510908 Mar 18 04:09:01 ispc maldet(935753): {sigup} could not download signature data from server, please try again later. Mar 18 04:09:06 ispc maldet(935860): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 18 04:09:11 ispc maldet(935860): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 18 04:09:11 ispc maldet(935860): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 18 04:09:12 ispc maldet(935860): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 18 04:09:12 ispc maldet(935860): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 18 05:59:15 ispc maldet(935860): {scan} file list completed in 6602s, found 61 files... Mar 18 05:59:15 ispc maldet(935860): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 18 05:59:15 ispc maldet(935860): {scan} scan of (61 files) in progress... Mar 18 05:59:18 ispc maldet(935860): {scan} scan completed on : files 61, malware hits 0, cleaned hits 0, time 6611s Mar 18 05:59:18 ispc maldet(935860): {scan} scan report saved, to view run: maldet --report 250318-0409.935860 Mar 19 04:12:28 ispc maldet(1070519): {update} checking for available updates... Mar 19 04:12:28 ispc maldet(1070519): {update} could not download version file from server, please try again later. Mar 19 04:12:32 ispc maldet(1070596): {sigup} performing signature update check... Mar 19 04:12:32 ispc maldet(1070596): {sigup} local signature set is version 2017022510908 Mar 19 04:12:33 ispc maldet(1070596): {sigup} could not download signature data from server, please try again later. Mar 19 04:12:37 ispc maldet(1070681): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 19 04:12:42 ispc maldet(1070681): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 19 04:12:42 ispc maldet(1070681): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 19 04:12:42 ispc maldet(1070681): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 19 04:12:43 ispc maldet(1070681): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 19 05:39:48 ispc maldet(1070681): {scan} file list completed in 5226s, found 115 files... Mar 19 05:39:48 ispc maldet(1070681): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 19 05:39:48 ispc maldet(1070681): {scan} scan of (115 files) in progress... Mar 19 05:39:50 ispc maldet(1070681): {scan} scan completed on : files 115, malware hits 0, cleaned hits 0, time 5232s Mar 19 05:39:50 ispc maldet(1070681): {scan} scan report saved, to view run: maldet --report 250319-0412.1070681 Mar 20 04:13:20 ispc maldet(1219590): {update} checking for available updates... Mar 20 04:13:20 ispc maldet(1219590): {update} could not download version file from server, please try again later. Mar 20 04:13:24 ispc maldet(1219668): {sigup} performing signature update check... Mar 20 04:13:25 ispc maldet(1219668): {sigup} local signature set is version 2017022510908 Mar 20 04:13:25 ispc maldet(1219668): {sigup} could not download signature data from server, please try again later. Mar 20 04:13:30 ispc maldet(1219756): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 20 04:13:35 ispc maldet(1219756): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 20 04:13:36 ispc maldet(1219756): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 20 04:13:36 ispc maldet(1219756): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 20 04:13:36 ispc maldet(1219756): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 20 06:15:25 ispc maldet(1219756): {scan} file list completed in 7308s, found 97 files... Mar 20 06:15:25 ispc maldet(1219756): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 20 06:15:25 ispc maldet(1219756): {scan} scan of (97 files) in progress... Mar 20 06:15:28 ispc maldet(1219756): {scan} scan completed on : files 97, malware hits 0, cleaned hits 0, time 7317s Mar 20 06:15:28 ispc maldet(1219756): {scan} scan report saved, to view run: maldet --report 250320-0413.1219756 Mar 21 04:12:25 ispc maldet(1380266): {update} checking for available updates... Mar 21 04:12:25 ispc maldet(1380266): {update} could not download version file from server, please try again later. Mar 21 04:12:29 ispc maldet(1380340): {sigup} performing signature update check... Mar 21 04:12:30 ispc maldet(1380340): {sigup} local signature set is version 2017022510908 Mar 21 04:12:30 ispc maldet(1380340): {sigup} could not download signature data from server, please try again later. Mar 21 04:12:35 ispc maldet(1380427): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 21 04:12:41 ispc maldet(1380427): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 21 04:12:41 ispc maldet(1380427): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 21 04:12:41 ispc maldet(1380427): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 21 04:12:42 ispc maldet(1380427): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 21 05:42:41 ispc maldet(1380427): {scan} file list completed in 5399s, found 58 files... Mar 21 05:42:41 ispc maldet(1380427): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 21 05:42:41 ispc maldet(1380427): {scan} scan of (58 files) in progress... Mar 21 05:42:44 ispc maldet(1380427): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 5408s Mar 21 05:42:44 ispc maldet(1380427): {scan} scan report saved, to view run: maldet --report 250321-0412.1380427 Mar 22 04:12:46 ispc maldet(1520696): {update} checking for available updates... Mar 22 04:12:47 ispc maldet(1520696): {update} could not download version file from server, please try again later. Mar 22 04:12:51 ispc maldet(1520769): {sigup} performing signature update check... Mar 22 04:12:52 ispc maldet(1520769): {sigup} local signature set is version 2017022510908 Mar 22 04:12:52 ispc maldet(1520769): {sigup} could not download signature data from server, please try again later. Mar 22 04:12:56 ispc maldet(1520854): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 22 04:13:01 ispc maldet(1520854): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 22 04:13:01 ispc maldet(1520854): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 22 04:13:01 ispc maldet(1520854): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 22 04:13:02 ispc maldet(1520854): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 22 05:56:25 ispc maldet(1520854): {scan} file list completed in 6203s, found 49 files... Mar 22 05:56:26 ispc maldet(1520854): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 22 05:56:26 ispc maldet(1520854): {scan} scan of (49 files) in progress... Mar 22 05:56:28 ispc maldet(1520854): {scan} scan completed on : files 49, malware hits 0, cleaned hits 0, time 6211s Mar 22 05:56:28 ispc maldet(1520854): {scan} scan report saved, to view run: maldet --report 250322-0412.1520854 Mar 23 04:14:35 ispc maldet(1661279): {update} checking for available updates... Mar 23 04:14:35 ispc maldet(1661279): {update} could not download version file from server, please try again later. Mar 23 04:14:40 ispc maldet(1661357): {sigup} performing signature update check... Mar 23 04:14:40 ispc maldet(1661357): {sigup} local signature set is version 2017022510908 Mar 23 04:14:41 ispc maldet(1661357): {sigup} could not download signature data from server, please try again later. Mar 23 04:14:45 ispc maldet(1661442): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 23 04:14:50 ispc maldet(1661442): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 23 04:14:50 ispc maldet(1661442): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 23 04:14:50 ispc maldet(1661442): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 23 04:14:51 ispc maldet(1661442): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 23 05:48:40 ispc maldet(1661442): {scan} file list completed in 5629s, found 56 files... Mar 23 05:48:40 ispc maldet(1661442): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 23 05:48:40 ispc maldet(1661442): {scan} scan of (56 files) in progress... Mar 23 05:48:43 ispc maldet(1661442): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 5637s Mar 23 05:48:43 ispc maldet(1661442): {scan} scan report saved, to view run: maldet --report 250323-0414.1661442 Mar 24 04:10:06 ispc maldet(1796492): {update} checking for available updates... Mar 24 04:10:06 ispc maldet(1796492): {update} could not download version file from server, please try again later. Mar 24 04:10:10 ispc maldet(1796630): {sigup} performing signature update check... Mar 24 04:10:10 ispc maldet(1796630): {sigup} local signature set is version 2017022510908 Mar 24 04:10:10 ispc maldet(1796630): {sigup} could not download signature data from server, please try again later. Mar 24 04:10:15 ispc maldet(1796714): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 24 04:10:22 ispc maldet(1796714): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 24 04:10:22 ispc maldet(1796714): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 24 04:10:22 ispc maldet(1796714): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 24 04:10:23 ispc maldet(1796714): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 24 05:46:48 ispc maldet(1796714): {scan} file list completed in 5785s, found 50 files... Mar 24 05:46:48 ispc maldet(1796714): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 24 05:46:48 ispc maldet(1796714): {scan} scan of (50 files) in progress... Mar 24 05:46:52 ispc maldet(1796714): {scan} scan completed on : files 50, malware hits 0, cleaned hits 0, time 5795s Mar 24 05:46:52 ispc maldet(1796714): {scan} scan report saved, to view run: maldet --report 250324-0410.1796714 Mar 25 04:19:19 ispc maldet(1915983): {update} checking for available updates... Mar 25 04:19:19 ispc maldet(1915983): {update} could not download version file from server, please try again later. Mar 25 04:19:24 ispc maldet(1916062): {sigup} performing signature update check... Mar 25 04:19:24 ispc maldet(1916062): {sigup} local signature set is version 2017022510908 Mar 25 04:19:25 ispc maldet(1916062): {sigup} could not download signature data from server, please try again later. Mar 25 04:19:29 ispc maldet(1916143): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 25 04:19:35 ispc maldet(1916143): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 25 04:19:36 ispc maldet(1916143): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 25 04:19:36 ispc maldet(1916143): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 25 04:19:37 ispc maldet(1916143): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 25 06:20:23 ispc maldet(1916143): {scan} file list completed in 7247s, found 53 files... Mar 25 06:20:24 ispc maldet(1916143): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 25 06:20:24 ispc maldet(1916143): {scan} scan of (53 files) in progress... Mar 25 06:20:27 ispc maldet(1916143): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 7257s Mar 25 06:20:27 ispc maldet(1916143): {scan} scan report saved, to view run: maldet --report 250325-0419.1916143 Mar 26 04:09:24 ispc maldet(2030991): {update} checking for available updates... Mar 26 04:09:25 ispc maldet(2030991): {update} could not download version file from server, please try again later. Mar 26 04:09:28 ispc maldet(2031067): {sigup} performing signature update check... Mar 26 04:09:29 ispc maldet(2031067): {sigup} local signature set is version 2017022510908 Mar 26 04:09:29 ispc maldet(2031067): {sigup} could not download signature data from server, please try again later. Mar 26 04:09:34 ispc maldet(2031148): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 26 04:09:41 ispc maldet(2031148): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 26 04:09:41 ispc maldet(2031148): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 26 04:09:41 ispc maldet(2031148): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 26 04:09:42 ispc maldet(2031148): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 26 06:09:19 ispc maldet(2031148): {scan} file list completed in 7176s, found 46 files... Mar 26 06:09:19 ispc maldet(2031148): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 26 06:09:20 ispc maldet(2031148): {scan} scan of (46 files) in progress... Mar 26 06:09:21 ispc maldet(2031148): {scan} scan completed on : files 46, malware hits 0, cleaned hits 0, time 7186s Mar 26 06:09:21 ispc maldet(2031148): {scan} scan report saved, to view run: maldet --report 250326-0409.2031148 Mar 27 04:09:06 ispc maldet(2150276): {update} checking for available updates... Mar 27 04:09:07 ispc maldet(2150276): {update} could not download version file from server, please try again later. Mar 27 04:09:11 ispc maldet(2150353): {sigup} performing signature update check... Mar 27 04:09:12 ispc maldet(2150353): {sigup} local signature set is version 2017022510908 Mar 27 04:09:12 ispc maldet(2150353): {sigup} could not download signature data from server, please try again later. Mar 27 04:09:17 ispc maldet(2150437): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 27 04:09:22 ispc maldet(2150437): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 27 04:09:22 ispc maldet(2150437): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 27 04:09:22 ispc maldet(2150437): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 27 04:09:23 ispc maldet(2150437): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 27 06:04:09 ispc maldet(2150437): {scan} file list completed in 6887s, found 230 files... Mar 27 06:04:10 ispc maldet(2150437): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 27 06:04:10 ispc maldet(2150437): {scan} scan of (230 files) in progress... Mar 27 06:04:12 ispc maldet(2150437): {scan} scan completed on : files 230, malware hits 0, cleaned hits 0, time 6894s Mar 27 06:04:12 ispc maldet(2150437): {scan} scan report saved, to view run: maldet --report 250327-0409.2150437 Mar 28 04:10:43 ispc maldet(2283097): {update} checking for available updates... Mar 28 04:10:44 ispc maldet(2283097): {update} could not download version file from server, please try again later. Mar 28 04:10:48 ispc maldet(2283171): {sigup} performing signature update check... Mar 28 04:10:48 ispc maldet(2283171): {sigup} local signature set is version 2017022510908 Mar 28 04:10:48 ispc maldet(2283171): {sigup} could not download signature data from server, please try again later. Mar 28 04:10:48 ispc maldet(2283255): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 28 04:10:53 ispc maldet(2283255): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 28 04:10:53 ispc maldet(2283255): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 28 04:10:53 ispc maldet(2283255): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 28 04:10:54 ispc maldet(2283255): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 28 06:06:37 ispc maldet(2283255): {scan} file list completed in 6942s, found 56 files... Mar 28 06:06:37 ispc maldet(2283255): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 28 06:06:37 ispc maldet(2283255): {scan} scan of (56 files) in progress... Mar 28 06:06:40 ispc maldet(2283255): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 6951s Mar 28 06:06:40 ispc maldet(2283255): {scan} scan report saved, to view run: maldet --report 250328-0410.2283255 Mar 29 04:13:40 ispc maldet(2417782): {update} checking for available updates... Mar 29 04:13:40 ispc maldet(2417782): {update} could not download version file from server, please try again later. Mar 29 04:13:44 ispc maldet(2417858): {sigup} performing signature update check... Mar 29 04:13:45 ispc maldet(2417858): {sigup} local signature set is version 2017022510908 Mar 29 04:13:45 ispc maldet(2417858): {sigup} could not download signature data from server, please try again later. Mar 29 04:13:50 ispc maldet(2417947): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 29 04:13:56 ispc maldet(2417947): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 29 04:13:57 ispc maldet(2417947): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 29 04:13:57 ispc maldet(2417947): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 29 04:13:57 ispc maldet(2417947): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 29 06:01:12 ispc maldet(2417947): {scan} file list completed in 6435s, found 57 files... Mar 29 06:01:12 ispc maldet(2417947): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 29 06:01:13 ispc maldet(2417947): {scan} scan of (57 files) in progress... Mar 29 06:01:16 ispc maldet(2417947): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 6445s Mar 29 06:01:16 ispc maldet(2417947): {scan} scan report saved, to view run: maldet --report 250329-0413.2417947 Mar 30 04:11:21 ispc maldet(2542096): {update} checking for available updates... Mar 30 04:11:22 ispc maldet(2542096): {update} could not download version file from server, please try again later. Mar 30 04:11:26 ispc maldet(2542180): {sigup} performing signature update check... Mar 30 04:11:27 ispc maldet(2542180): {sigup} local signature set is version 2017022510908 Mar 30 04:11:27 ispc maldet(2542180): {sigup} could not download signature data from server, please try again later. Mar 30 04:11:32 ispc maldet(2542264): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 30 04:11:38 ispc maldet(2542264): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 30 04:11:38 ispc maldet(2542264): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 30 04:11:39 ispc maldet(2542264): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 30 04:11:39 ispc maldet(2542264): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 30 06:51:21 ispc maldet(2542264): {scan} file list completed in 9582s, found 60 files... Mar 30 06:51:22 ispc maldet(2542264): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 30 06:51:22 ispc maldet(2542264): {scan} scan of (60 files) in progress... Mar 30 06:51:25 ispc maldet(2542264): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 9592s Mar 30 06:51:25 ispc maldet(2542264): {scan} scan report saved, to view run: maldet --report 250330-0411.2542264 Mar 31 04:21:59 ispc maldet(2730227): {update} checking for available updates... Mar 31 04:21:59 ispc maldet(2730227): {update} could not download version file from server, please try again later. Mar 31 04:22:04 ispc maldet(2730299): {sigup} performing signature update check... Mar 31 04:22:04 ispc maldet(2730299): {sigup} local signature set is version 2017022510908 Mar 31 04:22:05 ispc maldet(2730299): {sigup} could not download signature data from server, please try again later. Mar 31 04:22:09 ispc maldet(2730396): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 31 04:22:14 ispc maldet(2730396): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Mar 31 04:22:14 ispc maldet(2730396): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 31 04:22:14 ispc maldet(2730396): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 31 04:22:14 ispc maldet(2730396): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 31 06:15:52 ispc maldet(2730396): {scan} file list completed in 6817s, found 87 files... Mar 31 06:15:52 ispc maldet(2730396): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Mar 31 06:15:53 ispc maldet(2730396): {scan} scan of (87 files) in progress... Mar 31 06:15:55 ispc maldet(2730396): {scan} scan completed on : files 87, malware hits 0, cleaned hits 0, time 6825s Mar 31 06:15:55 ispc maldet(2730396): {scan} scan report saved, to view run: maldet --report 250331-0422.2730396 Apr 01 04:12:57 ispc maldet(2858469): {update} checking for available updates... Apr 01 04:12:57 ispc maldet(2858469): {update} could not download version file from server, please try again later. Apr 01 04:13:02 ispc maldet(2858542): {sigup} performing signature update check... Apr 01 04:13:02 ispc maldet(2858542): {sigup} local signature set is version 2017022510908 Apr 01 04:13:02 ispc maldet(2858542): {sigup} could not download signature data from server, please try again later. Apr 01 04:13:07 ispc maldet(2858644): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 01 04:13:12 ispc maldet(2858644): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 01 04:13:12 ispc maldet(2858644): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 01 04:13:12 ispc maldet(2858644): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 01 04:13:13 ispc maldet(2858644): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 01 06:19:02 ispc maldet(2858644): {scan} file list completed in 7550s, found 53 files... Apr 01 06:19:03 ispc maldet(2858644): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 01 06:19:03 ispc maldet(2858644): {scan} scan of (53 files) in progress... Apr 01 06:19:06 ispc maldet(2858644): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 7558s Apr 01 06:19:06 ispc maldet(2858644): {scan} scan report saved, to view run: maldet --report 250401-0413.2858644 Apr 02 04:10:15 ispc maldet(3046855): {update} checking for available updates... Apr 02 04:10:16 ispc maldet(3046855): {update} could not download version file from server, please try again later. Apr 02 04:10:20 ispc maldet(3046934): {sigup} performing signature update check... Apr 02 04:10:20 ispc maldet(3046934): {sigup} local signature set is version 2017022510908 Apr 02 04:10:21 ispc maldet(3046934): {sigup} could not download signature data from server, please try again later. Apr 02 04:10:25 ispc maldet(3047018): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 02 04:10:31 ispc maldet(3047018): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 02 04:10:32 ispc maldet(3047018): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 02 04:10:32 ispc maldet(3047018): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 02 04:10:32 ispc maldet(3047018): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 02 06:15:23 ispc maldet(3047018): {scan} file list completed in 7490s, found 68 files... Apr 02 06:15:23 ispc maldet(3047018): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 02 06:15:23 ispc maldet(3047018): {scan} scan of (68 files) in progress... Apr 02 06:15:26 ispc maldet(3047018): {scan} scan completed on : files 68, malware hits 0, cleaned hits 0, time 7500s Apr 02 06:15:26 ispc maldet(3047018): {scan} scan report saved, to view run: maldet --report 250402-0410.3047018 Apr 03 04:11:58 ispc maldet(3233061): {update} checking for available updates... Apr 03 04:11:59 ispc maldet(3233061): {update} could not download version file from server, please try again later. Apr 03 04:12:03 ispc maldet(3233133): {sigup} performing signature update check... Apr 03 04:12:03 ispc maldet(3233133): {sigup} local signature set is version 2017022510908 Apr 03 04:12:04 ispc maldet(3233133): {sigup} could not download signature data from server, please try again later. Apr 03 04:12:08 ispc maldet(3233231): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 03 04:12:14 ispc maldet(3233231): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 03 04:12:14 ispc maldet(3233231): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 03 04:12:15 ispc maldet(3233231): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 03 04:12:15 ispc maldet(3233231): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 03 06:24:40 ispc maldet(3233231): {scan} file list completed in 7945s, found 52 files... Apr 03 06:24:41 ispc maldet(3233231): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 03 06:24:41 ispc maldet(3233231): {scan} scan of (52 files) in progress... Apr 03 06:24:44 ispc maldet(3233231): {scan} scan completed on : files 52, malware hits 0, cleaned hits 0, time 7954s Apr 03 06:24:45 ispc maldet(3233231): {scan} scan report saved, to view run: maldet --report 250403-0412.3233231 Apr 04 04:13:08 ispc maldet(3420621): {update} checking for available updates... Apr 04 04:13:08 ispc maldet(3420621): {update} could not download version file from server, please try again later. Apr 04 04:13:12 ispc maldet(3420696): {sigup} performing signature update check... Apr 04 04:13:12 ispc maldet(3420696): {sigup} local signature set is version 2017022510908 Apr 04 04:13:12 ispc maldet(3420696): {sigup} could not download signature data from server, please try again later. Apr 04 04:13:17 ispc maldet(3420779): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 04 04:13:22 ispc maldet(3420779): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 04 04:13:22 ispc maldet(3420779): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 04 04:13:23 ispc maldet(3420779): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 04 04:13:23 ispc maldet(3420779): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 04 06:20:45 ispc maldet(3420779): {scan} file list completed in 7642s, found 55 files... Apr 04 06:20:46 ispc maldet(3420779): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 04 06:20:46 ispc maldet(3420779): {scan} scan of (55 files) in progress... Apr 04 06:20:49 ispc maldet(3420779): {scan} scan completed on : files 55, malware hits 0, cleaned hits 0, time 7651s Apr 04 06:20:49 ispc maldet(3420779): {scan} scan report saved, to view run: maldet --report 250404-0413.3420779 Apr 05 04:10:13 ispc maldet(3554507): {update} checking for available updates... Apr 05 04:10:14 ispc maldet(3554507): {update} could not download version file from server, please try again later. Apr 05 04:10:18 ispc maldet(3554584): {sigup} performing signature update check... Apr 05 04:10:18 ispc maldet(3554584): {sigup} local signature set is version 2017022510908 Apr 05 04:10:18 ispc maldet(3554584): {sigup} could not download signature data from server, please try again later. Apr 05 04:10:21 ispc maldet(3554666): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 05 04:10:28 ispc maldet(3554666): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 05 04:10:28 ispc maldet(3554666): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 05 04:10:28 ispc maldet(3554666): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 05 04:10:29 ispc maldet(3554666): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 05 06:10:56 ispc maldet(3554666): {scan} file list completed in 7228s, found 55 files... Apr 05 06:10:56 ispc maldet(3554666): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 05 06:10:56 ispc maldet(3554666): {scan} scan of (55 files) in progress... Apr 05 06:10:58 ispc maldet(3554666): {scan} scan completed on : files 55, malware hits 0, cleaned hits 0, time 7236s Apr 05 06:10:58 ispc maldet(3554666): {scan} scan report saved, to view run: maldet --report 250405-0410.3554666 Apr 06 04:14:00 ispc maldet(3749169): {update} checking for available updates... Apr 06 04:14:01 ispc maldet(3749169): {update} could not download version file from server, please try again later. Apr 06 04:14:06 ispc maldet(3749252): {sigup} performing signature update check... Apr 06 04:14:06 ispc maldet(3749252): {sigup} local signature set is version 2017022510908 Apr 06 04:14:06 ispc maldet(3749252): {sigup} could not download signature data from server, please try again later. Apr 06 04:14:11 ispc maldet(3749340): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 06 04:14:17 ispc maldet(3749340): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 06 04:14:18 ispc maldet(3749340): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 06 04:14:18 ispc maldet(3749340): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 06 04:14:18 ispc maldet(3749340): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 06 06:11:11 ispc maldet(3749340): {scan} file list completed in 7012s, found 65 files... Apr 06 06:11:11 ispc maldet(3749340): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 06 06:11:11 ispc maldet(3749340): {scan} scan of (65 files) in progress... Apr 06 06:11:15 ispc maldet(3749340): {scan} scan completed on : files 65, malware hits 0, cleaned hits 0, time 7023s Apr 06 06:11:15 ispc maldet(3749340): {scan} scan report saved, to view run: maldet --report 250406-0414.3749340 Apr 07 04:11:58 ispc maldet(3884630): {update} checking for available updates... Apr 07 04:11:59 ispc maldet(3884630): {update} could not download version file from server, please try again later. Apr 07 04:12:03 ispc maldet(3884708): {sigup} performing signature update check... Apr 07 04:12:04 ispc maldet(3884708): {sigup} local signature set is version 2017022510908 Apr 07 04:12:04 ispc maldet(3884708): {sigup} could not download signature data from server, please try again later. Apr 07 04:12:09 ispc maldet(3884801): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 07 04:12:14 ispc maldet(3884801): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 07 04:12:14 ispc maldet(3884801): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 07 04:12:15 ispc maldet(3884801): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 07 04:12:15 ispc maldet(3884801): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 07 06:10:20 ispc maldet(3884801): {scan} file list completed in 7084s, found 61 files... Apr 07 06:10:20 ispc maldet(3884801): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 07 06:10:20 ispc maldet(3884801): {scan} scan of (61 files) in progress... Apr 07 06:10:23 ispc maldet(3884801): {scan} scan completed on : files 61, malware hits 0, cleaned hits 0, time 7093s Apr 07 06:10:24 ispc maldet(3884801): {scan} scan report saved, to view run: maldet --report 250407-0412.3884801 Apr 08 04:09:48 ispc maldet(4075358): {update} checking for available updates... Apr 08 04:09:49 ispc maldet(4075358): {update} could not download version file from server, please try again later. Apr 08 04:09:53 ispc maldet(4075430): {sigup} performing signature update check... Apr 08 04:09:53 ispc maldet(4075430): {sigup} local signature set is version 2017022510908 Apr 08 04:09:54 ispc maldet(4075430): {sigup} could not download signature data from server, please try again later. Apr 08 04:09:58 ispc maldet(4075520): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 08 04:10:04 ispc maldet(4075520): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 08 04:10:04 ispc maldet(4075520): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 08 04:10:04 ispc maldet(4075520): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 08 04:10:05 ispc maldet(4075520): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 08 06:04:17 ispc maldet(4075520): {scan} file list completed in 6851s, found 233 files... Apr 08 06:04:17 ispc maldet(4075520): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 08 06:04:17 ispc maldet(4075520): {scan} scan of (233 files) in progress... Apr 08 06:04:20 ispc maldet(4075520): {scan} scan completed on : files 233, malware hits 0, cleaned hits 0, time 6861s Apr 08 06:04:20 ispc maldet(4075520): {scan} scan report saved, to view run: maldet --report 250408-0409.4075520 Apr 09 04:08:21 ispc maldet(13910): {update} checking for available updates... Apr 09 04:08:21 ispc maldet(13910): {update} could not download version file from server, please try again later. Apr 09 04:08:26 ispc maldet(13982): {sigup} performing signature update check... Apr 09 04:08:26 ispc maldet(13982): {sigup} local signature set is version 2017022510908 Apr 09 04:08:27 ispc maldet(13982): {sigup} could not download signature data from server, please try again later. Apr 09 04:08:31 ispc maldet(14075): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 09 04:08:38 ispc maldet(14075): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 09 04:08:39 ispc maldet(14075): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 09 04:08:39 ispc maldet(14075): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 09 04:08:39 ispc maldet(14075): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 09 06:18:31 ispc maldet(14075): {scan} file list completed in 7792s, found 57 files... Apr 09 06:18:32 ispc maldet(14075): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 09 06:18:32 ispc maldet(14075): {scan} scan of (57 files) in progress... Apr 09 06:18:34 ispc maldet(14075): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 7801s Apr 09 06:18:34 ispc maldet(14075): {scan} scan report saved, to view run: maldet --report 250409-0408.14075 Apr 10 04:19:22 ispc maldet(205582): {update} checking for available updates... Apr 10 04:19:22 ispc maldet(205582): {update} could not download version file from server, please try again later. Apr 10 04:19:27 ispc maldet(205654): {sigup} performing signature update check... Apr 10 04:19:27 ispc maldet(205654): {sigup} local signature set is version 2017022510908 Apr 10 04:19:27 ispc maldet(205654): {sigup} could not download signature data from server, please try again later. Apr 10 04:19:32 ispc maldet(205743): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 10 04:19:38 ispc maldet(205743): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 10 04:19:38 ispc maldet(205743): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 10 04:19:38 ispc maldet(205743): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 10 04:19:39 ispc maldet(205743): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 10 06:32:11 ispc maldet(205743): {scan} file list completed in 7952s, found 58 files... Apr 10 06:32:12 ispc maldet(205743): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 10 06:32:12 ispc maldet(205743): {scan} scan of (58 files) in progress... Apr 10 06:32:13 ispc maldet(205743): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 7961s Apr 10 06:32:13 ispc maldet(205743): {scan} scan report saved, to view run: maldet --report 250410-0419.205743 Apr 11 04:13:09 ispc maldet(331205): {update} checking for available updates... Apr 11 04:13:10 ispc maldet(331205): {update} could not download version file from server, please try again later. Apr 11 04:13:14 ispc maldet(331282): {sigup} performing signature update check... Apr 11 04:13:14 ispc maldet(331282): {sigup} local signature set is version 2017022510908 Apr 11 04:13:14 ispc maldet(331282): {sigup} could not download signature data from server, please try again later. Apr 11 04:13:18 ispc maldet(331363): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 11 04:13:23 ispc maldet(331363): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 11 04:13:24 ispc maldet(331363): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 11 04:13:24 ispc maldet(331363): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 11 04:13:25 ispc maldet(331363): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 11 06:20:15 ispc maldet(331363): {scan} file list completed in 7610s, found 63 files... Apr 11 06:20:15 ispc maldet(331363): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 11 06:20:15 ispc maldet(331363): {scan} scan of (63 files) in progress... Apr 11 06:20:18 ispc maldet(331363): {scan} scan completed on : files 63, malware hits 0, cleaned hits 0, time 7619s Apr 11 06:20:18 ispc maldet(331363): {scan} scan report saved, to view run: maldet --report 250411-0413.331363 Apr 12 04:12:00 ispc maldet(513566): {update} checking for available updates... Apr 12 04:12:00 ispc maldet(513566): {update} could not download version file from server, please try again later. Apr 12 04:12:05 ispc maldet(513640): {sigup} performing signature update check... Apr 12 04:12:05 ispc maldet(513640): {sigup} local signature set is version 2017022510908 Apr 12 04:12:05 ispc maldet(513640): {sigup} could not download signature data from server, please try again later. Apr 12 04:12:10 ispc maldet(513738): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 12 04:12:15 ispc maldet(513738): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 12 04:12:16 ispc maldet(513738): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 12 04:12:16 ispc maldet(513738): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 12 04:12:16 ispc maldet(513738): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 12 06:22:28 ispc maldet(513738): {scan} file list completed in 7811s, found 67 files... Apr 12 06:22:28 ispc maldet(513738): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 12 06:22:28 ispc maldet(513738): {scan} scan of (67 files) in progress... Apr 12 06:22:32 ispc maldet(513738): {scan} scan completed on : files 67, malware hits 0, cleaned hits 0, time 7821s Apr 12 06:22:32 ispc maldet(513738): {scan} scan report saved, to view run: maldet --report 250412-0412.513738 Apr 13 04:09:51 ispc maldet(694459): {update} checking for available updates... Apr 13 04:09:51 ispc maldet(694459): {update} could not download version file from server, please try again later. Apr 13 04:09:56 ispc maldet(694531): {sigup} performing signature update check... Apr 13 04:09:56 ispc maldet(694531): {sigup} local signature set is version 2017022510908 Apr 13 04:09:56 ispc maldet(694531): {sigup} could not download signature data from server, please try again later. Apr 13 04:10:00 ispc maldet(694624): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 13 04:10:06 ispc maldet(694624): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 13 04:10:06 ispc maldet(694624): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 13 04:10:07 ispc maldet(694624): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 13 04:10:07 ispc maldet(694624): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 13 05:33:54 ispc maldet(694624): {scan} file list completed in 5026s, found 59 files... Apr 13 05:33:54 ispc maldet(694624): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 13 05:33:55 ispc maldet(694624): {scan} scan of (59 files) in progress... Apr 13 05:33:57 ispc maldet(694624): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 5035s Apr 13 05:33:57 ispc maldet(694624): {scan} scan report saved, to view run: maldet --report 250413-0409.694624 Apr 14 04:20:57 ispc maldet(874437): {update} checking for available updates... Apr 14 04:20:58 ispc maldet(874437): {update} could not download version file from server, please try again later. Apr 14 04:21:01 ispc maldet(874512): {sigup} performing signature update check... Apr 14 04:21:01 ispc maldet(874512): {sigup} local signature set is version 2017022510908 Apr 14 04:21:02 ispc maldet(874512): {sigup} could not download signature data from server, please try again later. Apr 14 04:21:07 ispc maldet(874608): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 14 04:21:10 ispc maldet(874608): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 14 04:21:10 ispc maldet(874608): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 14 04:21:10 ispc maldet(874608): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 14 04:21:10 ispc maldet(874608): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 14 05:26:19 ispc maldet(874608): {scan} file list completed in 3909s, found 53 files... Apr 14 05:26:19 ispc maldet(874608): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 14 05:26:20 ispc maldet(874608): {scan} scan of (53 files) in progress... Apr 14 05:26:21 ispc maldet(874608): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 3914s Apr 14 05:26:21 ispc maldet(874608): {scan} scan report saved, to view run: maldet --report 250414-0421.874608 Apr 15 04:08:57 ispc maldet(1052767): {update} checking for available updates... Apr 15 04:08:57 ispc maldet(1052767): {update} could not download version file from server, please try again later. Apr 15 04:09:01 ispc maldet(1052841): {sigup} performing signature update check... Apr 15 04:09:02 ispc maldet(1052841): {sigup} local signature set is version 2017022510908 Apr 15 04:09:02 ispc maldet(1052841): {sigup} could not download signature data from server, please try again later. Apr 15 04:09:06 ispc maldet(1052948): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 15 04:09:13 ispc maldet(1052948): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 15 04:09:13 ispc maldet(1052948): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 15 04:09:13 ispc maldet(1052948): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 15 04:09:14 ispc maldet(1052948): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 15 06:09:59 ispc maldet(1052948): {scan} file list completed in 7245s, found 55 files... Apr 15 06:09:59 ispc maldet(1052948): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 15 06:09:59 ispc maldet(1052948): {scan} scan of (55 files) in progress... Apr 15 06:10:01 ispc maldet(1052948): {scan} scan completed on : files 55, malware hits 0, cleaned hits 0, time 7254s Apr 15 06:10:01 ispc maldet(1052948): {scan} scan report saved, to view run: maldet --report 250415-0409.1052948 Apr 16 04:10:07 ispc maldet(1176398): {update} checking for available updates... Apr 16 04:10:08 ispc maldet(1176398): {update} could not download version file from server, please try again later. Apr 16 04:10:12 ispc maldet(1176470): {sigup} performing signature update check... Apr 16 04:10:12 ispc maldet(1176470): {sigup} local signature set is version 2017022510908 Apr 16 04:10:13 ispc maldet(1176470): {sigup} could not download signature data from server, please try again later. Apr 16 04:10:17 ispc maldet(1176555): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 16 04:10:22 ispc maldet(1176555): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 16 04:10:23 ispc maldet(1176555): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 16 04:10:23 ispc maldet(1176555): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 16 04:10:23 ispc maldet(1176555): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 16 06:09:58 ispc maldet(1176555): {scan} file list completed in 7175s, found 62 files... Apr 16 06:09:58 ispc maldet(1176555): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 16 06:09:58 ispc maldet(1176555): {scan} scan of (62 files) in progress... Apr 16 06:10:01 ispc maldet(1176555): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 7183s Apr 16 06:10:01 ispc maldet(1176555): {scan} scan report saved, to view run: maldet --report 250416-0410.1176555 Apr 17 04:10:20 ispc maldet(1344957): {update} checking for available updates... Apr 17 04:10:21 ispc maldet(1344957): {update} could not download version file from server, please try again later. Apr 17 04:10:25 ispc maldet(1345033): {sigup} performing signature update check... Apr 17 04:10:26 ispc maldet(1345033): {sigup} local signature set is version 2017022510908 Apr 17 04:10:27 ispc maldet(1345033): {sigup} could not download signature data from server, please try again later. Apr 17 04:10:31 ispc maldet(1345114): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 17 04:10:37 ispc maldet(1345114): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 17 04:10:37 ispc maldet(1345114): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 17 04:10:38 ispc maldet(1345114): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 17 04:10:38 ispc maldet(1345114): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 17 06:17:33 ispc maldet(1345114): {scan} file list completed in 7614s, found 64 files... Apr 17 06:17:33 ispc maldet(1345114): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 17 06:17:33 ispc maldet(1345114): {scan} scan of (64 files) in progress... Apr 17 06:17:36 ispc maldet(1345114): {scan} scan completed on : files 64, malware hits 0, cleaned hits 0, time 7623s Apr 17 06:17:37 ispc maldet(1345114): {scan} scan report saved, to view run: maldet --report 250417-0410.1345114 Apr 18 04:10:49 ispc maldet(1523882): {update} checking for available updates... Apr 18 04:10:49 ispc maldet(1523882): {update} could not download version file from server, please try again later. Apr 18 04:10:54 ispc maldet(1523957): {sigup} performing signature update check... Apr 18 04:10:54 ispc maldet(1523957): {sigup} local signature set is version 2017022510908 Apr 18 04:10:54 ispc maldet(1523957): {sigup} could not download signature data from server, please try again later. Apr 18 04:10:58 ispc maldet(1524044): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 18 04:11:04 ispc maldet(1524044): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 18 04:11:04 ispc maldet(1524044): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 18 04:11:05 ispc maldet(1524044): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 18 04:11:05 ispc maldet(1524044): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 18 06:25:52 ispc maldet(1524044): {scan} file list completed in 8087s, found 53 files... Apr 18 06:25:52 ispc maldet(1524044): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 18 06:25:53 ispc maldet(1524044): {scan} scan of (53 files) in progress... Apr 18 06:25:55 ispc maldet(1524044): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 8096s Apr 18 06:25:55 ispc maldet(1524044): {scan} scan report saved, to view run: maldet --report 250418-0410.1524044 Apr 19 04:14:50 ispc maldet(1707872): {update} checking for available updates... Apr 19 04:14:50 ispc maldet(1707872): {update} could not download version file from server, please try again later. Apr 19 04:14:54 ispc maldet(1707951): {sigup} performing signature update check... Apr 19 04:14:55 ispc maldet(1707951): {sigup} local signature set is version 2017022510908 Apr 19 04:14:55 ispc maldet(1707951): {sigup} could not download signature data from server, please try again later. Apr 19 04:15:00 ispc maldet(1708033): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 19 04:15:04 ispc maldet(1708033): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 19 04:15:04 ispc maldet(1708033): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 19 04:15:05 ispc maldet(1708033): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 19 04:15:05 ispc maldet(1708033): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 19 06:07:13 ispc maldet(1708033): {scan} file list completed in 6727s, found 54 files... Apr 19 06:07:13 ispc maldet(1708033): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 19 06:07:13 ispc maldet(1708033): {scan} scan of (54 files) in progress... Apr 19 06:07:15 ispc maldet(1708033): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 6735s Apr 19 06:07:15 ispc maldet(1708033): {scan} scan report saved, to view run: maldet --report 250419-0414.1708033 Apr 20 04:11:10 ispc maldet(1893741): {update} checking for available updates... Apr 20 04:11:10 ispc maldet(1893741): {update} could not download version file from server, please try again later. Apr 20 04:11:14 ispc maldet(1893814): {sigup} performing signature update check... Apr 20 04:11:15 ispc maldet(1893814): {sigup} local signature set is version 2017022510908 Apr 20 04:11:15 ispc maldet(1893814): {sigup} could not download signature data from server, please try again later. Apr 20 04:11:20 ispc maldet(1893901): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 20 04:11:25 ispc maldet(1893901): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 20 04:11:25 ispc maldet(1893901): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 20 04:11:25 ispc maldet(1893901): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 20 04:11:26 ispc maldet(1893901): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 20 06:02:24 ispc maldet(1893901): {scan} file list completed in 6659s, found 114 files... Apr 20 06:02:24 ispc maldet(1893901): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 20 06:02:25 ispc maldet(1893901): {scan} scan of (114 files) in progress... Apr 20 06:02:27 ispc maldet(1893901): {scan} scan completed on : files 114, malware hits 0, cleaned hits 0, time 6667s Apr 20 06:02:27 ispc maldet(1893901): {scan} scan report saved, to view run: maldet --report 250420-0411.1893901 Apr 21 04:09:23 ispc maldet(2081302): {update} checking for available updates... Apr 21 04:09:23 ispc maldet(2081302): {update} could not download version file from server, please try again later. Apr 21 04:09:27 ispc maldet(2081375): {sigup} performing signature update check... Apr 21 04:09:27 ispc maldet(2081375): {sigup} local signature set is version 2017022510908 Apr 21 04:09:28 ispc maldet(2081375): {sigup} could not download signature data from server, please try again later. Apr 21 04:09:31 ispc maldet(2081462): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 21 04:09:37 ispc maldet(2081462): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 21 04:09:38 ispc maldet(2081462): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 21 04:09:38 ispc maldet(2081462): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 21 04:09:38 ispc maldet(2081462): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 21 06:07:00 ispc maldet(2081462): {scan} file list completed in 7042s, found 64 files... Apr 21 06:07:00 ispc maldet(2081462): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 21 06:07:01 ispc maldet(2081462): {scan} scan of (64 files) in progress... Apr 21 06:07:03 ispc maldet(2081462): {scan} scan completed on : files 64, malware hits 0, cleaned hits 0, time 7051s Apr 21 06:07:04 ispc maldet(2081462): {scan} scan report saved, to view run: maldet --report 250421-0409.2081462 Apr 22 04:09:58 ispc maldet(2271127): {update} checking for available updates... Apr 22 04:09:58 ispc maldet(2271127): {update} could not download version file from server, please try again later. Apr 22 04:10:02 ispc maldet(2271204): {sigup} performing signature update check... Apr 22 04:10:02 ispc maldet(2271204): {sigup} local signature set is version 2017022510908 Apr 22 04:10:03 ispc maldet(2271204): {sigup} could not download signature data from server, please try again later. Apr 22 04:10:07 ispc maldet(2271343): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 22 04:10:13 ispc maldet(2271343): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 22 04:10:13 ispc maldet(2271343): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 22 04:10:13 ispc maldet(2271343): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 22 04:10:14 ispc maldet(2271343): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 22 06:08:26 ispc maldet(2271343): {scan} file list completed in 7093s, found 64 files... Apr 22 06:08:27 ispc maldet(2271343): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 22 06:08:27 ispc maldet(2271343): {scan} scan of (64 files) in progress... Apr 22 06:08:30 ispc maldet(2271343): {scan} scan completed on : files 64, malware hits 0, cleaned hits 0, time 7102s Apr 22 06:08:31 ispc maldet(2271343): {scan} scan report saved, to view run: maldet --report 250422-0410.2271343 Apr 23 04:10:32 ispc maldet(2404473): {update} checking for available updates... Apr 23 04:10:33 ispc maldet(2404473): {update} could not download version file from server, please try again later. Apr 23 04:10:37 ispc maldet(2404547): {sigup} performing signature update check... Apr 23 04:10:37 ispc maldet(2404547): {sigup} local signature set is version 2017022510908 Apr 23 04:10:38 ispc maldet(2404547): {sigup} could not download signature data from server, please try again later. Apr 23 04:10:42 ispc maldet(2404633): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 23 04:10:48 ispc maldet(2404633): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 23 04:10:48 ispc maldet(2404633): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 23 04:10:49 ispc maldet(2404633): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 23 04:10:49 ispc maldet(2404633): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 23 05:11:00 ispc maldet(2404633): {scan} file list completed in 3610s, found 60 files... Apr 23 05:11:00 ispc maldet(2404633): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 23 05:11:00 ispc maldet(2404633): {scan} scan of (60 files) in progress... Apr 23 05:11:03 ispc maldet(2404633): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 3620s Apr 23 05:11:03 ispc maldet(2404633): {scan} scan report saved, to view run: maldet --report 250423-0410.2404633 Apr 24 04:19:56 ispc maldet(2595053): {update} checking for available updates... Apr 24 04:19:56 ispc maldet(2595053): {update} could not download version file from server, please try again later. Apr 24 04:20:01 ispc maldet(2595126): {sigup} performing signature update check... Apr 24 04:20:01 ispc maldet(2595126): {sigup} local signature set is version 2017022510908 Apr 24 04:20:01 ispc maldet(2595126): {sigup} could not download signature data from server, please try again later. Apr 24 04:20:06 ispc maldet(2595259): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 24 04:20:12 ispc maldet(2595259): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 24 04:20:12 ispc maldet(2595259): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 24 04:20:12 ispc maldet(2595259): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 24 04:20:13 ispc maldet(2595259): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 24 05:06:38 ispc maldet(2595259): {scan} file list completed in 2786s, found 53 files... Apr 24 05:06:39 ispc maldet(2595259): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 24 05:06:39 ispc maldet(2595259): {scan} scan of (53 files) in progress... Apr 24 05:06:42 ispc maldet(2595259): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 2795s Apr 24 05:06:42 ispc maldet(2595259): {scan} scan report saved, to view run: maldet --report 250424-0420.2595259 Apr 25 04:09:08 ispc maldet(2787268): {update} checking for available updates... Apr 25 04:09:08 ispc maldet(2787268): {update} could not download version file from server, please try again later. Apr 25 04:09:12 ispc maldet(2787346): {sigup} performing signature update check... Apr 25 04:09:13 ispc maldet(2787346): {sigup} local signature set is version 2017022510908 Apr 25 04:09:13 ispc maldet(2787346): {sigup} could not download signature data from server, please try again later. Apr 25 04:09:17 ispc maldet(2787428): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 25 04:09:22 ispc maldet(2787428): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 25 04:09:23 ispc maldet(2787428): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 25 04:09:23 ispc maldet(2787428): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 25 04:09:23 ispc maldet(2787428): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 25 05:26:45 ispc maldet(2787428): {scan} file list completed in 4641s, found 53 files... Apr 25 05:26:45 ispc maldet(2787428): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 25 05:26:45 ispc maldet(2787428): {scan} scan of (53 files) in progress... Apr 25 05:26:48 ispc maldet(2787428): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 4650s Apr 25 05:26:48 ispc maldet(2787428): {scan} scan report saved, to view run: maldet --report 250425-0409.2787428 Apr 26 04:13:36 ispc maldet(2983164): {update} checking for available updates... Apr 26 04:13:36 ispc maldet(2983164): {update} could not download version file from server, please try again later. Apr 26 04:13:41 ispc maldet(2983243): {sigup} performing signature update check... Apr 26 04:13:41 ispc maldet(2983243): {sigup} local signature set is version 2017022510908 Apr 26 04:13:42 ispc maldet(2983243): {sigup} could not download signature data from server, please try again later. Apr 26 04:13:46 ispc maldet(2983328): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 26 04:13:53 ispc maldet(2983328): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 26 04:13:53 ispc maldet(2983328): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 26 04:13:53 ispc maldet(2983328): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 26 04:13:54 ispc maldet(2983328): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 26 05:08:35 ispc maldet(2983328): {scan} file list completed in 3281s, found 60 files... Apr 26 05:08:35 ispc maldet(2983328): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 26 05:08:35 ispc maldet(2983328): {scan} scan of (60 files) in progress... Apr 26 05:08:38 ispc maldet(2983328): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 3291s Apr 26 05:08:38 ispc maldet(2983328): {scan} scan report saved, to view run: maldet --report 250426-0413.2983328 Apr 27 04:17:47 ispc maldet(3178224): {update} checking for available updates... Apr 27 04:17:47 ispc maldet(3178224): {update} could not download version file from server, please try again later. Apr 27 04:17:51 ispc maldet(3178298): {sigup} performing signature update check... Apr 27 04:17:52 ispc maldet(3178298): {sigup} local signature set is version 2017022510908 Apr 27 04:17:52 ispc maldet(3178298): {sigup} could not download signature data from server, please try again later. Apr 27 04:17:56 ispc maldet(3178385): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 27 04:18:03 ispc maldet(3178385): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 27 04:18:03 ispc maldet(3178385): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 27 04:18:03 ispc maldet(3178385): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 27 04:18:04 ispc maldet(3178385): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 27 05:14:43 ispc maldet(3178385): {scan} file list completed in 3399s, found 59 files... Apr 27 05:14:43 ispc maldet(3178385): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 27 05:14:44 ispc maldet(3178385): {scan} scan of (59 files) in progress... Apr 27 05:14:47 ispc maldet(3178385): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 3410s Apr 27 05:14:47 ispc maldet(3178385): {scan} scan report saved, to view run: maldet --report 250427-0417.3178385 Apr 28 04:10:35 ispc maldet(3373868): {update} checking for available updates... Apr 28 04:10:35 ispc maldet(3373868): {update} could not download version file from server, please try again later. Apr 28 04:10:40 ispc maldet(3373946): {sigup} performing signature update check... Apr 28 04:10:40 ispc maldet(3373946): {sigup} local signature set is version 2017022510908 Apr 28 04:10:41 ispc maldet(3373946): {sigup} could not download signature data from server, please try again later. Apr 28 04:10:46 ispc maldet(3374028): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 28 04:10:51 ispc maldet(3374028): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 28 04:10:51 ispc maldet(3374028): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 28 04:10:51 ispc maldet(3374028): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 28 04:10:52 ispc maldet(3374028): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 28 05:02:45 ispc maldet(3374028): {scan} file list completed in 3114s, found 148 files... Apr 28 05:02:46 ispc maldet(3374028): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 28 05:02:46 ispc maldet(3374028): {scan} scan of (148 files) in progress... Apr 28 05:02:49 ispc maldet(3374028): {scan} scan completed on : files 148, malware hits 0, cleaned hits 0, time 3122s Apr 28 05:02:49 ispc maldet(3374028): {scan} scan report saved, to view run: maldet --report 250428-0410.3374028 Apr 29 04:17:04 ispc maldet(3564862): {update} checking for available updates... Apr 29 04:17:04 ispc maldet(3564862): {update} could not download version file from server, please try again later. Apr 29 04:17:09 ispc maldet(3564950): {sigup} performing signature update check... Apr 29 04:17:09 ispc maldet(3564950): {sigup} local signature set is version 2017022510908 Apr 29 04:17:09 ispc maldet(3564950): {sigup} could not download signature data from server, please try again later. Apr 29 04:17:14 ispc maldet(3565039): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 29 04:17:21 ispc maldet(3565039): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 29 04:17:21 ispc maldet(3565039): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 29 04:17:22 ispc maldet(3565039): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 29 04:17:22 ispc maldet(3565039): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 29 05:00:39 ispc maldet(3565039): {scan} file list completed in 2597s, found 52 files... Apr 29 05:00:39 ispc maldet(3565039): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 29 05:00:39 ispc maldet(3565039): {scan} scan of (52 files) in progress... Apr 29 05:00:43 ispc maldet(3565039): {scan} scan completed on : files 52, malware hits 0, cleaned hits 0, time 2608s Apr 29 05:00:43 ispc maldet(3565039): {scan} scan report saved, to view run: maldet --report 250429-0417.3565039 Apr 30 04:15:01 ispc maldet(3749317): {update} checking for available updates... Apr 30 04:15:01 ispc maldet(3749317): {update} could not download version file from server, please try again later. Apr 30 04:15:06 ispc maldet(3749436): {sigup} performing signature update check... Apr 30 04:15:06 ispc maldet(3749436): {sigup} local signature set is version 2017022510908 Apr 30 04:15:07 ispc maldet(3749436): {sigup} could not download signature data from server, please try again later. Apr 30 04:15:11 ispc maldet(3749561): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 30 04:15:18 ispc maldet(3749561): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Apr 30 04:15:18 ispc maldet(3749561): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 30 04:15:19 ispc maldet(3749561): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 30 04:15:19 ispc maldet(3749561): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 30 04:52:02 ispc maldet(3749561): {scan} file list completed in 2203s, found 54 files... Apr 30 04:52:03 ispc maldet(3749561): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Apr 30 04:52:03 ispc maldet(3749561): {scan} scan of (54 files) in progress... Apr 30 04:52:06 ispc maldet(3749561): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 2213s Apr 30 04:52:06 ispc maldet(3749561): {scan} scan report saved, to view run: maldet --report 250430-0415.3749561 May 01 04:15:36 ispc maldet(3932047): {update} checking for available updates... May 01 04:15:37 ispc maldet(3932047): {update} could not download version file from server, please try again later. May 01 04:15:41 ispc maldet(3932121): {sigup} performing signature update check... May 01 04:15:41 ispc maldet(3932121): {sigup} local signature set is version 2017022510908 May 01 04:15:42 ispc maldet(3932121): {sigup} could not download signature data from server, please try again later. May 01 04:15:46 ispc maldet(3932203): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 01 04:15:52 ispc maldet(3932203): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 01 04:15:52 ispc maldet(3932203): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 01 04:15:52 ispc maldet(3932203): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 01 04:15:53 ispc maldet(3932203): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 01 05:08:55 ispc maldet(3932203): {scan} file list completed in 3181s, found 59 files... May 01 05:08:55 ispc maldet(3932203): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 01 05:08:56 ispc maldet(3932203): {scan} scan of (59 files) in progress... May 01 05:08:58 ispc maldet(3932203): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 3190s May 01 05:08:58 ispc maldet(3932203): {scan} scan report saved, to view run: maldet --report 250501-0415.3932203 May 02 04:11:01 ispc maldet(4119261): {update} checking for available updates... May 02 04:11:01 ispc maldet(4119261): {update} could not download version file from server, please try again later. May 02 04:11:05 ispc maldet(4119344): {sigup} performing signature update check... May 02 04:11:06 ispc maldet(4119344): {sigup} local signature set is version 2017022510908 May 02 04:11:06 ispc maldet(4119344): {sigup} could not download signature data from server, please try again later. May 02 04:11:11 ispc maldet(4119431): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 02 04:11:17 ispc maldet(4119431): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 02 04:11:17 ispc maldet(4119431): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 02 04:11:17 ispc maldet(4119431): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 02 04:11:18 ispc maldet(4119431): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 02 06:29:10 ispc maldet(4119431): {scan} file list completed in 8273s, found 61 files... May 02 06:29:11 ispc maldet(4119431): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 02 06:29:11 ispc maldet(4119431): {scan} scan of (61 files) in progress... May 02 06:29:14 ispc maldet(4119431): {scan} scan completed on : files 61, malware hits 0, cleaned hits 0, time 8281s May 02 06:29:14 ispc maldet(4119431): {scan} scan report saved, to view run: maldet --report 250502-0411.4119431 May 03 04:11:22 ispc maldet(110452): {update} checking for available updates... May 03 04:11:23 ispc maldet(110452): {update} could not download version file from server, please try again later. May 03 04:11:27 ispc maldet(110526): {sigup} performing signature update check... May 03 04:11:28 ispc maldet(110526): {sigup} local signature set is version 2017022510908 May 03 04:11:28 ispc maldet(110526): {sigup} could not download signature data from server, please try again later. May 03 04:11:33 ispc maldet(110612): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 03 04:11:39 ispc maldet(110612): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 03 04:11:40 ispc maldet(110612): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 03 04:11:40 ispc maldet(110612): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 03 04:11:40 ispc maldet(110612): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 03 05:26:05 ispc maldet(110612): {scan} file list completed in 4464s, found 59 files... May 03 05:26:05 ispc maldet(110612): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 03 05:26:05 ispc maldet(110612): {scan} scan of (59 files) in progress... May 03 05:26:06 ispc maldet(110612): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 4473s May 03 05:26:06 ispc maldet(110612): {scan} scan report saved, to view run: maldet --report 250503-0411.110612 May 04 04:10:19 ispc maldet(292650): {update} checking for available updates... May 04 04:10:19 ispc maldet(292650): {update} could not download version file from server, please try again later. May 04 04:10:23 ispc maldet(292726): {sigup} performing signature update check... May 04 04:10:23 ispc maldet(292726): {sigup} local signature set is version 2017022510908 May 04 04:10:24 ispc maldet(292726): {sigup} could not download signature data from server, please try again later. May 04 04:10:29 ispc maldet(292811): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 04 04:10:35 ispc maldet(292811): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 04 04:10:36 ispc maldet(292811): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 04 04:10:36 ispc maldet(292811): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 04 04:10:36 ispc maldet(292811): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 04 05:09:43 ispc maldet(292811): {scan} file list completed in 3547s, found 60 files... May 04 05:09:43 ispc maldet(292811): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 04 05:09:43 ispc maldet(292811): {scan} scan of (60 files) in progress... May 04 05:09:47 ispc maldet(292811): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 3557s May 04 05:09:47 ispc maldet(292811): {scan} scan report saved, to view run: maldet --report 250504-0410.292811 May 05 04:10:51 ispc maldet(474909): {update} checking for available updates... May 05 04:10:52 ispc maldet(474909): {update} could not download version file from server, please try again later. May 05 04:10:56 ispc maldet(474982): {sigup} performing signature update check... May 05 04:10:57 ispc maldet(474982): {sigup} local signature set is version 2017022510908 May 05 04:10:57 ispc maldet(474982): {sigup} could not download signature data from server, please try again later. May 05 04:11:01 ispc maldet(475075): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 05 04:11:04 ispc maldet(475075): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 05 04:11:05 ispc maldet(475075): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 05 04:11:05 ispc maldet(475075): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 05 04:11:05 ispc maldet(475075): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 05 05:11:00 ispc maldet(475075): {scan} file list completed in 3594s, found 58 files... May 05 05:11:00 ispc maldet(475075): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 05 05:11:01 ispc maldet(475075): {scan} scan of (58 files) in progress... May 05 05:11:04 ispc maldet(475075): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 3602s May 05 05:11:04 ispc maldet(475075): {scan} scan report saved, to view run: maldet --report 250505-0410.475075 May 06 04:10:39 ispc maldet(657115): {update} checking for available updates... May 06 04:10:39 ispc maldet(657115): {update} could not download version file from server, please try again later. May 06 04:10:42 ispc maldet(657189): {sigup} performing signature update check... May 06 04:10:42 ispc maldet(657189): {sigup} local signature set is version 2017022510908 May 06 04:10:43 ispc maldet(657189): {sigup} could not download signature data from server, please try again later. May 06 04:10:47 ispc maldet(657275): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 06 04:10:52 ispc maldet(657275): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 06 04:10:52 ispc maldet(657275): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 06 04:10:53 ispc maldet(657275): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 06 04:10:53 ispc maldet(657275): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 06 05:04:06 ispc maldet(657275): {scan} file list completed in 3192s, found 236 files... May 06 05:04:06 ispc maldet(657275): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 06 05:04:06 ispc maldet(657275): {scan} scan of (236 files) in progress... May 06 05:04:09 ispc maldet(657275): {scan} scan completed on : files 236, malware hits 0, cleaned hits 0, time 3201s May 06 05:04:10 ispc maldet(657275): {scan} scan report saved, to view run: maldet --report 250506-0410.657275 May 07 04:09:56 ispc maldet(857497): {update} checking for available updates... May 07 04:09:57 ispc maldet(857497): {update} could not download version file from server, please try again later. May 07 04:10:01 ispc maldet(857575): {sigup} performing signature update check... May 07 04:10:01 ispc maldet(857575): {sigup} local signature set is version 2017022510908 May 07 04:10:02 ispc maldet(857575): {sigup} could not download signature data from server, please try again later. May 07 04:10:06 ispc maldet(857702): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 07 04:10:12 ispc maldet(857702): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 07 04:10:12 ispc maldet(857702): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 07 04:10:13 ispc maldet(857702): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 07 04:10:13 ispc maldet(857702): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 07 04:59:30 ispc maldet(857702): {scan} file list completed in 2957s, found 62 files... May 07 04:59:31 ispc maldet(857702): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 07 04:59:31 ispc maldet(857702): {scan} scan of (62 files) in progress... May 07 04:59:34 ispc maldet(857702): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 2967s May 07 04:59:34 ispc maldet(857702): {scan} scan report saved, to view run: maldet --report 250507-0410.857702 May 08 04:10:21 ispc maldet(1007028): {update} checking for available updates... May 08 04:10:22 ispc maldet(1007028): {update} could not download version file from server, please try again later. May 08 04:10:26 ispc maldet(1007101): {sigup} performing signature update check... May 08 04:10:26 ispc maldet(1007101): {sigup} local signature set is version 2017022510908 May 08 04:10:26 ispc maldet(1007101): {sigup} could not download signature data from server, please try again later. May 08 04:10:31 ispc maldet(1007190): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 08 04:10:35 ispc maldet(1007190): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 08 04:10:35 ispc maldet(1007190): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 08 04:10:35 ispc maldet(1007190): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 08 04:10:36 ispc maldet(1007190): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 08 04:58:43 ispc maldet(1007190): {scan} file list completed in 2886s, found 57 files... May 08 04:58:43 ispc maldet(1007190): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 08 04:58:43 ispc maldet(1007190): {scan} scan of (57 files) in progress... May 08 04:58:46 ispc maldet(1007190): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 2894s May 08 04:58:46 ispc maldet(1007190): {scan} scan report saved, to view run: maldet --report 250508-0410.1007190 May 09 04:12:04 ispc maldet(1200169): {update} checking for available updates... May 09 04:12:04 ispc maldet(1200169): {update} could not download version file from server, please try again later. May 09 04:12:08 ispc maldet(1200253): {sigup} performing signature update check... May 09 04:12:08 ispc maldet(1200253): {sigup} local signature set is version 2017022510908 May 09 04:12:09 ispc maldet(1200253): {sigup} could not download signature data from server, please try again later. May 09 04:12:13 ispc maldet(1200340): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 09 04:12:20 ispc maldet(1200340): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 09 04:12:20 ispc maldet(1200340): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 09 04:12:20 ispc maldet(1200340): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 09 04:12:21 ispc maldet(1200340): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 09 05:10:37 ispc maldet(1200340): {scan} file list completed in 3496s, found 58 files... May 09 05:10:37 ispc maldet(1200340): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 09 05:10:37 ispc maldet(1200340): {scan} scan of (58 files) in progress... May 09 05:10:41 ispc maldet(1200340): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 3506s May 09 05:10:41 ispc maldet(1200340): {scan} scan report saved, to view run: maldet --report 250509-0412.1200340 May 10 04:23:14 ispc maldet(1401689): {update} checking for available updates... May 10 04:23:15 ispc maldet(1401689): {update} could not download version file from server, please try again later. May 10 04:23:19 ispc maldet(1401763): {sigup} performing signature update check... May 10 04:23:19 ispc maldet(1401763): {sigup} local signature set is version 2017022510908 May 10 04:23:19 ispc maldet(1401763): {sigup} could not download signature data from server, please try again later. May 10 04:23:24 ispc maldet(1401846): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 10 04:23:27 ispc maldet(1401846): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 10 04:23:28 ispc maldet(1401846): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 10 04:23:28 ispc maldet(1401846): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 10 04:23:28 ispc maldet(1401846): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 10 05:09:27 ispc maldet(1401846): {scan} file list completed in 2758s, found 54 files... May 10 05:09:27 ispc maldet(1401846): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 10 05:09:27 ispc maldet(1401846): {scan} scan of (54 files) in progress... May 10 05:09:29 ispc maldet(1401846): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 2765s May 10 05:09:29 ispc maldet(1401846): {scan} scan report saved, to view run: maldet --report 250510-0423.1401846 May 11 04:12:23 ispc maldet(1592568): {update} checking for available updates... May 11 04:12:24 ispc maldet(1592568): {update} could not download version file from server, please try again later. May 11 04:12:28 ispc maldet(1592643): {sigup} performing signature update check... May 11 04:12:28 ispc maldet(1592643): {sigup} local signature set is version 2017022510908 May 11 04:12:29 ispc maldet(1592643): {sigup} could not download signature data from server, please try again later. May 11 04:12:33 ispc maldet(1592733): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 11 04:12:39 ispc maldet(1592733): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 11 04:12:39 ispc maldet(1592733): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 11 04:12:39 ispc maldet(1592733): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 11 04:12:40 ispc maldet(1592733): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 11 05:16:59 ispc maldet(1592733): {scan} file list completed in 3859s, found 60 files... May 11 05:17:00 ispc maldet(1592733): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 11 05:17:00 ispc maldet(1592733): {scan} scan of (60 files) in progress... May 11 05:17:03 ispc maldet(1592733): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 3869s May 11 05:17:03 ispc maldet(1592733): {scan} scan report saved, to view run: maldet --report 250511-0412.1592733 May 12 04:08:46 ispc maldet(1780202): {update} checking for available updates... May 12 04:08:46 ispc maldet(1780202): {update} could not download version file from server, please try again later. May 12 04:08:50 ispc maldet(1780276): {sigup} performing signature update check... May 12 04:08:51 ispc maldet(1780276): {sigup} local signature set is version 2017022510908 May 12 04:08:51 ispc maldet(1780276): {sigup} could not download signature data from server, please try again later. May 12 04:08:56 ispc maldet(1780362): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 12 04:09:01 ispc maldet(1780362): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 12 04:09:01 ispc maldet(1780362): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 12 04:09:02 ispc maldet(1780362): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 12 04:09:02 ispc maldet(1780362): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 12 04:58:18 ispc maldet(1780362): {scan} file list completed in 2955s, found 60 files... May 12 04:58:18 ispc maldet(1780362): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 12 04:58:18 ispc maldet(1780362): {scan} scan of (60 files) in progress... May 12 04:58:21 ispc maldet(1780362): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 2965s May 12 04:58:22 ispc maldet(1780362): {scan} scan report saved, to view run: maldet --report 250512-0408.1780362 May 13 04:13:16 ispc maldet(1909855): {update} checking for available updates... May 13 04:13:16 ispc maldet(1909855): {update} could not download version file from server, please try again later. May 13 04:13:21 ispc maldet(1909930): {sigup} performing signature update check... May 13 04:13:21 ispc maldet(1909930): {sigup} local signature set is version 2017022510908 May 13 04:13:21 ispc maldet(1909930): {sigup} could not download signature data from server, please try again later. May 13 04:13:26 ispc maldet(1910016): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 13 04:13:33 ispc maldet(1910016): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 13 04:13:33 ispc maldet(1910016): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 13 04:13:33 ispc maldet(1910016): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 13 04:13:34 ispc maldet(1910016): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 13 04:55:47 ispc maldet(1910016): {scan} file list completed in 2533s, found 54 files... May 13 04:55:47 ispc maldet(1910016): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 13 04:55:47 ispc maldet(1910016): {scan} scan of (54 files) in progress... May 13 04:55:50 ispc maldet(1910016): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 2544s May 13 04:55:51 ispc maldet(1910016): {scan} scan report saved, to view run: maldet --report 250513-0413.1910016 May 14 04:11:12 ispc maldet(2098972): {update} checking for available updates... May 14 04:11:12 ispc maldet(2098972): {update} could not download version file from server, please try again later. May 14 04:11:16 ispc maldet(2099048): {sigup} performing signature update check... May 14 04:11:16 ispc maldet(2099048): {sigup} local signature set is version 2017022510908 May 14 04:11:17 ispc maldet(2099048): {sigup} could not download signature data from server, please try again later. May 14 04:11:21 ispc maldet(2099129): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 14 04:11:25 ispc maldet(2099129): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 14 04:11:26 ispc maldet(2099129): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 14 04:11:26 ispc maldet(2099129): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 14 04:11:26 ispc maldet(2099129): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 14 04:57:28 ispc maldet(2099129): {scan} file list completed in 2762s, found 54 files... May 14 04:57:28 ispc maldet(2099129): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 14 04:57:28 ispc maldet(2099129): {scan} scan of (54 files) in progress... May 14 04:57:32 ispc maldet(2099129): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 2770s May 14 04:57:32 ispc maldet(2099129): {scan} scan report saved, to view run: maldet --report 250514-0411.2099129 May 15 04:14:22 ispc maldet(2282983): {update} checking for available updates... May 15 04:14:22 ispc maldet(2282983): {update} could not download version file from server, please try again later. May 15 04:14:27 ispc maldet(2283056): {sigup} performing signature update check... May 15 04:14:27 ispc maldet(2283056): {sigup} local signature set is version 2017022510908 May 15 04:14:27 ispc maldet(2283056): {sigup} could not download signature data from server, please try again later. May 15 04:14:31 ispc maldet(2283138): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 15 04:14:38 ispc maldet(2283138): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 15 04:14:38 ispc maldet(2283138): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 15 04:14:38 ispc maldet(2283138): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 15 04:14:39 ispc maldet(2283138): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 15 05:07:14 ispc maldet(2283138): {scan} file list completed in 3155s, found 53 files... May 15 05:07:14 ispc maldet(2283138): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 15 05:07:14 ispc maldet(2283138): {scan} scan of (53 files) in progress... May 15 05:07:18 ispc maldet(2283138): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 3165s May 15 05:07:18 ispc maldet(2283138): {scan} scan report saved, to view run: maldet --report 250515-0414.2283138 May 16 04:10:41 ispc maldet(2405504): {update} checking for available updates... May 16 04:10:42 ispc maldet(2405504): {update} could not download version file from server, please try again later. May 16 04:10:46 ispc maldet(2405578): {sigup} performing signature update check... May 16 04:10:46 ispc maldet(2405578): {sigup} local signature set is version 2017022510908 May 16 04:10:47 ispc maldet(2405578): {sigup} could not download signature data from server, please try again later. May 16 04:10:52 ispc maldet(2405663): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 16 04:10:58 ispc maldet(2405663): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 16 04:10:58 ispc maldet(2405663): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 16 04:10:59 ispc maldet(2405663): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 16 04:10:59 ispc maldet(2405663): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 16 05:00:32 ispc maldet(2405663): {scan} file list completed in 2972s, found 60 files... May 16 05:00:32 ispc maldet(2405663): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 16 05:00:32 ispc maldet(2405663): {scan} scan of (60 files) in progress... May 16 05:00:34 ispc maldet(2405663): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 2981s May 16 05:00:34 ispc maldet(2405663): {scan} scan report saved, to view run: maldet --report 250516-0410.2405663 May 17 04:09:37 ispc maldet(2589823): {update} checking for available updates... May 17 04:09:38 ispc maldet(2589823): {update} could not download version file from server, please try again later. May 17 04:09:41 ispc maldet(2589900): {sigup} performing signature update check... May 17 04:09:41 ispc maldet(2589900): {sigup} local signature set is version 2017022510908 May 17 04:09:42 ispc maldet(2589900): {sigup} could not download signature data from server, please try again later. May 17 04:09:45 ispc maldet(2589983): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 17 04:09:51 ispc maldet(2589983): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 17 04:09:51 ispc maldet(2589983): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 17 04:09:51 ispc maldet(2589983): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 17 04:09:52 ispc maldet(2589983): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 17 05:06:53 ispc maldet(2589983): {scan} file list completed in 3422s, found 59 files... May 17 05:06:54 ispc maldet(2589983): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 17 05:06:54 ispc maldet(2589983): {scan} scan of (59 files) in progress... May 17 05:06:57 ispc maldet(2589983): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 3431s May 17 05:06:57 ispc maldet(2589983): {scan} scan report saved, to view run: maldet --report 250517-0409.2589983 May 18 04:12:25 ispc maldet(3001690): {update} checking for available updates... May 18 04:12:25 ispc maldet(3001690): {update} could not download version file from server, please try again later. May 18 04:12:29 ispc maldet(3001763): {sigup} performing signature update check... May 18 04:12:30 ispc maldet(3001763): {sigup} local signature set is version 2017022510908 May 18 04:12:31 ispc maldet(3001763): {sigup} could not download signature data from server, please try again later. May 18 04:12:35 ispc maldet(3001847): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 18 04:12:40 ispc maldet(3001847): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 18 04:12:41 ispc maldet(3001847): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 18 04:12:41 ispc maldet(3001847): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 18 04:12:41 ispc maldet(3001847): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 18 04:58:28 ispc maldet(3001847): {scan} file list completed in 2747s, found 54 files... May 18 04:58:29 ispc maldet(3001847): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 18 04:58:29 ispc maldet(3001847): {scan} scan of (54 files) in progress... May 18 04:58:32 ispc maldet(3001847): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 2756s May 18 04:58:32 ispc maldet(3001847): {scan} scan report saved, to view run: maldet --report 250518-0412.3001847 May 19 04:10:19 ispc maldet(3129743): {update} checking for available updates... May 19 04:10:19 ispc maldet(3129743): {update} could not download version file from server, please try again later. May 19 04:10:22 ispc maldet(3129815): {sigup} performing signature update check... May 19 04:10:22 ispc maldet(3129815): {sigup} local signature set is version 2017022510908 May 19 04:10:23 ispc maldet(3129815): {sigup} could not download signature data from server, please try again later. May 19 04:10:26 ispc maldet(3129900): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 19 04:10:32 ispc maldet(3129900): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 19 04:10:33 ispc maldet(3129900): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 19 04:10:33 ispc maldet(3129900): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 19 04:10:33 ispc maldet(3129900): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 19 04:58:37 ispc maldet(3129900): {scan} file list completed in 2884s, found 54 files... May 19 04:58:37 ispc maldet(3129900): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 19 04:58:38 ispc maldet(3129900): {scan} scan of (54 files) in progress... May 19 04:58:39 ispc maldet(3129900): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 2891s May 19 04:58:39 ispc maldet(3129900): {scan} scan report saved, to view run: maldet --report 250519-0410.3129900 May 20 04:12:14 ispc maldet(3311874): {update} checking for available updates... May 20 04:12:14 ispc maldet(3311874): {update} could not download version file from server, please try again later. May 20 04:12:18 ispc maldet(3311951): {sigup} performing signature update check... May 20 04:12:18 ispc maldet(3311951): {sigup} local signature set is version 2017022510908 May 20 04:12:19 ispc maldet(3311951): {sigup} could not download signature data from server, please try again later. May 20 04:12:23 ispc maldet(3312032): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 20 04:12:30 ispc maldet(3312032): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 20 04:12:30 ispc maldet(3312032): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 20 04:12:30 ispc maldet(3312032): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 20 04:12:31 ispc maldet(3312032): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 20 05:05:34 ispc maldet(3312032): {scan} file list completed in 3183s, found 53 files... May 20 05:05:34 ispc maldet(3312032): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 20 05:05:35 ispc maldet(3312032): {scan} scan of (53 files) in progress... May 20 05:05:37 ispc maldet(3312032): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 3194s May 20 05:05:38 ispc maldet(3312032): {scan} scan report saved, to view run: maldet --report 250520-0412.3312032 May 21 04:12:02 ispc maldet(3481246): {update} checking for available updates... May 21 04:12:03 ispc maldet(3481246): {update} could not download version file from server, please try again later. May 21 04:12:06 ispc maldet(3481330): {sigup} performing signature update check... May 21 04:12:06 ispc maldet(3481330): {sigup} local signature set is version 2017022510908 May 21 04:12:07 ispc maldet(3481330): {sigup} could not download signature data from server, please try again later. May 21 04:12:11 ispc maldet(3481411): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 21 04:12:16 ispc maldet(3481411): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 21 04:12:17 ispc maldet(3481411): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 21 04:12:17 ispc maldet(3481411): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 21 04:12:17 ispc maldet(3481411): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 21 04:59:33 ispc maldet(3481411): {scan} file list completed in 2836s, found 60 files... May 21 04:59:33 ispc maldet(3481411): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 21 04:59:34 ispc maldet(3481411): {scan} scan of (60 files) in progress... May 21 04:59:36 ispc maldet(3481411): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 2844s May 21 04:59:37 ispc maldet(3481411): {scan} scan report saved, to view run: maldet --report 250521-0412.3481411 May 22 04:11:39 ispc maldet(3652142): {update} checking for available updates... May 22 04:11:40 ispc maldet(3652142): {update} could not download version file from server, please try again later. May 22 04:11:44 ispc maldet(3652220): {sigup} performing signature update check... May 22 04:11:45 ispc maldet(3652220): {sigup} local signature set is version 2017022510908 May 22 04:11:45 ispc maldet(3652220): {sigup} could not download signature data from server, please try again later. May 22 04:11:49 ispc maldet(3652302): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 22 04:11:54 ispc maldet(3652302): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 22 04:11:54 ispc maldet(3652302): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 22 04:11:54 ispc maldet(3652302): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 22 04:11:55 ispc maldet(3652302): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 22 05:04:51 ispc maldet(3652302): {scan} file list completed in 3176s, found 57 files... May 22 05:04:51 ispc maldet(3652302): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 22 05:04:51 ispc maldet(3652302): {scan} scan of (57 files) in progress... May 22 05:04:53 ispc maldet(3652302): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 3183s May 22 05:04:53 ispc maldet(3652302): {scan} scan report saved, to view run: maldet --report 250522-0411.3652302 May 23 04:11:24 ispc maldet(3848959): {update} checking for available updates... May 23 04:11:24 ispc maldet(3848959): {update} could not download version file from server, please try again later. May 23 04:11:28 ispc maldet(3849033): {sigup} performing signature update check... May 23 04:11:28 ispc maldet(3849033): {sigup} local signature set is version 2017022510908 May 23 04:11:28 ispc maldet(3849033): {sigup} could not download signature data from server, please try again later. May 23 04:11:31 ispc maldet(3849119): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 23 04:11:36 ispc maldet(3849119): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 23 04:11:37 ispc maldet(3849119): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 23 04:11:37 ispc maldet(3849119): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 23 04:11:37 ispc maldet(3849119): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 23 04:43:42 ispc maldet(3849119): {scan} file list completed in 1924s, found 56 files... May 23 04:43:42 ispc maldet(3849119): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 23 04:43:43 ispc maldet(3849119): {scan} scan of (56 files) in progress... May 23 04:43:45 ispc maldet(3849119): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 1933s May 23 04:43:45 ispc maldet(3849119): {scan} scan report saved, to view run: maldet --report 250523-0411.3849119 May 24 04:10:42 ispc maldet(4046297): {update} checking for available updates... May 24 04:10:42 ispc maldet(4046297): {update} could not download version file from server, please try again later. May 24 04:10:46 ispc maldet(4046375): {sigup} performing signature update check... May 24 04:10:46 ispc maldet(4046375): {sigup} local signature set is version 2017022510908 May 24 04:10:47 ispc maldet(4046375): {sigup} could not download signature data from server, please try again later. May 24 04:10:51 ispc maldet(4046458): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 24 04:10:57 ispc maldet(4046458): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 24 04:10:58 ispc maldet(4046458): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 24 04:10:58 ispc maldet(4046458): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 24 04:10:59 ispc maldet(4046458): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 24 04:42:25 ispc maldet(4046458): {scan} file list completed in 1887s, found 65 files... May 24 04:42:26 ispc maldet(4046458): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 24 04:42:26 ispc maldet(4046458): {scan} scan of (65 files) in progress... May 24 04:42:29 ispc maldet(4046458): {scan} scan completed on : files 65, malware hits 0, cleaned hits 0, time 1897s May 24 04:42:29 ispc maldet(4046458): {scan} scan report saved, to view run: maldet --report 250524-0410.4046458 May 25 04:12:26 ispc maldet(65877): {update} checking for available updates... May 25 04:12:27 ispc maldet(65877): {update} could not download version file from server, please try again later. May 25 04:12:31 ispc maldet(65960): {sigup} performing signature update check... May 25 04:12:32 ispc maldet(65960): {sigup} local signature set is version 2017022510908 May 25 04:12:32 ispc maldet(65960): {sigup} could not download signature data from server, please try again later. May 25 04:12:36 ispc maldet(66043): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 25 04:12:42 ispc maldet(66043): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 25 04:12:42 ispc maldet(66043): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 25 04:12:42 ispc maldet(66043): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 25 04:12:42 ispc maldet(66043): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 25 04:49:07 ispc maldet(66043): {scan} file list completed in 2184s, found 62 files... May 25 04:49:07 ispc maldet(66043): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 25 04:49:07 ispc maldet(66043): {scan} scan of (62 files) in progress... May 25 04:49:10 ispc maldet(66043): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 2193s May 25 04:49:11 ispc maldet(66043): {scan} scan report saved, to view run: maldet --report 250525-0412.66043 May 26 04:22:51 ispc maldet(221098): {update} checking for available updates... May 26 04:22:52 ispc maldet(221098): {update} could not download version file from server, please try again later. May 26 04:22:56 ispc maldet(221177): {sigup} performing signature update check... May 26 04:22:56 ispc maldet(221177): {sigup} local signature set is version 2017022510908 May 26 04:22:57 ispc maldet(221177): {sigup} could not download signature data from server, please try again later. May 26 04:23:01 ispc maldet(221264): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 26 04:23:05 ispc maldet(221264): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 26 04:23:05 ispc maldet(221264): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 26 04:23:05 ispc maldet(221264): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 26 04:23:05 ispc maldet(221264): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 26 04:54:25 ispc maldet(221264): {scan} file list completed in 1880s, found 59 files... May 26 04:54:25 ispc maldet(221264): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 26 04:54:25 ispc maldet(221264): {scan} scan of (59 files) in progress... May 26 04:54:27 ispc maldet(221264): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 1885s May 26 04:54:27 ispc maldet(221264): {scan} scan report saved, to view run: maldet --report 250526-0422.221264 May 27 04:12:11 ispc maldet(436240): {update} checking for available updates... May 27 04:12:11 ispc maldet(436240): {update} could not download version file from server, please try again later. May 27 04:12:15 ispc maldet(436317): {sigup} performing signature update check... May 27 04:12:16 ispc maldet(436317): {sigup} local signature set is version 2017022510908 May 27 04:12:16 ispc maldet(436317): {sigup} could not download signature data from server, please try again later. May 27 04:12:20 ispc maldet(436401): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 27 04:12:21 ispc maldet(436401): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 27 04:12:21 ispc maldet(436401): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 27 04:12:21 ispc maldet(436401): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 27 04:12:22 ispc maldet(436401): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 27 04:46:53 ispc maldet(436401): {scan} file list completed in 2070s, found 50 files... May 27 04:46:53 ispc maldet(436401): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 27 04:46:53 ispc maldet(436401): {scan} scan of (50 files) in progress... May 27 04:46:57 ispc maldet(436401): {scan} scan completed on : files 50, malware hits 0, cleaned hits 0, time 2076s May 27 04:46:57 ispc maldet(436401): {scan} scan report saved, to view run: maldet --report 250527-0412.436401 May 28 04:14:39 ispc maldet(654591): {update} checking for available updates... May 28 04:14:40 ispc maldet(654591): {update} could not download version file from server, please try again later. May 28 04:14:44 ispc maldet(654667): {sigup} performing signature update check... May 28 04:14:44 ispc maldet(654667): {sigup} local signature set is version 2017022510908 May 28 04:14:44 ispc maldet(654667): {sigup} could not download signature data from server, please try again later. May 28 04:14:47 ispc maldet(654752): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 28 04:14:52 ispc maldet(654752): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 28 04:14:53 ispc maldet(654752): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 28 04:14:53 ispc maldet(654752): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 28 04:14:53 ispc maldet(654752): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 28 04:59:20 ispc maldet(654752): {scan} file list completed in 2667s, found 56 files... May 28 04:59:20 ispc maldet(654752): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 28 04:59:21 ispc maldet(654752): {scan} scan of (56 files) in progress... May 28 04:59:23 ispc maldet(654752): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2675s May 28 04:59:23 ispc maldet(654752): {scan} scan report saved, to view run: maldet --report 250528-0414.654752 May 29 04:13:03 ispc maldet(861448): {update} checking for available updates... May 29 04:13:04 ispc maldet(861448): {update} could not download version file from server, please try again later. May 29 04:13:08 ispc maldet(861534): {sigup} performing signature update check... May 29 04:13:08 ispc maldet(861534): {sigup} local signature set is version 2017022510908 May 29 04:13:09 ispc maldet(861534): {sigup} could not download signature data from server, please try again later. May 29 04:13:13 ispc maldet(861625): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 29 04:13:16 ispc maldet(861625): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 29 04:13:16 ispc maldet(861625): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 29 04:13:16 ispc maldet(861625): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 29 04:13:17 ispc maldet(861625): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 29 04:52:07 ispc maldet(861625): {scan} file list completed in 2331s, found 57 files... May 29 04:52:07 ispc maldet(861625): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 29 04:52:08 ispc maldet(861625): {scan} scan of (57 files) in progress... May 29 04:52:10 ispc maldet(861625): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 2336s May 29 04:52:10 ispc maldet(861625): {scan} scan report saved, to view run: maldet --report 250529-0413.861625 May 30 04:13:03 ispc maldet(1070057): {update} checking for available updates... May 30 04:13:04 ispc maldet(1070057): {update} could not download version file from server, please try again later. May 30 04:13:08 ispc maldet(1070143): {sigup} performing signature update check... May 30 04:13:08 ispc maldet(1070143): {sigup} local signature set is version 2017022510908 May 30 04:13:08 ispc maldet(1070143): {sigup} could not download signature data from server, please try again later. May 30 04:13:11 ispc maldet(1070230): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 30 04:13:16 ispc maldet(1070230): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 30 04:13:16 ispc maldet(1070230): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 30 04:13:16 ispc maldet(1070230): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 30 04:13:17 ispc maldet(1070230): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 30 04:53:06 ispc maldet(1070230): {scan} file list completed in 2388s, found 58 files... May 30 04:53:06 ispc maldet(1070230): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 30 04:53:06 ispc maldet(1070230): {scan} scan of (58 files) in progress... May 30 04:53:09 ispc maldet(1070230): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 2397s May 30 04:53:09 ispc maldet(1070230): {scan} scan report saved, to view run: maldet --report 250530-0413.1070230 May 31 04:13:14 ispc maldet(1286752): {update} checking for available updates... May 31 04:13:15 ispc maldet(1286752): {update} could not download version file from server, please try again later. May 31 04:13:17 ispc maldet(1286826): {sigup} performing signature update check... May 31 04:13:18 ispc maldet(1286826): {sigup} local signature set is version 2017022510908 May 31 04:13:18 ispc maldet(1286826): {sigup} could not download signature data from server, please try again later. May 31 04:13:22 ispc maldet(1286914): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 31 04:13:27 ispc maldet(1286914): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) May 31 04:13:27 ispc maldet(1286914): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 31 04:13:27 ispc maldet(1286914): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 31 04:13:28 ispc maldet(1286914): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 31 04:49:48 ispc maldet(1286914): {scan} file list completed in 2180s, found 71 files... May 31 04:49:48 ispc maldet(1286914): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... May 31 04:49:49 ispc maldet(1286914): {scan} scan of (71 files) in progress... May 31 04:49:52 ispc maldet(1286914): {scan} scan completed on : files 71, malware hits 0, cleaned hits 0, time 2189s May 31 04:49:52 ispc maldet(1286914): {scan} scan report saved, to view run: maldet --report 250531-0413.1286914 Jun 01 04:27:27 ispc maldet(1501223): {update} checking for available updates... Jun 01 04:27:27 ispc maldet(1501223): {update} could not download version file from server, please try again later. Jun 01 04:27:32 ispc maldet(1501300): {sigup} performing signature update check... Jun 01 04:27:32 ispc maldet(1501300): {sigup} local signature set is version 2017022510908 Jun 01 04:27:33 ispc maldet(1501300): {sigup} could not download signature data from server, please try again later. Jun 01 04:27:37 ispc maldet(1501388): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 01 04:27:42 ispc maldet(1501388): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 01 04:27:42 ispc maldet(1501388): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 01 04:27:43 ispc maldet(1501388): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 01 04:27:43 ispc maldet(1501388): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 01 05:01:32 ispc maldet(1501388): {scan} file list completed in 2029s, found 65 files... Jun 01 05:01:33 ispc maldet(1501388): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 01 05:01:33 ispc maldet(1501388): {scan} scan of (65 files) in progress... Jun 01 05:01:36 ispc maldet(1501388): {scan} scan completed on : files 65, malware hits 0, cleaned hits 0, time 2038s Jun 01 05:01:36 ispc maldet(1501388): {scan} scan report saved, to view run: maldet --report 250601-0427.1501388 Jun 02 04:09:47 ispc maldet(1653403): {update} checking for available updates... Jun 02 04:09:48 ispc maldet(1653403): {update} could not download version file from server, please try again later. Jun 02 04:09:52 ispc maldet(1653477): {sigup} performing signature update check... Jun 02 04:09:52 ispc maldet(1653477): {sigup} local signature set is version 2017022510908 Jun 02 04:09:53 ispc maldet(1653477): {sigup} could not download signature data from server, please try again later. Jun 02 04:09:57 ispc maldet(1653563): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 02 04:10:02 ispc maldet(1653563): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 02 04:10:02 ispc maldet(1653563): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 02 04:10:02 ispc maldet(1653563): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 02 04:10:02 ispc maldet(1653563): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 02 04:41:54 ispc maldet(1653563): {scan} file list completed in 1912s, found 63 files... Jun 02 04:41:55 ispc maldet(1653563): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 02 04:41:55 ispc maldet(1653563): {scan} scan of (63 files) in progress... Jun 02 04:41:57 ispc maldet(1653563): {scan} scan completed on : files 63, malware hits 0, cleaned hits 0, time 1920s Jun 02 04:41:57 ispc maldet(1653563): {scan} scan report saved, to view run: maldet --report 250602-0409.1653563 Jun 03 04:22:20 ispc maldet(1864053): {update} checking for available updates... Jun 03 04:22:20 ispc maldet(1864053): {update} could not download version file from server, please try again later. Jun 03 04:22:25 ispc maldet(1864125): {sigup} performing signature update check... Jun 03 04:22:25 ispc maldet(1864125): {sigup} local signature set is version 2017022510908 Jun 03 04:22:26 ispc maldet(1864125): {sigup} could not download signature data from server, please try again later. Jun 03 04:22:31 ispc maldet(1864222): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 03 04:22:37 ispc maldet(1864222): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 03 04:22:38 ispc maldet(1864222): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 03 04:22:38 ispc maldet(1864222): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 03 04:22:38 ispc maldet(1864222): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 03 04:54:58 ispc maldet(1864222): {scan} file list completed in 1939s, found 57 files... Jun 03 04:54:58 ispc maldet(1864222): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 03 04:54:58 ispc maldet(1864222): {scan} scan of (57 files) in progress... Jun 03 04:55:01 ispc maldet(1864222): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 1949s Jun 03 04:55:01 ispc maldet(1864222): {scan} scan report saved, to view run: maldet --report 250603-0422.1864222 Jun 04 04:11:40 ispc maldet(2047084): {update} checking for available updates... Jun 04 04:11:40 ispc maldet(2047084): {update} could not download version file from server, please try again later. Jun 04 04:11:45 ispc maldet(2047161): {sigup} performing signature update check... Jun 04 04:11:45 ispc maldet(2047161): {sigup} local signature set is version 2017022510908 Jun 04 04:11:46 ispc maldet(2047161): {sigup} could not download signature data from server, please try again later. Jun 04 04:11:50 ispc maldet(2047242): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 04 04:11:56 ispc maldet(2047242): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 04 04:11:56 ispc maldet(2047242): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 04 04:11:56 ispc maldet(2047242): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 04 04:11:56 ispc maldet(2047242): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 04 05:19:15 ispc maldet(2047242): {scan} file list completed in 4039s, found 50 files... Jun 04 05:19:15 ispc maldet(2047242): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 04 05:19:15 ispc maldet(2047242): {scan} scan of (50 files) in progress... Jun 04 05:19:17 ispc maldet(2047242): {scan} scan completed on : files 50, malware hits 0, cleaned hits 0, time 4045s Jun 04 05:19:17 ispc maldet(2047242): {scan} scan report saved, to view run: maldet --report 250604-0411.2047242 Jun 05 04:11:21 ispc maldet(2229460): {update} checking for available updates... Jun 05 04:11:21 ispc maldet(2229460): {update} could not download version file from server, please try again later. Jun 05 04:11:26 ispc maldet(2229537): {sigup} performing signature update check... Jun 05 04:11:26 ispc maldet(2229537): {sigup} local signature set is version 2017022510908 Jun 05 04:11:27 ispc maldet(2229537): {sigup} could not download signature data from server, please try again later. Jun 05 04:11:30 ispc maldet(2229621): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 05 04:11:37 ispc maldet(2229621): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 05 04:11:37 ispc maldet(2229621): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 05 04:11:37 ispc maldet(2229621): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 05 04:11:38 ispc maldet(2229621): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 05 04:43:50 ispc maldet(2229621): {scan} file list completed in 1933s, found 56 files... Jun 05 04:43:51 ispc maldet(2229621): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 05 04:43:51 ispc maldet(2229621): {scan} scan of (56 files) in progress... Jun 05 04:43:55 ispc maldet(2229621): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 1943s Jun 05 04:43:55 ispc maldet(2229621): {scan} scan report saved, to view run: maldet --report 250605-0411.2229621 Jun 06 04:22:25 ispc maldet(2422870): {update} checking for available updates... Jun 06 04:22:26 ispc maldet(2422870): {update} could not download version file from server, please try again later. Jun 06 04:22:30 ispc maldet(2422943): {sigup} performing signature update check... Jun 06 04:22:30 ispc maldet(2422943): {sigup} local signature set is version 2017022510908 Jun 06 04:22:30 ispc maldet(2422943): {sigup} could not download signature data from server, please try again later. Jun 06 04:22:33 ispc maldet(2423028): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 06 04:22:39 ispc maldet(2423028): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 06 04:22:39 ispc maldet(2423028): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 06 04:22:39 ispc maldet(2423028): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 06 04:22:40 ispc maldet(2423028): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 06 04:55:52 ispc maldet(2423028): {scan} file list completed in 1992s, found 52 files... Jun 06 04:55:52 ispc maldet(2423028): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 06 04:55:52 ispc maldet(2423028): {scan} scan of (52 files) in progress... Jun 06 04:55:56 ispc maldet(2423028): {scan} scan completed on : files 52, malware hits 0, cleaned hits 0, time 2001s Jun 06 04:55:56 ispc maldet(2423028): {scan} scan report saved, to view run: maldet --report 250606-0422.2423028 Jun 07 04:09:16 ispc maldet(2609681): {update} checking for available updates... Jun 07 04:09:17 ispc maldet(2609681): {update} could not download version file from server, please try again later. Jun 07 04:09:20 ispc maldet(2609753): {sigup} performing signature update check... Jun 07 04:09:20 ispc maldet(2609753): {sigup} local signature set is version 2017022510908 Jun 07 04:09:21 ispc maldet(2609753): {sigup} could not download signature data from server, please try again later. Jun 07 04:09:25 ispc maldet(2609835): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 07 04:09:31 ispc maldet(2609835): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 07 04:09:31 ispc maldet(2609835): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 07 04:09:32 ispc maldet(2609835): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 07 04:09:32 ispc maldet(2609835): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 07 04:45:04 ispc maldet(2609835): {scan} file list completed in 2131s, found 57 files... Jun 07 04:45:04 ispc maldet(2609835): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 07 04:45:05 ispc maldet(2609835): {scan} scan of (57 files) in progress... Jun 07 04:45:07 ispc maldet(2609835): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 2140s Jun 07 04:45:07 ispc maldet(2609835): {scan} scan report saved, to view run: maldet --report 250607-0409.2609835 Jun 08 04:12:34 ispc maldet(2795166): {update} checking for available updates... Jun 08 04:12:34 ispc maldet(2795166): {update} could not download version file from server, please try again later. Jun 08 04:12:37 ispc maldet(2795243): {sigup} performing signature update check... Jun 08 04:12:38 ispc maldet(2795243): {sigup} local signature set is version 2017022510908 Jun 08 04:12:39 ispc maldet(2795243): {sigup} could not download signature data from server, please try again later. Jun 08 04:12:43 ispc maldet(2795325): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 08 04:12:48 ispc maldet(2795325): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 08 04:12:48 ispc maldet(2795325): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 08 04:12:49 ispc maldet(2795325): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 08 04:12:49 ispc maldet(2795325): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 08 04:51:24 ispc maldet(2795325): {scan} file list completed in 2315s, found 58 files... Jun 08 04:51:24 ispc maldet(2795325): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 08 04:51:24 ispc maldet(2795325): {scan} scan of (58 files) in progress... Jun 08 04:51:28 ispc maldet(2795325): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 2324s Jun 08 04:51:28 ispc maldet(2795325): {scan} scan report saved, to view run: maldet --report 250608-0412.2795325 Jun 09 04:10:51 ispc maldet(2974869): {update} checking for available updates... Jun 09 04:10:51 ispc maldet(2974869): {update} could not download version file from server, please try again later. Jun 09 04:10:55 ispc maldet(2974941): {sigup} performing signature update check... Jun 09 04:10:56 ispc maldet(2974941): {sigup} local signature set is version 2017022510908 Jun 09 04:10:56 ispc maldet(2974941): {sigup} could not download signature data from server, please try again later. Jun 09 04:11:00 ispc maldet(2975027): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 09 04:11:06 ispc maldet(2975027): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 09 04:11:06 ispc maldet(2975027): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 09 04:11:06 ispc maldet(2975027): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 09 04:11:06 ispc maldet(2975027): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 09 04:56:19 ispc maldet(2975027): {scan} file list completed in 2713s, found 60 files... Jun 09 04:56:19 ispc maldet(2975027): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 09 04:56:19 ispc maldet(2975027): {scan} scan of (60 files) in progress... Jun 09 04:56:22 ispc maldet(2975027): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 2721s Jun 09 04:56:22 ispc maldet(2975027): {scan} scan report saved, to view run: maldet --report 250609-0410.2975027 Jun 10 04:11:46 ispc maldet(3151409): {update} checking for available updates... Jun 10 04:11:47 ispc maldet(3151409): {update} could not download version file from server, please try again later. Jun 10 04:11:51 ispc maldet(3151486): {sigup} performing signature update check... Jun 10 04:11:51 ispc maldet(3151486): {sigup} local signature set is version 2017022510908 Jun 10 04:11:52 ispc maldet(3151486): {sigup} could not download signature data from server, please try again later. Jun 10 04:11:54 ispc maldet(3151567): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 10 04:11:59 ispc maldet(3151567): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 10 04:11:59 ispc maldet(3151567): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 10 04:12:00 ispc maldet(3151567): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 10 04:12:00 ispc maldet(3151567): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 10 04:41:22 ispc maldet(3151567): {scan} file list completed in 1762s, found 53 files... Jun 10 04:41:23 ispc maldet(3151567): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 10 04:41:23 ispc maldet(3151567): {scan} scan of (53 files) in progress... Jun 10 04:41:25 ispc maldet(3151567): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 1770s Jun 10 04:41:26 ispc maldet(3151567): {scan} scan report saved, to view run: maldet --report 250610-0411.3151567 Jun 11 04:15:27 ispc maldet(3326727): {update} checking for available updates... Jun 11 04:15:28 ispc maldet(3326727): {update} could not download version file from server, please try again later. Jun 11 04:15:32 ispc maldet(3326799): {sigup} performing signature update check... Jun 11 04:15:32 ispc maldet(3326799): {sigup} local signature set is version 2017022510908 Jun 11 04:15:33 ispc maldet(3326799): {sigup} could not download signature data from server, please try again later. Jun 11 04:15:37 ispc maldet(3326885): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 11 04:15:43 ispc maldet(3326885): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 11 04:15:43 ispc maldet(3326885): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 11 04:15:43 ispc maldet(3326885): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 11 04:15:44 ispc maldet(3326885): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 11 04:43:46 ispc maldet(3326885): {scan} file list completed in 1683s, found 58 files... Jun 11 04:43:46 ispc maldet(3326885): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 11 04:43:47 ispc maldet(3326885): {scan} scan of (58 files) in progress... Jun 11 04:43:50 ispc maldet(3326885): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 1692s Jun 11 04:43:50 ispc maldet(3326885): {scan} scan report saved, to view run: maldet --report 250611-0415.3326885 Jun 12 04:22:03 ispc maldet(3505647): {update} checking for available updates... Jun 12 04:22:03 ispc maldet(3505647): {update} could not download version file from server, please try again later. Jun 12 04:22:07 ispc maldet(3505735): {sigup} performing signature update check... Jun 12 04:22:08 ispc maldet(3505735): {sigup} local signature set is version 2017022510908 Jun 12 04:22:08 ispc maldet(3505735): {sigup} could not download signature data from server, please try again later. Jun 12 04:22:12 ispc maldet(3505816): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 12 04:22:17 ispc maldet(3505816): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 12 04:22:17 ispc maldet(3505816): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 12 04:22:17 ispc maldet(3505816): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 12 04:22:18 ispc maldet(3505816): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 12 04:49:35 ispc maldet(3505816): {scan} file list completed in 1638s, found 58 files... Jun 12 04:49:36 ispc maldet(3505816): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 12 04:49:36 ispc maldet(3505816): {scan} scan of (58 files) in progress... Jun 12 04:49:38 ispc maldet(3505816): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 1646s Jun 12 04:49:38 ispc maldet(3505816): {scan} scan report saved, to view run: maldet --report 250612-0422.3505816 Jun 13 04:08:00 ispc maldet(3674552): {update} checking for available updates... Jun 13 04:08:00 ispc maldet(3674552): {update} could not download version file from server, please try again later. Jun 13 04:08:05 ispc maldet(3674629): {sigup} performing signature update check... Jun 13 04:08:05 ispc maldet(3674629): {sigup} local signature set is version 2017022510908 Jun 13 04:08:05 ispc maldet(3674629): {sigup} could not download signature data from server, please try again later. Jun 13 04:08:09 ispc maldet(3674721): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 13 04:08:14 ispc maldet(3674721): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 13 04:08:14 ispc maldet(3674721): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 13 04:08:14 ispc maldet(3674721): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 13 04:08:15 ispc maldet(3674721): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 13 04:41:27 ispc maldet(3674721): {scan} file list completed in 1992s, found 51 files... Jun 13 04:41:28 ispc maldet(3674721): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 13 04:41:28 ispc maldet(3674721): {scan} scan of (51 files) in progress... Jun 13 04:41:31 ispc maldet(3674721): {scan} scan completed on : files 51, malware hits 0, cleaned hits 0, time 2001s Jun 13 04:41:31 ispc maldet(3674721): {scan} scan report saved, to view run: maldet --report 250613-0408.3674721 Jun 14 04:21:25 ispc maldet(3848697): {update} checking for available updates... Jun 14 04:21:26 ispc maldet(3848697): {update} could not download version file from server, please try again later. Jun 14 04:21:29 ispc maldet(3848769): {sigup} performing signature update check... Jun 14 04:21:29 ispc maldet(3848769): {sigup} local signature set is version 2017022510908 Jun 14 04:21:30 ispc maldet(3848769): {sigup} could not download signature data from server, please try again later. Jun 14 04:21:34 ispc maldet(3848850): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 14 04:21:38 ispc maldet(3848850): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 14 04:21:39 ispc maldet(3848850): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 14 04:21:39 ispc maldet(3848850): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 14 04:21:39 ispc maldet(3848850): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 14 05:09:55 ispc maldet(3848850): {scan} file list completed in 2896s, found 53 files... Jun 14 05:09:56 ispc maldet(3848850): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 14 05:09:56 ispc maldet(3848850): {scan} scan of (53 files) in progress... Jun 14 05:09:58 ispc maldet(3848850): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 2903s Jun 14 05:09:58 ispc maldet(3848850): {scan} scan report saved, to view run: maldet --report 250614-0421.3848850 Jun 15 04:11:55 ispc maldet(4017241): {update} checking for available updates... Jun 15 04:11:55 ispc maldet(4017241): {update} could not download version file from server, please try again later. Jun 15 04:11:59 ispc maldet(4017317): {sigup} performing signature update check... Jun 15 04:12:00 ispc maldet(4017317): {sigup} local signature set is version 2017022510908 Jun 15 04:12:00 ispc maldet(4017317): {sigup} could not download signature data from server, please try again later. Jun 15 04:12:04 ispc maldet(4017398): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 15 04:12:10 ispc maldet(4017398): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 15 04:12:10 ispc maldet(4017398): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 15 04:12:11 ispc maldet(4017398): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 15 04:12:11 ispc maldet(4017398): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 15 04:43:25 ispc maldet(4017398): {scan} file list completed in 1873s, found 62 files... Jun 15 04:43:25 ispc maldet(4017398): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 15 04:43:26 ispc maldet(4017398): {scan} scan of (62 files) in progress... Jun 15 04:43:28 ispc maldet(4017398): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 1882s Jun 15 04:43:28 ispc maldet(4017398): {scan} scan report saved, to view run: maldet --report 250615-0412.4017398 Jun 16 04:10:10 ispc maldet(4189937): {update} checking for available updates... Jun 16 04:10:11 ispc maldet(4189937): {update} could not download version file from server, please try again later. Jun 16 04:10:14 ispc maldet(4190011): {sigup} performing signature update check... Jun 16 04:10:14 ispc maldet(4190011): {sigup} local signature set is version 2017022510908 Jun 16 04:10:15 ispc maldet(4190011): {sigup} could not download signature data from server, please try again later. Jun 16 04:10:18 ispc maldet(4190097): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 16 04:10:21 ispc maldet(4190097): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 16 04:10:22 ispc maldet(4190097): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 16 04:10:22 ispc maldet(4190097): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 16 04:10:22 ispc maldet(4190097): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 16 04:45:22 ispc maldet(4190097): {scan} file list completed in 2100s, found 58 files... Jun 16 04:45:22 ispc maldet(4190097): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 16 04:45:23 ispc maldet(4190097): {scan} scan of (58 files) in progress... Jun 16 04:45:25 ispc maldet(4190097): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 2107s Jun 16 04:45:26 ispc maldet(4190097): {scan} scan report saved, to view run: maldet --report 250616-0410.4190097 Jun 17 04:12:48 ispc maldet(181452): {update} checking for available updates... Jun 17 04:12:48 ispc maldet(181452): {update} could not download version file from server, please try again later. Jun 17 04:12:52 ispc maldet(181526): {sigup} performing signature update check... Jun 17 04:12:52 ispc maldet(181526): {sigup} local signature set is version 2017022510908 Jun 17 04:12:53 ispc maldet(181526): {sigup} could not download signature data from server, please try again later. Jun 17 04:12:57 ispc maldet(181609): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 17 04:13:03 ispc maldet(181609): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 17 04:13:04 ispc maldet(181609): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 17 04:13:04 ispc maldet(181609): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 17 04:13:04 ispc maldet(181609): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 17 04:47:18 ispc maldet(181609): {scan} file list completed in 2053s, found 55 files... Jun 17 04:47:18 ispc maldet(181609): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 17 04:47:18 ispc maldet(181609): {scan} scan of (55 files) in progress... Jun 17 04:47:21 ispc maldet(181609): {scan} scan completed on : files 55, malware hits 0, cleaned hits 0, time 2062s Jun 17 04:47:21 ispc maldet(181609): {scan} scan report saved, to view run: maldet --report 250617-0412.181609 Jun 18 04:12:00 ispc maldet(365635): {update} checking for available updates... Jun 18 04:12:01 ispc maldet(365635): {update} could not download version file from server, please try again later. Jun 18 04:12:05 ispc maldet(365711): {sigup} performing signature update check... Jun 18 04:12:05 ispc maldet(365711): {sigup} local signature set is version 2017022510908 Jun 18 04:12:06 ispc maldet(365711): {sigup} could not download signature data from server, please try again later. Jun 18 04:12:10 ispc maldet(365802): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 18 04:12:15 ispc maldet(365802): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 18 04:12:15 ispc maldet(365802): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 18 04:12:16 ispc maldet(365802): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 18 04:12:16 ispc maldet(365802): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 18 04:45:26 ispc maldet(365802): {scan} file list completed in 1989s, found 58 files... Jun 18 04:45:26 ispc maldet(365802): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 18 04:45:27 ispc maldet(365802): {scan} scan of (58 files) in progress... Jun 18 04:45:28 ispc maldet(365802): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 1996s Jun 18 04:45:28 ispc maldet(365802): {scan} scan report saved, to view run: maldet --report 250618-0412.365802 Jun 19 04:10:49 ispc maldet(496345): {update} checking for available updates... Jun 19 04:10:50 ispc maldet(496345): {update} could not download version file from server, please try again later. Jun 19 04:10:54 ispc maldet(496420): {sigup} performing signature update check... Jun 19 04:10:54 ispc maldet(496420): {sigup} local signature set is version 2017022510908 Jun 19 04:10:55 ispc maldet(496420): {sigup} could not download signature data from server, please try again later. Jun 19 04:10:59 ispc maldet(496509): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 19 04:11:06 ispc maldet(496509): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 19 04:11:06 ispc maldet(496509): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 19 04:11:06 ispc maldet(496509): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 19 04:11:07 ispc maldet(496509): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 19 04:43:29 ispc maldet(496509): {scan} file list completed in 1942s, found 60 files... Jun 19 04:43:29 ispc maldet(496509): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 19 04:43:29 ispc maldet(496509): {scan} scan of (60 files) in progress... Jun 19 04:43:31 ispc maldet(496509): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 1950s Jun 19 04:43:31 ispc maldet(496509): {scan} scan report saved, to view run: maldet --report 250619-0410.496509 Jun 20 04:09:46 ispc maldet(625884): {update} checking for available updates... Jun 20 04:09:46 ispc maldet(625884): {update} could not download version file from server, please try again later. Jun 20 04:09:49 ispc maldet(625960): {sigup} performing signature update check... Jun 20 04:09:50 ispc maldet(625960): {sigup} local signature set is version 2017022510908 Jun 20 04:09:50 ispc maldet(625960): {sigup} could not download signature data from server, please try again later. Jun 20 04:09:55 ispc maldet(626043): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 20 04:10:00 ispc maldet(626043): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 20 04:10:00 ispc maldet(626043): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 20 04:10:01 ispc maldet(626043): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 20 04:10:01 ispc maldet(626043): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 20 04:46:13 ispc maldet(626043): {scan} file list completed in 2171s, found 58 files... Jun 20 04:46:13 ispc maldet(626043): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 20 04:46:14 ispc maldet(626043): {scan} scan of (58 files) in progress... Jun 20 04:46:16 ispc maldet(626043): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 2180s Jun 20 04:46:16 ispc maldet(626043): {scan} scan report saved, to view run: maldet --report 250620-0409.626043 Jun 21 04:12:07 ispc maldet(812998): {update} checking for available updates... Jun 21 04:12:08 ispc maldet(812998): {update} could not download version file from server, please try again later. Jun 21 04:12:12 ispc maldet(813071): {sigup} performing signature update check... Jun 21 04:12:12 ispc maldet(813071): {sigup} local signature set is version 2017022510908 Jun 21 04:12:13 ispc maldet(813071): {sigup} could not download signature data from server, please try again later. Jun 21 04:12:17 ispc maldet(813157): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 21 04:12:23 ispc maldet(813157): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 21 04:12:23 ispc maldet(813157): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 21 04:12:23 ispc maldet(813157): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 21 04:12:23 ispc maldet(813157): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 21 04:44:02 ispc maldet(813157): {scan} file list completed in 1899s, found 61 files... Jun 21 04:44:02 ispc maldet(813157): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 21 04:44:03 ispc maldet(813157): {scan} scan of (61 files) in progress... Jun 21 04:44:05 ispc maldet(813157): {scan} scan completed on : files 61, malware hits 0, cleaned hits 0, time 1906s Jun 21 04:44:06 ispc maldet(813157): {scan} scan report saved, to view run: maldet --report 250621-0412.813157 Jun 22 04:13:46 ispc maldet(999207): {update} checking for available updates... Jun 22 04:13:47 ispc maldet(999207): {update} could not download version file from server, please try again later. Jun 22 04:13:51 ispc maldet(999281): {sigup} performing signature update check... Jun 22 04:13:51 ispc maldet(999281): {sigup} local signature set is version 2017022510908 Jun 22 04:13:51 ispc maldet(999281): {sigup} could not download signature data from server, please try again later. Jun 22 04:13:56 ispc maldet(999364): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 22 04:14:03 ispc maldet(999364): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 22 04:14:03 ispc maldet(999364): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 22 04:14:03 ispc maldet(999364): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 22 04:14:04 ispc maldet(999364): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 22 04:46:12 ispc maldet(999364): {scan} file list completed in 1927s, found 64 files... Jun 22 04:46:13 ispc maldet(999364): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 22 04:46:13 ispc maldet(999364): {scan} scan of (64 files) in progress... Jun 22 04:46:14 ispc maldet(999364): {scan} scan completed on : files 64, malware hits 0, cleaned hits 0, time 1938s Jun 22 04:46:15 ispc maldet(999364): {scan} scan report saved, to view run: maldet --report 250622-0413.999364 Jun 23 04:10:03 ispc maldet(1126234): {update} checking for available updates... Jun 23 04:10:03 ispc maldet(1126234): {update} could not download version file from server, please try again later. Jun 23 04:10:07 ispc maldet(1126373): {sigup} performing signature update check... Jun 23 04:10:08 ispc maldet(1126373): {sigup} local signature set is version 2017022510908 Jun 23 04:10:08 ispc maldet(1126373): {sigup} could not download signature data from server, please try again later. Jun 23 04:10:13 ispc maldet(1126473): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 23 04:10:19 ispc maldet(1126473): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 23 04:10:19 ispc maldet(1126473): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 23 04:10:20 ispc maldet(1126473): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 23 04:10:20 ispc maldet(1126473): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 23 05:56:52 ispc maldet(1126473): {scan} file list completed in 6391s, found 68 files... Jun 23 05:56:52 ispc maldet(1126473): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 23 05:56:53 ispc maldet(1126473): {scan} scan of (68 files) in progress... Jun 23 05:56:55 ispc maldet(1126473): {scan} scan completed on : files 68, malware hits 0, cleaned hits 0, time 6401s Jun 23 05:56:56 ispc maldet(1126473): {scan} scan report saved, to view run: maldet --report 250623-0410.1126473 Jun 24 04:10:35 ispc maldet(1308388): {update} checking for available updates... Jun 24 04:10:36 ispc maldet(1308388): {update} could not download version file from server, please try again later. Jun 24 04:10:40 ispc maldet(1308467): {sigup} performing signature update check... Jun 24 04:10:40 ispc maldet(1308467): {sigup} local signature set is version 2017022510908 Jun 24 04:10:40 ispc maldet(1308467): {sigup} could not download signature data from server, please try again later. Jun 24 04:10:45 ispc maldet(1308553): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 24 04:10:51 ispc maldet(1308553): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 24 04:10:51 ispc maldet(1308553): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 24 04:10:52 ispc maldet(1308553): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 24 04:10:52 ispc maldet(1308553): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 24 04:55:02 ispc maldet(1308553): {scan} file list completed in 2650s, found 60 files... Jun 24 04:55:03 ispc maldet(1308553): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 24 04:55:03 ispc maldet(1308553): {scan} scan of (60 files) in progress... Jun 24 04:55:05 ispc maldet(1308553): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 2659s Jun 24 04:55:05 ispc maldet(1308553): {scan} scan report saved, to view run: maldet --report 250624-0410.1308553 Jun 25 04:11:03 ispc maldet(1487999): {update} checking for available updates... Jun 25 04:11:03 ispc maldet(1487999): {update} could not download version file from server, please try again later. Jun 25 04:11:08 ispc maldet(1488084): {sigup} performing signature update check... Jun 25 04:11:08 ispc maldet(1488084): {sigup} local signature set is version 2017022510908 Jun 25 04:11:09 ispc maldet(1488084): {sigup} could not download signature data from server, please try again later. Jun 25 04:11:13 ispc maldet(1488167): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 25 04:11:19 ispc maldet(1488167): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 25 04:11:19 ispc maldet(1488167): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 25 04:11:19 ispc maldet(1488167): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 25 04:11:20 ispc maldet(1488167): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 25 04:51:11 ispc maldet(1488167): {scan} file list completed in 2390s, found 60 files... Jun 25 04:51:11 ispc maldet(1488167): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 25 04:51:11 ispc maldet(1488167): {scan} scan of (60 files) in progress... Jun 25 04:51:15 ispc maldet(1488167): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 2400s Jun 25 04:51:15 ispc maldet(1488167): {scan} scan report saved, to view run: maldet --report 250625-0411.1488167 Jun 26 04:10:25 ispc maldet(1667737): {update} checking for available updates... Jun 26 04:10:25 ispc maldet(1667737): {update} could not download version file from server, please try again later. Jun 26 04:10:29 ispc maldet(1667818): {sigup} performing signature update check... Jun 26 04:10:29 ispc maldet(1667818): {sigup} local signature set is version 2017022510908 Jun 26 04:10:30 ispc maldet(1667818): {sigup} could not download signature data from server, please try again later. Jun 26 04:10:35 ispc maldet(1667900): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 26 04:10:41 ispc maldet(1667900): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 26 04:10:41 ispc maldet(1667900): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 26 04:10:41 ispc maldet(1667900): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 26 04:10:42 ispc maldet(1667900): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 26 05:59:58 ispc maldet(1667900): {scan} file list completed in 6556s, found 61 files... Jun 26 05:59:58 ispc maldet(1667900): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 26 05:59:58 ispc maldet(1667900): {scan} scan of (61 files) in progress... Jun 26 06:00:02 ispc maldet(1667900): {scan} scan completed on : files 61, malware hits 0, cleaned hits 0, time 6566s Jun 26 06:00:02 ispc maldet(1667900): {scan} scan report saved, to view run: maldet --report 250626-0410.1667900 Jun 27 04:16:13 ispc maldet(1847326): {update} checking for available updates... Jun 27 04:16:14 ispc maldet(1847326): {update} could not download version file from server, please try again later. Jun 27 04:16:18 ispc maldet(1847403): {sigup} performing signature update check... Jun 27 04:16:19 ispc maldet(1847403): {sigup} local signature set is version 2017022510908 Jun 27 04:16:19 ispc maldet(1847403): {sigup} could not download signature data from server, please try again later. Jun 27 04:16:24 ispc maldet(1847484): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 27 04:16:30 ispc maldet(1847484): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 27 04:16:31 ispc maldet(1847484): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 27 04:16:31 ispc maldet(1847484): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 27 04:16:31 ispc maldet(1847484): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 27 05:08:23 ispc maldet(1847484): {scan} file list completed in 3112s, found 66 files... Jun 27 05:08:23 ispc maldet(1847484): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 27 05:08:24 ispc maldet(1847484): {scan} scan of (66 files) in progress... Jun 27 05:08:27 ispc maldet(1847484): {scan} scan completed on : files 66, malware hits 0, cleaned hits 0, time 3123s Jun 27 05:08:28 ispc maldet(1847484): {scan} scan report saved, to view run: maldet --report 250627-0416.1847484 Jun 28 04:10:04 ispc maldet(2025950): {update} checking for available updates... Jun 28 04:10:04 ispc maldet(2025950): {update} could not download version file from server, please try again later. Jun 28 04:10:09 ispc maldet(2026100): {sigup} performing signature update check... Jun 28 04:10:09 ispc maldet(2026100): {sigup} local signature set is version 2017022510908 Jun 28 04:10:09 ispc maldet(2026100): {sigup} could not download signature data from server, please try again later. Jun 28 04:10:14 ispc maldet(2026187): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 28 04:10:20 ispc maldet(2026187): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 28 04:10:21 ispc maldet(2026187): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 28 04:10:21 ispc maldet(2026187): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 28 04:10:22 ispc maldet(2026187): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 28 04:59:17 ispc maldet(2026187): {scan} file list completed in 2936s, found 57 files... Jun 28 04:59:18 ispc maldet(2026187): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 28 04:59:18 ispc maldet(2026187): {scan} scan of (57 files) in progress... Jun 28 04:59:21 ispc maldet(2026187): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 2946s Jun 28 04:59:22 ispc maldet(2026187): {scan} scan report saved, to view run: maldet --report 250628-0410.2026187 Jun 29 04:24:41 ispc maldet(2203452): {update} checking for available updates... Jun 29 04:24:42 ispc maldet(2203452): {update} could not download version file from server, please try again later. Jun 29 04:24:46 ispc maldet(2203525): {sigup} performing signature update check... Jun 29 04:24:46 ispc maldet(2203525): {sigup} local signature set is version 2017022510908 Jun 29 04:24:47 ispc maldet(2203525): {sigup} could not download signature data from server, please try again later. Jun 29 04:24:52 ispc maldet(2203610): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 29 04:24:58 ispc maldet(2203610): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 29 04:24:58 ispc maldet(2203610): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 29 04:24:58 ispc maldet(2203610): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 29 04:24:59 ispc maldet(2203610): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 29 05:06:40 ispc maldet(2203610): {scan} file list completed in 2501s, found 62 files... Jun 29 05:06:40 ispc maldet(2203610): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 29 05:06:41 ispc maldet(2203610): {scan} scan of (62 files) in progress... Jun 29 05:06:44 ispc maldet(2203610): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 2511s Jun 29 05:06:45 ispc maldet(2203610): {scan} scan report saved, to view run: maldet --report 250629-0424.2203610 Jun 30 04:09:30 ispc maldet(2378286): {update} checking for available updates... Jun 30 04:09:31 ispc maldet(2378286): {update} could not download version file from server, please try again later. Jun 30 04:09:35 ispc maldet(2378358): {sigup} performing signature update check... Jun 30 04:09:35 ispc maldet(2378358): {sigup} local signature set is version 2017022510908 Jun 30 04:09:36 ispc maldet(2378358): {sigup} could not download signature data from server, please try again later. Jun 30 04:09:40 ispc maldet(2378443): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 30 04:09:46 ispc maldet(2378443): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jun 30 04:09:47 ispc maldet(2378443): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 30 04:09:47 ispc maldet(2378443): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 30 04:09:47 ispc maldet(2378443): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 30 04:51:00 ispc maldet(2378443): {scan} file list completed in 2473s, found 56 files... Jun 30 04:51:01 ispc maldet(2378443): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jun 30 04:51:01 ispc maldet(2378443): {scan} scan of (56 files) in progress... Jun 30 04:51:03 ispc maldet(2378443): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2481s Jun 30 04:51:03 ispc maldet(2378443): {scan} scan report saved, to view run: maldet --report 250630-0409.2378443 Jul 01 04:29:01 ispc maldet(2551525): {update} checking for available updates... Jul 01 04:29:01 ispc maldet(2551525): {update} could not download version file from server, please try again later. Jul 01 04:29:04 ispc maldet(2551609): {sigup} performing signature update check... Jul 01 04:29:04 ispc maldet(2551609): {sigup} local signature set is version 2017022510908 Jul 01 04:29:05 ispc maldet(2551609): {sigup} could not download signature data from server, please try again later. Jul 01 04:29:09 ispc maldet(2551694): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 01 04:29:15 ispc maldet(2551694): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 01 04:29:16 ispc maldet(2551694): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 01 04:29:16 ispc maldet(2551694): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 01 04:29:16 ispc maldet(2551694): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 01 04:53:17 ispc maldet(2551694): {scan} file list completed in 1441s, found 64 files... Jul 01 04:53:17 ispc maldet(2551694): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 01 04:53:18 ispc maldet(2551694): {scan} scan of (64 files) in progress... Jul 01 04:53:21 ispc maldet(2551694): {scan} scan completed on : files 64, malware hits 0, cleaned hits 0, time 1451s Jul 01 04:53:21 ispc maldet(2551694): {scan} scan report saved, to view run: maldet --report 250701-0429.2551694 Jul 02 04:11:56 ispc maldet(2726303): {update} checking for available updates... Jul 02 04:11:56 ispc maldet(2726303): {update} could not download version file from server, please try again later. Jul 02 04:12:00 ispc maldet(2726376): {sigup} performing signature update check... Jul 02 04:12:01 ispc maldet(2726376): {sigup} local signature set is version 2017022510908 Jul 02 04:12:01 ispc maldet(2726376): {sigup} could not download signature data from server, please try again later. Jul 02 04:12:05 ispc maldet(2726472): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 02 04:12:11 ispc maldet(2726472): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 02 04:12:11 ispc maldet(2726472): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 02 04:12:12 ispc maldet(2726472): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 02 04:12:12 ispc maldet(2726472): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 02 04:49:57 ispc maldet(2726472): {scan} file list completed in 2264s, found 56 files... Jul 02 04:49:57 ispc maldet(2726472): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 02 04:49:57 ispc maldet(2726472): {scan} scan of (56 files) in progress... Jul 02 04:50:01 ispc maldet(2726472): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2275s Jul 02 04:50:01 ispc maldet(2726472): {scan} scan report saved, to view run: maldet --report 250702-0412.2726472 Jul 03 04:19:20 ispc maldet(2905766): {update} checking for available updates... Jul 03 04:19:20 ispc maldet(2905766): {update} could not download version file from server, please try again later. Jul 03 04:19:25 ispc maldet(2905839): {sigup} performing signature update check... Jul 03 04:19:25 ispc maldet(2905839): {sigup} local signature set is version 2017022510908 Jul 03 04:19:26 ispc maldet(2905839): {sigup} could not download signature data from server, please try again later. Jul 03 04:19:31 ispc maldet(2905925): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 03 04:19:36 ispc maldet(2905925): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 03 04:19:36 ispc maldet(2905925): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 03 04:19:36 ispc maldet(2905925): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 03 04:19:37 ispc maldet(2905925): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 03 04:50:13 ispc maldet(2905925): {scan} file list completed in 1836s, found 62 files... Jul 03 04:50:13 ispc maldet(2905925): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 03 04:50:13 ispc maldet(2905925): {scan} scan of (62 files) in progress... Jul 03 04:50:16 ispc maldet(2905925): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 1845s Jul 03 04:50:17 ispc maldet(2905925): {scan} scan report saved, to view run: maldet --report 250703-0419.2905925 Jul 04 04:12:38 ispc maldet(3088101): {update} checking for available updates... Jul 04 04:12:38 ispc maldet(3088101): {update} could not download version file from server, please try again later. Jul 04 04:12:43 ispc maldet(3088174): {sigup} performing signature update check... Jul 04 04:12:43 ispc maldet(3088174): {sigup} local signature set is version 2017022510908 Jul 04 04:12:43 ispc maldet(3088174): {sigup} could not download signature data from server, please try again later. Jul 04 04:12:47 ispc maldet(3088261): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 04 04:12:54 ispc maldet(3088261): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 04 04:12:54 ispc maldet(3088261): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 04 04:12:55 ispc maldet(3088261): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 04 04:12:55 ispc maldet(3088261): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 04 04:49:06 ispc maldet(3088261): {scan} file list completed in 2171s, found 60 files... Jul 04 04:49:06 ispc maldet(3088261): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 04 04:49:07 ispc maldet(3088261): {scan} scan of (60 files) in progress... Jul 04 04:49:10 ispc maldet(3088261): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 2182s Jul 04 04:49:10 ispc maldet(3088261): {scan} scan report saved, to view run: maldet --report 250704-0412.3088261 Jul 05 04:13:24 ispc maldet(3276425): {update} checking for available updates... Jul 05 04:13:25 ispc maldet(3276425): {update} could not download version file from server, please try again later. Jul 05 04:13:30 ispc maldet(3276502): {sigup} performing signature update check... Jul 05 04:13:30 ispc maldet(3276502): {sigup} local signature set is version 2017022510908 Jul 05 04:13:31 ispc maldet(3276502): {sigup} could not download signature data from server, please try again later. Jul 05 04:13:36 ispc maldet(3276585): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 05 04:13:43 ispc maldet(3276585): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 05 04:13:43 ispc maldet(3276585): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 05 04:13:44 ispc maldet(3276585): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 05 04:13:44 ispc maldet(3276585): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 05 05:06:57 ispc maldet(3276585): {scan} file list completed in 3192s, found 49 files... Jul 05 05:06:58 ispc maldet(3276585): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 05 05:06:58 ispc maldet(3276585): {scan} scan of (49 files) in progress... Jul 05 05:07:01 ispc maldet(3276585): {scan} scan completed on : files 49, malware hits 0, cleaned hits 0, time 3204s Jul 05 05:07:01 ispc maldet(3276585): {scan} scan report saved, to view run: maldet --report 250705-0413.3276585 Jul 06 04:14:23 ispc maldet(3461037): {update} checking for available updates... Jul 06 04:14:23 ispc maldet(3461037): {update} could not download version file from server, please try again later. Jul 06 04:14:28 ispc maldet(3461111): {sigup} performing signature update check... Jul 06 04:14:28 ispc maldet(3461111): {sigup} local signature set is version 2017022510908 Jul 06 04:14:29 ispc maldet(3461111): {sigup} could not download signature data from server, please try again later. Jul 06 04:14:34 ispc maldet(3461194): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 06 04:14:40 ispc maldet(3461194): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 06 04:14:40 ispc maldet(3461194): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 06 04:14:41 ispc maldet(3461194): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 06 04:14:41 ispc maldet(3461194): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 06 06:05:21 ispc maldet(3461194): {scan} file list completed in 6640s, found 58 files... Jul 06 06:05:22 ispc maldet(3461194): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 06 06:05:22 ispc maldet(3461194): {scan} scan of (58 files) in progress... Jul 06 06:05:26 ispc maldet(3461194): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 6651s Jul 06 06:05:26 ispc maldet(3461194): {scan} scan report saved, to view run: maldet --report 250706-0414.3461194 Jul 07 04:08:39 ispc maldet(3584432): {update} checking for available updates... Jul 07 04:08:40 ispc maldet(3584432): {update} could not download version file from server, please try again later. Jul 07 04:08:44 ispc maldet(3584505): {sigup} performing signature update check... Jul 07 04:08:45 ispc maldet(3584505): {sigup} local signature set is version 2017022510908 Jul 07 04:08:45 ispc maldet(3584505): {sigup} could not download signature data from server, please try again later. Jul 07 04:08:50 ispc maldet(3584593): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 07 04:08:57 ispc maldet(3584593): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 07 04:08:58 ispc maldet(3584593): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 07 04:08:58 ispc maldet(3584593): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 07 04:08:58 ispc maldet(3584593): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 07 04:40:31 ispc maldet(3584593): {scan} file list completed in 1892s, found 57 files... Jul 07 04:40:31 ispc maldet(3584593): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 07 04:40:31 ispc maldet(3584593): {scan} scan of (57 files) in progress... Jul 07 04:40:33 ispc maldet(3584593): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 1901s Jul 07 04:40:34 ispc maldet(3584593): {scan} scan report saved, to view run: maldet --report 250707-0408.3584593 Jul 08 04:11:05 ispc maldet(3768537): {update} checking for available updates... Jul 08 04:11:06 ispc maldet(3768537): {update} could not download version file from server, please try again later. Jul 08 04:11:11 ispc maldet(3768624): {sigup} performing signature update check... Jul 08 04:11:11 ispc maldet(3768624): {sigup} local signature set is version 2017022510908 Jul 08 04:11:11 ispc maldet(3768624): {sigup} could not download signature data from server, please try again later. Jul 08 04:11:16 ispc maldet(3768706): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 08 04:11:23 ispc maldet(3768706): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 08 04:11:23 ispc maldet(3768706): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 08 04:11:23 ispc maldet(3768706): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 08 04:11:24 ispc maldet(3768706): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 08 04:57:59 ispc maldet(3768706): {scan} file list completed in 2794s, found 54 files... Jul 08 04:57:59 ispc maldet(3768706): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 08 04:58:00 ispc maldet(3768706): {scan} scan of (54 files) in progress... Jul 08 04:58:03 ispc maldet(3768706): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 2806s Jul 08 04:58:03 ispc maldet(3768706): {scan} scan report saved, to view run: maldet --report 250708-0411.3768706 Jul 09 04:13:14 ispc maldet(3965851): {update} checking for available updates... Jul 09 04:13:15 ispc maldet(3965851): {update} could not download version file from server, please try again later. Jul 09 04:13:19 ispc maldet(3965927): {sigup} performing signature update check... Jul 09 04:13:19 ispc maldet(3965927): {sigup} local signature set is version 2017022510908 Jul 09 04:13:20 ispc maldet(3965927): {sigup} could not download signature data from server, please try again later. Jul 09 04:13:24 ispc maldet(3966009): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 09 04:13:29 ispc maldet(3966009): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 09 04:13:29 ispc maldet(3966009): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 09 04:13:30 ispc maldet(3966009): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 09 04:13:30 ispc maldet(3966009): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 09 05:06:52 ispc maldet(3966009): {scan} file list completed in 3201s, found 56 files... Jul 09 05:06:52 ispc maldet(3966009): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 09 05:06:52 ispc maldet(3966009): {scan} scan of (56 files) in progress... Jul 09 05:06:56 ispc maldet(3966009): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 3211s Jul 09 05:06:56 ispc maldet(3966009): {scan} scan report saved, to view run: maldet --report 250709-0413.3966009 Jul 10 04:12:10 ispc maldet(4144873): {update} checking for available updates... Jul 10 04:12:11 ispc maldet(4144873): {update} could not download version file from server, please try again later. Jul 10 04:12:15 ispc maldet(4144945): {sigup} performing signature update check... Jul 10 04:12:16 ispc maldet(4144945): {sigup} local signature set is version 2017022510908 Jul 10 04:12:16 ispc maldet(4144945): {sigup} could not download signature data from server, please try again later. Jul 10 04:12:21 ispc maldet(4145027): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 10 04:12:26 ispc maldet(4145027): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 10 04:12:27 ispc maldet(4145027): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 10 04:12:27 ispc maldet(4145027): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 10 04:12:27 ispc maldet(4145027): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 10 04:45:01 ispc maldet(4145027): {scan} file list completed in 1954s, found 50 files... Jul 10 04:45:01 ispc maldet(4145027): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 10 04:45:02 ispc maldet(4145027): {scan} scan of (50 files) in progress... Jul 10 04:45:05 ispc maldet(4145027): {scan} scan completed on : files 50, malware hits 0, cleaned hits 0, time 1963s Jul 10 04:45:05 ispc maldet(4145027): {scan} scan report saved, to view run: maldet --report 250710-0412.4145027 Jul 11 04:11:51 ispc maldet(71899): {update} checking for available updates... Jul 11 04:11:51 ispc maldet(71899): {update} could not download version file from server, please try again later. Jul 11 04:11:55 ispc maldet(71976): {sigup} performing signature update check... Jul 11 04:11:56 ispc maldet(71976): {sigup} local signature set is version 2017022510908 Jul 11 04:11:56 ispc maldet(71976): {sigup} could not download signature data from server, please try again later. Jul 11 04:12:01 ispc maldet(72058): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 11 04:12:06 ispc maldet(72058): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 11 04:12:07 ispc maldet(72058): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 11 04:12:07 ispc maldet(72058): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 11 04:12:07 ispc maldet(72058): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 11 04:56:51 ispc maldet(72058): {scan} file list completed in 2683s, found 60 files... Jul 11 04:56:51 ispc maldet(72058): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 11 04:56:51 ispc maldet(72058): {scan} scan of (60 files) in progress... Jul 11 04:56:53 ispc maldet(72058): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 2691s Jul 11 04:56:53 ispc maldet(72058): {scan} scan report saved, to view run: maldet --report 250711-0411.72058 Jul 12 04:11:50 ispc maldet(250832): {update} checking for available updates... Jul 12 04:11:51 ispc maldet(250832): {update} could not download version file from server, please try again later. Jul 12 04:11:56 ispc maldet(250906): {sigup} performing signature update check... Jul 12 04:11:56 ispc maldet(250906): {sigup} local signature set is version 2017022510908 Jul 12 04:11:57 ispc maldet(250906): {sigup} could not download signature data from server, please try again later. Jul 12 04:12:01 ispc maldet(250991): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 12 04:12:05 ispc maldet(250991): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 12 04:12:05 ispc maldet(250991): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 12 04:12:05 ispc maldet(250991): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 12 04:12:06 ispc maldet(250991): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 12 04:53:34 ispc maldet(250991): {scan} file list completed in 2489s, found 58 files... Jul 12 04:53:35 ispc maldet(250991): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 12 04:53:35 ispc maldet(250991): {scan} scan of (58 files) in progress... Jul 12 04:53:38 ispc maldet(250991): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 2496s Jul 12 04:53:38 ispc maldet(250991): {scan} scan report saved, to view run: maldet --report 250712-0411.250991 Jul 13 04:11:44 ispc maldet(429295): {update} checking for available updates... Jul 13 04:11:45 ispc maldet(429295): {update} could not download version file from server, please try again later. Jul 13 04:11:48 ispc maldet(429368): {sigup} performing signature update check... Jul 13 04:11:49 ispc maldet(429368): {sigup} local signature set is version 2017022510908 Jul 13 04:11:49 ispc maldet(429368): {sigup} could not download signature data from server, please try again later. Jul 13 04:11:54 ispc maldet(429450): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 13 04:12:00 ispc maldet(429450): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 13 04:12:00 ispc maldet(429450): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 13 04:12:01 ispc maldet(429450): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 13 04:12:01 ispc maldet(429450): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 13 04:57:09 ispc maldet(429450): {scan} file list completed in 2708s, found 59 files... Jul 13 04:57:09 ispc maldet(429450): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 13 04:57:09 ispc maldet(429450): {scan} scan of (59 files) in progress... Jul 13 04:57:10 ispc maldet(429450): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 2716s Jul 13 04:57:10 ispc maldet(429450): {scan} scan report saved, to view run: maldet --report 250713-0411.429450 Jul 14 04:11:12 ispc maldet(550807): {update} checking for available updates... Jul 14 04:11:12 ispc maldet(550807): {update} could not download version file from server, please try again later. Jul 14 04:11:16 ispc maldet(550882): {sigup} performing signature update check... Jul 14 04:11:16 ispc maldet(550882): {sigup} local signature set is version 2017022510908 Jul 14 04:11:17 ispc maldet(550882): {sigup} could not download signature data from server, please try again later. Jul 14 04:11:21 ispc maldet(550971): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 14 04:11:26 ispc maldet(550971): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 14 04:11:27 ispc maldet(550971): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 14 04:11:27 ispc maldet(550971): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 14 04:11:28 ispc maldet(550971): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 14 05:56:34 ispc maldet(550971): {scan} file list completed in 6306s, found 53 files... Jul 14 05:56:34 ispc maldet(550971): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 14 05:56:35 ispc maldet(550971): {scan} scan of (53 files) in progress... Jul 14 05:56:38 ispc maldet(550971): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 6316s Jul 14 05:56:39 ispc maldet(550971): {scan} scan report saved, to view run: maldet --report 250714-0411.550971 Jul 15 04:11:21 ispc maldet(738234): {update} checking for available updates... Jul 15 04:11:21 ispc maldet(738234): {update} could not download version file from server, please try again later. Jul 15 04:11:26 ispc maldet(738306): {sigup} performing signature update check... Jul 15 04:11:26 ispc maldet(738306): {sigup} local signature set is version 2017022510908 Jul 15 04:11:27 ispc maldet(738306): {sigup} could not download signature data from server, please try again later. Jul 15 04:11:32 ispc maldet(738391): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 15 04:11:38 ispc maldet(738391): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 15 04:11:38 ispc maldet(738391): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 15 04:11:38 ispc maldet(738391): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 15 04:11:39 ispc maldet(738391): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 15 04:54:49 ispc maldet(738391): {scan} file list completed in 2591s, found 56 files... Jul 15 04:54:50 ispc maldet(738391): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 15 04:54:50 ispc maldet(738391): {scan} scan of (56 files) in progress... Jul 15 04:54:54 ispc maldet(738391): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2601s Jul 15 04:54:54 ispc maldet(738391): {scan} scan report saved, to view run: maldet --report 250715-0411.738391 Jul 16 04:13:14 ispc maldet(920367): {update} checking for available updates... Jul 16 04:13:14 ispc maldet(920367): {update} could not download version file from server, please try again later. Jul 16 04:13:18 ispc maldet(920451): {sigup} performing signature update check... Jul 16 04:13:19 ispc maldet(920451): {sigup} local signature set is version 2017022510908 Jul 16 04:13:20 ispc maldet(920451): {sigup} could not download signature data from server, please try again later. Jul 16 04:13:23 ispc maldet(920546): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 16 04:13:27 ispc maldet(920546): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 16 04:13:27 ispc maldet(920546): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 16 04:13:28 ispc maldet(920546): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 16 04:13:28 ispc maldet(920546): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 16 05:52:47 ispc maldet(920546): {scan} file list completed in 5959s, found 59 files... Jul 16 05:52:48 ispc maldet(920546): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 16 05:52:48 ispc maldet(920546): {scan} scan of (59 files) in progress... Jul 16 05:52:51 ispc maldet(920546): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 5967s Jul 16 05:52:51 ispc maldet(920546): {scan} scan report saved, to view run: maldet --report 250716-0413.920546 Jul 17 04:12:41 ispc maldet(1104370): {update} checking for available updates... Jul 17 04:12:41 ispc maldet(1104370): {update} could not download version file from server, please try again later. Jul 17 04:12:45 ispc maldet(1104447): {sigup} performing signature update check... Jul 17 04:12:45 ispc maldet(1104447): {sigup} local signature set is version 2017022510908 Jul 17 04:12:46 ispc maldet(1104447): {sigup} could not download signature data from server, please try again later. Jul 17 04:12:51 ispc maldet(1104529): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 17 04:12:56 ispc maldet(1104529): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 17 04:12:57 ispc maldet(1104529): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 17 04:12:57 ispc maldet(1104529): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 17 04:12:57 ispc maldet(1104529): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 17 05:12:06 ispc maldet(1104529): {scan} file list completed in 3548s, found 56 files... Jul 17 05:12:06 ispc maldet(1104529): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 17 05:12:06 ispc maldet(1104529): {scan} scan of (56 files) in progress... Jul 17 05:12:09 ispc maldet(1104529): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 3557s Jul 17 05:12:09 ispc maldet(1104529): {scan} scan report saved, to view run: maldet --report 250717-0412.1104529 Jul 18 04:11:05 ispc maldet(1287092): {update} checking for available updates... Jul 18 04:11:05 ispc maldet(1287092): {update} could not download version file from server, please try again later. Jul 18 04:11:10 ispc maldet(1287176): {sigup} performing signature update check... Jul 18 04:11:10 ispc maldet(1287176): {sigup} local signature set is version 2017022510908 Jul 18 04:11:10 ispc maldet(1287176): {sigup} could not download signature data from server, please try again later. Jul 18 04:11:14 ispc maldet(1287262): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 18 04:11:20 ispc maldet(1287262): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 18 04:11:20 ispc maldet(1287262): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 18 04:11:21 ispc maldet(1287262): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 18 04:11:21 ispc maldet(1287262): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 18 06:03:07 ispc maldet(1287262): {scan} file list completed in 6705s, found 195 files... Jul 18 06:03:07 ispc maldet(1287262): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 18 06:03:08 ispc maldet(1287262): {scan} scan of (195 files) in progress... Jul 18 06:03:10 ispc maldet(1287262): {scan} scan completed on : files 195, malware hits 0, cleaned hits 0, time 6714s Jul 18 06:03:10 ispc maldet(1287262): {scan} scan report saved, to view run: maldet --report 250718-0411.1287262 Jul 19 04:11:56 ispc maldet(1474822): {update} checking for available updates... Jul 19 04:11:56 ispc maldet(1474822): {update} could not download version file from server, please try again later. Jul 19 04:12:01 ispc maldet(1474901): {sigup} performing signature update check... Jul 19 04:12:01 ispc maldet(1474901): {sigup} local signature set is version 2017022510908 Jul 19 04:12:02 ispc maldet(1474901): {sigup} could not download signature data from server, please try again later. Jul 19 04:12:05 ispc maldet(1474996): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 19 04:12:13 ispc maldet(1474996): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 19 04:12:14 ispc maldet(1474996): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 19 04:12:14 ispc maldet(1474996): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 19 04:12:14 ispc maldet(1474996): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 19 06:03:24 ispc maldet(1474996): {scan} file list completed in 6669s, found 225 files... Jul 19 06:03:24 ispc maldet(1474996): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 19 06:03:24 ispc maldet(1474996): {scan} scan of (225 files) in progress... Jul 19 06:03:26 ispc maldet(1474996): {scan} scan completed on : files 225, malware hits 0, cleaned hits 0, time 6679s Jul 19 06:03:26 ispc maldet(1474996): {scan} scan report saved, to view run: maldet --report 250719-0412.1474996 Jul 20 04:20:40 ispc maldet(1666928): {update} checking for available updates... Jul 20 04:20:40 ispc maldet(1666928): {update} could not download version file from server, please try again later. Jul 20 04:20:44 ispc maldet(1667006): {sigup} performing signature update check... Jul 20 04:20:44 ispc maldet(1667006): {sigup} local signature set is version 2017022510908 Jul 20 04:20:45 ispc maldet(1667006): {sigup} could not download signature data from server, please try again later. Jul 20 04:20:49 ispc maldet(1667087): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 20 04:20:54 ispc maldet(1667087): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 20 04:20:54 ispc maldet(1667087): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 20 04:20:55 ispc maldet(1667087): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 20 04:20:55 ispc maldet(1667087): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 20 05:20:09 ispc maldet(1667087): {scan} file list completed in 3553s, found 51 files... Jul 20 05:20:09 ispc maldet(1667087): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 20 05:20:10 ispc maldet(1667087): {scan} scan of (51 files) in progress... Jul 20 05:20:13 ispc maldet(1667087): {scan} scan completed on : files 51, malware hits 0, cleaned hits 0, time 3562s Jul 20 05:20:14 ispc maldet(1667087): {scan} scan report saved, to view run: maldet --report 250720-0420.1667087 Jul 21 04:11:29 ispc maldet(1861937): {update} checking for available updates... Jul 21 04:11:29 ispc maldet(1861937): {update} could not download version file from server, please try again later. Jul 21 04:11:33 ispc maldet(1862016): {sigup} performing signature update check... Jul 21 04:11:33 ispc maldet(1862016): {sigup} local signature set is version 2017022510908 Jul 21 04:11:34 ispc maldet(1862016): {sigup} could not download signature data from server, please try again later. Jul 21 04:11:38 ispc maldet(1862098): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 21 04:11:44 ispc maldet(1862098): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 21 04:11:44 ispc maldet(1862098): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 21 04:11:44 ispc maldet(1862098): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 21 04:11:44 ispc maldet(1862098): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 21 05:08:04 ispc maldet(1862098): {scan} file list completed in 3380s, found 57 files... Jul 21 05:08:04 ispc maldet(1862098): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 21 05:08:05 ispc maldet(1862098): {scan} scan of (57 files) in progress... Jul 21 05:08:07 ispc maldet(1862098): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 3388s Jul 21 05:08:08 ispc maldet(1862098): {scan} scan report saved, to view run: maldet --report 250721-0411.1862098 Jul 22 04:20:47 ispc maldet(2003446): {update} checking for available updates... Jul 22 04:20:47 ispc maldet(2003446): {update} could not download version file from server, please try again later. Jul 22 04:20:51 ispc maldet(2003522): {sigup} performing signature update check... Jul 22 04:20:51 ispc maldet(2003522): {sigup} local signature set is version 2017022510908 Jul 22 04:20:52 ispc maldet(2003522): {sigup} could not download signature data from server, please try again later. Jul 22 04:20:57 ispc maldet(2003609): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 22 04:21:03 ispc maldet(2003609): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 22 04:21:03 ispc maldet(2003609): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 22 04:21:03 ispc maldet(2003609): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 22 04:21:04 ispc maldet(2003609): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 22 04:52:53 ispc maldet(2003609): {scan} file list completed in 1909s, found 54 files... Jul 22 04:52:53 ispc maldet(2003609): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 22 04:52:54 ispc maldet(2003609): {scan} scan of (54 files) in progress... Jul 22 04:52:56 ispc maldet(2003609): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 1919s Jul 22 04:52:56 ispc maldet(2003609): {scan} scan report saved, to view run: maldet --report 250722-0420.2003609 Jul 23 04:10:33 ispc maldet(2195254): {update} checking for available updates... Jul 23 04:10:33 ispc maldet(2195254): {update} could not download version file from server, please try again later. Jul 23 04:10:37 ispc maldet(2195328): {sigup} performing signature update check... Jul 23 04:10:37 ispc maldet(2195328): {sigup} local signature set is version 2017022510908 Jul 23 04:10:38 ispc maldet(2195328): {sigup} could not download signature data from server, please try again later. Jul 23 04:10:42 ispc maldet(2195414): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 23 04:10:47 ispc maldet(2195414): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 23 04:10:47 ispc maldet(2195414): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 23 04:10:48 ispc maldet(2195414): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 23 04:10:48 ispc maldet(2195414): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 23 05:10:24 ispc maldet(2195414): {scan} file list completed in 3576s, found 54 files... Jul 23 05:10:25 ispc maldet(2195414): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 23 05:10:25 ispc maldet(2195414): {scan} scan of (54 files) in progress... Jul 23 05:10:28 ispc maldet(2195414): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 3585s Jul 23 05:10:29 ispc maldet(2195414): {scan} scan report saved, to view run: maldet --report 250723-0410.2195414 Jul 24 04:21:04 ispc maldet(2387113): {update} checking for available updates... Jul 24 04:21:04 ispc maldet(2387113): {update} could not download version file from server, please try again later. Jul 24 04:21:09 ispc maldet(2387200): {sigup} performing signature update check... Jul 24 04:21:09 ispc maldet(2387200): {sigup} local signature set is version 2017022510908 Jul 24 04:21:10 ispc maldet(2387200): {sigup} could not download signature data from server, please try again later. Jul 24 04:21:14 ispc maldet(2387293): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 24 04:21:16 ispc maldet(2387293): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 24 04:21:17 ispc maldet(2387293): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 24 04:21:17 ispc maldet(2387293): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 24 04:21:17 ispc maldet(2387293): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 24 04:55:22 ispc maldet(2387293): {scan} file list completed in 2044s, found 51 files... Jul 24 04:55:22 ispc maldet(2387293): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 24 04:55:22 ispc maldet(2387293): {scan} scan of (51 files) in progress... Jul 24 04:55:25 ispc maldet(2387293): {scan} scan completed on : files 51, malware hits 0, cleaned hits 0, time 2051s Jul 24 04:55:26 ispc maldet(2387293): {scan} scan report saved, to view run: maldet --report 250724-0421.2387293 Jul 25 04:09:55 ispc maldet(2572739): {update} checking for available updates... Jul 25 04:09:56 ispc maldet(2572739): {update} could not download version file from server, please try again later. Jul 25 04:10:00 ispc maldet(2572813): {sigup} performing signature update check... Jul 25 04:10:00 ispc maldet(2572813): {sigup} local signature set is version 2017022510908 Jul 25 04:10:01 ispc maldet(2572813): {sigup} could not download signature data from server, please try again later. Jul 25 04:10:05 ispc maldet(2572912): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 25 04:10:10 ispc maldet(2572912): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 25 04:10:10 ispc maldet(2572912): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 25 04:10:10 ispc maldet(2572912): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 25 04:10:10 ispc maldet(2572912): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 25 04:59:29 ispc maldet(2572912): {scan} file list completed in 2959s, found 49 files... Jul 25 04:59:30 ispc maldet(2572912): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 25 04:59:30 ispc maldet(2572912): {scan} scan of (49 files) in progress... Jul 25 04:59:33 ispc maldet(2572912): {scan} scan completed on : files 49, malware hits 0, cleaned hits 0, time 2967s Jul 25 04:59:33 ispc maldet(2572912): {scan} scan report saved, to view run: maldet --report 250725-0410.2572912 Jul 26 04:22:48 ispc maldet(2759665): {update} checking for available updates... Jul 26 04:22:49 ispc maldet(2759665): {update} could not download version file from server, please try again later. Jul 26 04:22:51 ispc maldet(2759738): {sigup} performing signature update check... Jul 26 04:22:51 ispc maldet(2759738): {sigup} local signature set is version 2017022510908 Jul 26 04:22:52 ispc maldet(2759738): {sigup} could not download signature data from server, please try again later. Jul 26 04:22:56 ispc maldet(2759819): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 26 04:23:02 ispc maldet(2759819): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 26 04:23:02 ispc maldet(2759819): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 26 04:23:02 ispc maldet(2759819): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 26 04:23:02 ispc maldet(2759819): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 26 04:50:22 ispc maldet(2759819): {scan} file list completed in 1640s, found 57 files... Jul 26 04:50:23 ispc maldet(2759819): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 26 04:50:23 ispc maldet(2759819): {scan} scan of (57 files) in progress... Jul 26 04:50:25 ispc maldet(2759819): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 1649s Jul 26 04:50:25 ispc maldet(2759819): {scan} scan report saved, to view run: maldet --report 250726-0422.2759819 Jul 27 04:13:35 ispc maldet(2887934): {update} checking for available updates... Jul 27 04:13:36 ispc maldet(2887934): {update} could not download version file from server, please try again later. Jul 27 04:13:41 ispc maldet(2888007): {sigup} performing signature update check... Jul 27 04:13:41 ispc maldet(2888007): {sigup} local signature set is version 2017022510908 Jul 27 04:13:41 ispc maldet(2888007): {sigup} could not download signature data from server, please try again later. Jul 27 04:13:46 ispc maldet(2888100): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 27 04:13:51 ispc maldet(2888100): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 27 04:13:51 ispc maldet(2888100): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 27 04:13:52 ispc maldet(2888100): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 27 04:13:52 ispc maldet(2888100): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 27 04:54:41 ispc maldet(2888100): {scan} file list completed in 2448s, found 61 files... Jul 27 04:54:41 ispc maldet(2888100): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 27 04:54:41 ispc maldet(2888100): {scan} scan of (61 files) in progress... Jul 27 04:54:45 ispc maldet(2888100): {scan} scan completed on : files 61, malware hits 0, cleaned hits 0, time 2458s Jul 27 04:54:45 ispc maldet(2888100): {scan} scan report saved, to view run: maldet --report 250727-0413.2888100 Jul 28 04:11:37 ispc maldet(3076302): {update} checking for available updates... Jul 28 04:11:37 ispc maldet(3076302): {update} could not download version file from server, please try again later. Jul 28 04:11:41 ispc maldet(3076377): {sigup} performing signature update check... Jul 28 04:11:41 ispc maldet(3076377): {sigup} local signature set is version 2017022510908 Jul 28 04:11:41 ispc maldet(3076377): {sigup} could not download signature data from server, please try again later. Jul 28 04:11:46 ispc maldet(3076459): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 28 04:11:53 ispc maldet(3076459): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 28 04:11:53 ispc maldet(3076459): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 28 04:11:53 ispc maldet(3076459): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 28 04:11:54 ispc maldet(3076459): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 28 04:58:23 ispc maldet(3076459): {scan} file list completed in 2789s, found 52 files... Jul 28 04:58:23 ispc maldet(3076459): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 28 04:58:23 ispc maldet(3076459): {scan} scan of (52 files) in progress... Jul 28 04:58:23 ispc maldet(3076459): {scan} scan completed on : files 52, malware hits 0, cleaned hits 0, time 2797s Jul 28 04:58:23 ispc maldet(3076459): {scan} scan report saved, to view run: maldet --report 250728-0411.3076459 Jul 29 04:12:40 ispc maldet(3273070): {update} checking for available updates... Jul 29 04:12:40 ispc maldet(3273070): {update} could not download version file from server, please try again later. Jul 29 04:12:45 ispc maldet(3273143): {sigup} performing signature update check... Jul 29 04:12:45 ispc maldet(3273143): {sigup} local signature set is version 2017022510908 Jul 29 04:12:46 ispc maldet(3273143): {sigup} could not download signature data from server, please try again later. Jul 29 04:12:51 ispc maldet(3273234): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 29 04:12:57 ispc maldet(3273234): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 29 04:12:57 ispc maldet(3273234): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 29 04:12:57 ispc maldet(3273234): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 29 04:12:58 ispc maldet(3273234): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 29 05:03:32 ispc maldet(3273234): {scan} file list completed in 3034s, found 229 files... Jul 29 05:03:33 ispc maldet(3273234): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 29 05:03:33 ispc maldet(3273234): {scan} scan of (229 files) in progress... Jul 29 05:03:34 ispc maldet(3273234): {scan} scan completed on : files 229, malware hits 0, cleaned hits 0, time 3043s Jul 29 05:03:35 ispc maldet(3273234): {scan} scan report saved, to view run: maldet --report 250729-0412.3273234 Jul 30 04:12:20 ispc maldet(3469326): {update} checking for available updates... Jul 30 04:12:20 ispc maldet(3469326): {update} could not download version file from server, please try again later. Jul 30 04:12:25 ispc maldet(3469400): {sigup} performing signature update check... Jul 30 04:12:25 ispc maldet(3469400): {sigup} local signature set is version 2017022510908 Jul 30 04:12:25 ispc maldet(3469400): {sigup} could not download signature data from server, please try again later. Jul 30 04:12:30 ispc maldet(3469486): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 30 04:12:37 ispc maldet(3469486): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 30 04:12:37 ispc maldet(3469486): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 30 04:12:38 ispc maldet(3469486): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 30 04:12:38 ispc maldet(3469486): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 30 04:51:53 ispc maldet(3469486): {scan} file list completed in 2355s, found 60 files... Jul 30 04:51:53 ispc maldet(3469486): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 30 04:51:54 ispc maldet(3469486): {scan} scan of (60 files) in progress... Jul 30 04:51:57 ispc maldet(3469486): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 2366s Jul 30 04:51:57 ispc maldet(3469486): {scan} scan report saved, to view run: maldet --report 250730-0412.3469486 Jul 31 04:12:10 ispc maldet(3610140): {update} checking for available updates... Jul 31 04:12:10 ispc maldet(3610140): {update} could not download version file from server, please try again later. Jul 31 04:12:15 ispc maldet(3610219): {sigup} performing signature update check... Jul 31 04:12:15 ispc maldet(3610219): {sigup} local signature set is version 2017022510908 Jul 31 04:12:16 ispc maldet(3610219): {sigup} could not download signature data from server, please try again later. Jul 31 04:12:20 ispc maldet(3610302): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 31 04:12:28 ispc maldet(3610302): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Jul 31 04:12:28 ispc maldet(3610302): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 31 04:12:28 ispc maldet(3610302): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 31 04:12:29 ispc maldet(3610302): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 31 04:47:23 ispc maldet(3610302): {scan} file list completed in 2094s, found 53 files... Jul 31 04:47:23 ispc maldet(3610302): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Jul 31 04:47:24 ispc maldet(3610302): {scan} scan of (53 files) in progress... Jul 31 04:47:27 ispc maldet(3610302): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 2106s Jul 31 04:47:27 ispc maldet(3610302): {scan} scan report saved, to view run: maldet --report 250731-0412.3610302 Aug 01 04:13:11 ispc maldet(3807755): {update} checking for available updates... Aug 01 04:13:11 ispc maldet(3807755): {update} could not download version file from server, please try again later. Aug 01 04:13:16 ispc maldet(3807827): {sigup} performing signature update check... Aug 01 04:13:16 ispc maldet(3807827): {sigup} local signature set is version 2017022510908 Aug 01 04:13:16 ispc maldet(3807827): {sigup} could not download signature data from server, please try again later. Aug 01 04:13:20 ispc maldet(3807916): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 01 04:13:26 ispc maldet(3807916): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 01 04:13:26 ispc maldet(3807916): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 01 04:13:26 ispc maldet(3807916): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 01 04:13:26 ispc maldet(3807916): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 01 04:47:47 ispc maldet(3807916): {scan} file list completed in 2061s, found 56 files... Aug 01 04:47:48 ispc maldet(3807916): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 01 04:47:48 ispc maldet(3807916): {scan} scan of (56 files) in progress... Aug 01 04:47:51 ispc maldet(3807916): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2070s Aug 01 04:47:51 ispc maldet(3807916): {scan} scan report saved, to view run: maldet --report 250801-0413.3807916 Aug 02 04:11:26 ispc maldet(4001974): {update} checking for available updates... Aug 02 04:11:27 ispc maldet(4001974): {update} could not download version file from server, please try again later. Aug 02 04:11:29 ispc maldet(4002048): {sigup} performing signature update check... Aug 02 04:11:29 ispc maldet(4002048): {sigup} local signature set is version 2017022510908 Aug 02 04:11:30 ispc maldet(4002048): {sigup} could not download signature data from server, please try again later. Aug 02 04:11:34 ispc maldet(4002134): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 02 04:11:40 ispc maldet(4002134): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 02 04:11:41 ispc maldet(4002134): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 02 04:11:41 ispc maldet(4002134): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 02 04:11:41 ispc maldet(4002134): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 02 04:48:41 ispc maldet(4002134): {scan} file list completed in 2219s, found 56 files... Aug 02 04:48:41 ispc maldet(4002134): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 02 04:48:41 ispc maldet(4002134): {scan} scan of (56 files) in progress... Aug 02 04:48:42 ispc maldet(4002134): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2227s Aug 02 04:48:42 ispc maldet(4002134): {scan} scan report saved, to view run: maldet --report 250802-0411.4002134 Aug 03 04:12:46 ispc maldet(2981): {update} checking for available updates... Aug 03 04:12:46 ispc maldet(2981): {update} could not download version file from server, please try again later. Aug 03 04:12:51 ispc maldet(3060): {sigup} performing signature update check... Aug 03 04:12:51 ispc maldet(3060): {sigup} local signature set is version 2017022510908 Aug 03 04:12:52 ispc maldet(3060): {sigup} could not download signature data from server, please try again later. Aug 03 04:12:57 ispc maldet(3147): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 03 04:13:04 ispc maldet(3147): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 03 04:13:04 ispc maldet(3147): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 03 04:13:04 ispc maldet(3147): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 03 04:13:05 ispc maldet(3147): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 03 05:15:10 ispc maldet(3147): {scan} file list completed in 3725s, found 60 files... Aug 03 05:15:11 ispc maldet(3147): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 03 05:15:11 ispc maldet(3147): {scan} scan of (60 files) in progress... Aug 03 05:15:13 ispc maldet(3147): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 3735s Aug 03 05:15:13 ispc maldet(3147): {scan} scan report saved, to view run: maldet --report 250803-0412.3147 Aug 04 04:16:55 ispc maldet(195084): {update} checking for available updates... Aug 04 04:16:55 ispc maldet(195084): {update} could not download version file from server, please try again later. Aug 04 04:16:59 ispc maldet(195161): {sigup} performing signature update check... Aug 04 04:16:59 ispc maldet(195161): {sigup} local signature set is version 2017022510908 Aug 04 04:17:00 ispc maldet(195161): {sigup} could not download signature data from server, please try again later. Aug 04 04:17:04 ispc maldet(195247): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 04 04:17:11 ispc maldet(195247): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 04 04:17:11 ispc maldet(195247): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 04 04:17:12 ispc maldet(195247): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 04 04:17:12 ispc maldet(195247): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 04 04:57:31 ispc maldet(195247): {scan} file list completed in 2419s, found 56 files... Aug 04 04:57:31 ispc maldet(195247): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 04 04:57:31 ispc maldet(195247): {scan} scan of (56 files) in progress... Aug 04 04:57:34 ispc maldet(195247): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2430s Aug 04 04:57:35 ispc maldet(195247): {scan} scan report saved, to view run: maldet --report 250804-0417.195247 Aug 05 04:12:39 ispc maldet(388874): {update} checking for available updates... Aug 05 04:12:40 ispc maldet(388874): {update} could not download version file from server, please try again later. Aug 05 04:12:44 ispc maldet(388948): {sigup} performing signature update check... Aug 05 04:12:44 ispc maldet(388948): {sigup} local signature set is version 2017022510908 Aug 05 04:12:45 ispc maldet(388948): {sigup} could not download signature data from server, please try again later. Aug 05 04:12:49 ispc maldet(389033): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 05 04:12:55 ispc maldet(389033): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 05 04:12:55 ispc maldet(389033): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 05 04:12:55 ispc maldet(389033): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 05 04:12:55 ispc maldet(389033): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 05 04:52:49 ispc maldet(389033): {scan} file list completed in 2393s, found 57 files... Aug 05 04:52:49 ispc maldet(389033): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 05 04:52:50 ispc maldet(389033): {scan} scan of (57 files) in progress... Aug 05 04:52:53 ispc maldet(389033): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 2403s Aug 05 04:52:53 ispc maldet(389033): {scan} scan report saved, to view run: maldet --report 250805-0412.389033 Aug 06 04:14:48 ispc maldet(594566): {update} checking for available updates... Aug 06 04:14:48 ispc maldet(594566): {update} could not download version file from server, please try again later. Aug 06 04:14:53 ispc maldet(594644): {sigup} performing signature update check... Aug 06 04:14:53 ispc maldet(594644): {sigup} local signature set is version 2017022510908 Aug 06 04:14:54 ispc maldet(594644): {sigup} could not download signature data from server, please try again later. Aug 06 04:14:58 ispc maldet(594727): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 06 04:15:03 ispc maldet(594727): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 06 04:15:03 ispc maldet(594727): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 06 04:15:04 ispc maldet(594727): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 06 04:15:04 ispc maldet(594727): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 06 05:11:35 ispc maldet(594727): {scan} file list completed in 3391s, found 52 files... Aug 06 05:11:35 ispc maldet(594727): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 06 05:11:36 ispc maldet(594727): {scan} scan of (52 files) in progress... Aug 06 05:11:37 ispc maldet(594727): {scan} scan completed on : files 52, malware hits 0, cleaned hits 0, time 3399s Aug 06 05:11:38 ispc maldet(594727): {scan} scan report saved, to view run: maldet --report 250806-0414.594727 Aug 07 04:16:50 ispc maldet(798729): {update} checking for available updates... Aug 07 04:16:50 ispc maldet(798729): {update} could not download version file from server, please try again later. Aug 07 04:16:55 ispc maldet(798805): {sigup} performing signature update check... Aug 07 04:16:56 ispc maldet(798805): {sigup} local signature set is version 2017022510908 Aug 07 04:16:57 ispc maldet(798805): {sigup} could not download signature data from server, please try again later. Aug 07 04:17:01 ispc maldet(798892): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 07 04:17:08 ispc maldet(798892): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 07 04:17:08 ispc maldet(798892): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 07 04:17:08 ispc maldet(798892): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 07 04:17:09 ispc maldet(798892): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 07 04:54:52 ispc maldet(798892): {scan} file list completed in 2264s, found 50 files... Aug 07 04:54:53 ispc maldet(798892): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 07 04:54:53 ispc maldet(798892): {scan} scan of (50 files) in progress... Aug 07 04:54:56 ispc maldet(798892): {scan} scan completed on : files 50, malware hits 0, cleaned hits 0, time 2274s Aug 07 04:54:57 ispc maldet(798892): {scan} scan report saved, to view run: maldet --report 250807-0416.798892 Aug 08 04:22:02 ispc maldet(934666): {update} checking for available updates... Aug 08 04:22:02 ispc maldet(934666): {update} could not download version file from server, please try again later. Aug 08 04:22:07 ispc maldet(934749): {sigup} performing signature update check... Aug 08 04:22:07 ispc maldet(934749): {sigup} local signature set is version 2017022510908 Aug 08 04:22:08 ispc maldet(934749): {sigup} could not download signature data from server, please try again later. Aug 08 04:22:12 ispc maldet(934836): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 08 04:22:18 ispc maldet(934836): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 08 04:22:19 ispc maldet(934836): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 08 04:22:19 ispc maldet(934836): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 08 04:22:19 ispc maldet(934836): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 08 06:13:51 ispc maldet(934836): {scan} file list completed in 6692s, found 56 files... Aug 08 06:13:52 ispc maldet(934836): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 08 06:13:52 ispc maldet(934836): {scan} scan of (56 files) in progress... Aug 08 06:13:55 ispc maldet(934836): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 6701s Aug 08 06:13:55 ispc maldet(934836): {scan} scan report saved, to view run: maldet --report 250808-0422.934836 Aug 09 04:12:31 ispc maldet(1124515): {update} checking for available updates... Aug 09 04:12:31 ispc maldet(1124515): {update} could not download version file from server, please try again later. Aug 09 04:12:36 ispc maldet(1124587): {sigup} performing signature update check... Aug 09 04:12:36 ispc maldet(1124587): {sigup} local signature set is version 2017022510908 Aug 09 04:12:36 ispc maldet(1124587): {sigup} could not download signature data from server, please try again later. Aug 09 04:12:41 ispc maldet(1124673): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 09 04:12:47 ispc maldet(1124673): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 09 04:12:47 ispc maldet(1124673): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 09 04:12:47 ispc maldet(1124673): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 09 04:12:48 ispc maldet(1124673): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 09 05:09:59 ispc maldet(1124673): {scan} file list completed in 3430s, found 60 files... Aug 09 05:09:59 ispc maldet(1124673): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 09 05:09:59 ispc maldet(1124673): {scan} scan of (60 files) in progress... Aug 09 05:10:02 ispc maldet(1124673): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 3440s Aug 09 05:10:03 ispc maldet(1124673): {scan} scan report saved, to view run: maldet --report 250809-0412.1124673 Aug 10 04:16:48 ispc maldet(1319866): {update} checking for available updates... Aug 10 04:16:49 ispc maldet(1319866): {update} could not download version file from server, please try again later. Aug 10 04:16:53 ispc maldet(1319944): {sigup} performing signature update check... Aug 10 04:16:53 ispc maldet(1319944): {sigup} local signature set is version 2017022510908 Aug 10 04:16:54 ispc maldet(1319944): {sigup} could not download signature data from server, please try again later. Aug 10 04:16:58 ispc maldet(1320028): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 10 04:17:04 ispc maldet(1320028): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 10 04:17:04 ispc maldet(1320028): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 10 04:17:04 ispc maldet(1320028): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 10 04:17:05 ispc maldet(1320028): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 10 06:02:06 ispc maldet(1320028): {scan} file list completed in 6301s, found 83 files... Aug 10 06:02:07 ispc maldet(1320028): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 10 06:02:07 ispc maldet(1320028): {scan} scan of (83 files) in progress... Aug 10 06:02:10 ispc maldet(1320028): {scan} scan completed on : files 83, malware hits 0, cleaned hits 0, time 6311s Aug 10 06:02:10 ispc maldet(1320028): {scan} scan report saved, to view run: maldet --report 250810-0416.1320028 Aug 11 04:14:03 ispc maldet(1514445): {update} checking for available updates... Aug 11 04:14:03 ispc maldet(1514445): {update} could not download version file from server, please try again later. Aug 11 04:14:08 ispc maldet(1514531): {sigup} performing signature update check... Aug 11 04:14:08 ispc maldet(1514531): {sigup} local signature set is version 2017022510908 Aug 11 04:14:09 ispc maldet(1514531): {sigup} could not download signature data from server, please try again later. Aug 11 04:14:13 ispc maldet(1514614): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 11 04:14:19 ispc maldet(1514614): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 11 04:14:19 ispc maldet(1514614): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 11 04:14:20 ispc maldet(1514614): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 11 04:14:20 ispc maldet(1514614): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 11 04:46:12 ispc maldet(1514614): {scan} file list completed in 1911s, found 58 files... Aug 11 04:46:12 ispc maldet(1514614): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 11 04:46:12 ispc maldet(1514614): {scan} scan of (58 files) in progress... Aug 11 04:46:15 ispc maldet(1514614): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 1921s Aug 11 04:46:15 ispc maldet(1514614): {scan} scan report saved, to view run: maldet --report 250811-0414.1514614 Aug 12 04:13:17 ispc maldet(1649397): {update} checking for available updates... Aug 12 04:13:17 ispc maldet(1649397): {update} could not download version file from server, please try again later. Aug 12 04:13:21 ispc maldet(1649470): {sigup} performing signature update check... Aug 12 04:13:21 ispc maldet(1649470): {sigup} local signature set is version 2017022510908 Aug 12 04:13:22 ispc maldet(1649470): {sigup} could not download signature data from server, please try again later. Aug 12 04:13:26 ispc maldet(1649558): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 12 04:13:33 ispc maldet(1649558): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 12 04:13:34 ispc maldet(1649558): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 12 04:13:34 ispc maldet(1649558): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 12 04:13:34 ispc maldet(1649558): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 12 04:45:40 ispc maldet(1649558): {scan} file list completed in 1926s, found 60 files... Aug 12 04:45:40 ispc maldet(1649558): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 12 04:45:41 ispc maldet(1649558): {scan} scan of (60 files) in progress... Aug 12 04:45:44 ispc maldet(1649558): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 1936s Aug 12 04:45:44 ispc maldet(1649558): {scan} scan report saved, to view run: maldet --report 250812-0413.1649558 Aug 13 04:20:22 ispc maldet(1845742): {update} checking for available updates... Aug 13 04:20:22 ispc maldet(1845742): {update} could not download version file from server, please try again later. Aug 13 04:20:26 ispc maldet(1845814): {sigup} performing signature update check... Aug 13 04:20:26 ispc maldet(1845814): {sigup} local signature set is version 2017022510908 Aug 13 04:20:27 ispc maldet(1845814): {sigup} could not download signature data from server, please try again later. Aug 13 04:20:32 ispc maldet(1845905): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 13 04:20:39 ispc maldet(1845905): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 13 04:20:39 ispc maldet(1845905): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 13 04:20:39 ispc maldet(1845905): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 13 04:20:40 ispc maldet(1845905): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 13 04:59:33 ispc maldet(1845905): {scan} file list completed in 2333s, found 54 files... Aug 13 04:59:33 ispc maldet(1845905): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 13 04:59:34 ispc maldet(1845905): {scan} scan of (54 files) in progress... Aug 13 04:59:37 ispc maldet(1845905): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 2344s Aug 13 04:59:37 ispc maldet(1845905): {scan} scan report saved, to view run: maldet --report 250813-0420.1845905 Aug 14 04:17:59 ispc maldet(2039092): {update} checking for available updates... Aug 14 04:17:59 ispc maldet(2039092): {update} could not download version file from server, please try again later. Aug 14 04:18:03 ispc maldet(2039169): {sigup} performing signature update check... Aug 14 04:18:04 ispc maldet(2039169): {sigup} local signature set is version 2017022510908 Aug 14 04:18:05 ispc maldet(2039169): {sigup} could not download signature data from server, please try again later. Aug 14 04:18:08 ispc maldet(2039265): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 14 04:18:13 ispc maldet(2039265): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 14 04:18:14 ispc maldet(2039265): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 14 04:18:14 ispc maldet(2039265): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 14 04:18:14 ispc maldet(2039265): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 14 04:50:54 ispc maldet(2039265): {scan} file list completed in 1959s, found 58 files... Aug 14 04:50:54 ispc maldet(2039265): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 14 04:50:54 ispc maldet(2039265): {scan} scan of (58 files) in progress... Aug 14 04:50:56 ispc maldet(2039265): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 1966s Aug 14 04:50:56 ispc maldet(2039265): {scan} scan report saved, to view run: maldet --report 250814-0418.2039265 Aug 15 04:12:44 ispc maldet(2171397): {update} checking for available updates... Aug 15 04:12:45 ispc maldet(2171397): {update} could not download version file from server, please try again later. Aug 15 04:12:49 ispc maldet(2171475): {sigup} performing signature update check... Aug 15 04:12:49 ispc maldet(2171475): {sigup} local signature set is version 2017022510908 Aug 15 04:12:49 ispc maldet(2171475): {sigup} could not download signature data from server, please try again later. Aug 15 04:12:53 ispc maldet(2171558): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 15 04:12:57 ispc maldet(2171558): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 15 04:12:58 ispc maldet(2171558): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 15 04:12:58 ispc maldet(2171558): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 15 04:12:58 ispc maldet(2171558): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 15 04:54:54 ispc maldet(2171558): {scan} file list completed in 2515s, found 60 files... Aug 15 04:54:54 ispc maldet(2171558): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 15 04:54:54 ispc maldet(2171558): {scan} scan of (60 files) in progress... Aug 15 04:54:57 ispc maldet(2171558): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 2524s Aug 15 04:54:58 ispc maldet(2171558): {scan} scan report saved, to view run: maldet --report 250815-0412.2171558 Aug 16 04:11:24 ispc maldet(2363465): {update} checking for available updates... Aug 16 04:11:25 ispc maldet(2363465): {update} could not download version file from server, please try again later. Aug 16 04:11:29 ispc maldet(2363542): {sigup} performing signature update check... Aug 16 04:11:29 ispc maldet(2363542): {sigup} local signature set is version 2017022510908 Aug 16 04:11:30 ispc maldet(2363542): {sigup} could not download signature data from server, please try again later. Aug 16 04:11:35 ispc maldet(2363625): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 16 04:11:39 ispc maldet(2363625): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 16 04:11:39 ispc maldet(2363625): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 16 04:11:40 ispc maldet(2363625): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 16 04:11:40 ispc maldet(2363625): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 16 04:57:48 ispc maldet(2363625): {scan} file list completed in 2768s, found 56 files... Aug 16 04:57:49 ispc maldet(2363625): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 16 04:57:49 ispc maldet(2363625): {scan} scan of (56 files) in progress... Aug 16 04:57:52 ispc maldet(2363625): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2776s Aug 16 04:57:53 ispc maldet(2363625): {scan} scan report saved, to view run: maldet --report 250816-0411.2363625 Aug 17 04:16:07 ispc maldet(2556856): {update} checking for available updates... Aug 17 04:16:08 ispc maldet(2556856): {update} could not download version file from server, please try again later. Aug 17 04:16:12 ispc maldet(2556933): {sigup} performing signature update check... Aug 17 04:16:13 ispc maldet(2556933): {sigup} local signature set is version 2017022510908 Aug 17 04:16:13 ispc maldet(2556933): {sigup} could not download signature data from server, please try again later. Aug 17 04:16:18 ispc maldet(2557017): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 17 04:16:24 ispc maldet(2557017): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 17 04:16:24 ispc maldet(2557017): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 17 04:16:24 ispc maldet(2557017): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 17 04:16:25 ispc maldet(2557017): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 17 04:51:29 ispc maldet(2557017): {scan} file list completed in 2105s, found 56 files... Aug 17 04:51:30 ispc maldet(2557017): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 17 04:51:30 ispc maldet(2557017): {scan} scan of (56 files) in progress... Aug 17 04:51:33 ispc maldet(2557017): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2115s Aug 17 04:51:34 ispc maldet(2557017): {scan} scan report saved, to view run: maldet --report 250817-0416.2557017 Aug 18 04:11:47 ispc maldet(2752307): {update} checking for available updates... Aug 18 04:11:48 ispc maldet(2752307): {update} could not download version file from server, please try again later. Aug 18 04:11:51 ispc maldet(2752384): {sigup} performing signature update check... Aug 18 04:11:52 ispc maldet(2752384): {sigup} local signature set is version 2017022510908 Aug 18 04:11:52 ispc maldet(2752384): {sigup} could not download signature data from server, please try again later. Aug 18 04:11:57 ispc maldet(2752466): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 18 04:12:04 ispc maldet(2752466): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 18 04:12:04 ispc maldet(2752466): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 18 04:12:05 ispc maldet(2752466): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 18 04:12:05 ispc maldet(2752466): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 18 04:58:06 ispc maldet(2752466): {scan} file list completed in 2761s, found 56 files... Aug 18 04:58:07 ispc maldet(2752466): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 18 04:58:07 ispc maldet(2752466): {scan} scan of (56 files) in progress... Aug 18 04:58:11 ispc maldet(2752466): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2773s Aug 18 04:58:12 ispc maldet(2752466): {scan} scan report saved, to view run: maldet --report 250818-0411.2752466 Aug 19 04:15:58 ispc maldet(2953598): {update} checking for available updates... Aug 19 04:15:58 ispc maldet(2953598): {update} could not download version file from server, please try again later. Aug 19 04:16:02 ispc maldet(2953671): {sigup} performing signature update check... Aug 19 04:16:02 ispc maldet(2953671): {sigup} local signature set is version 2017022510908 Aug 19 04:16:03 ispc maldet(2953671): {sigup} could not download signature data from server, please try again later. Aug 19 04:16:08 ispc maldet(2953768): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 19 04:16:12 ispc maldet(2953768): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 19 04:16:13 ispc maldet(2953768): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 19 04:16:13 ispc maldet(2953768): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 19 04:16:13 ispc maldet(2953768): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 19 05:03:24 ispc maldet(2953768): {scan} file list completed in 2831s, found 229 files... Aug 19 05:03:25 ispc maldet(2953768): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 19 05:03:25 ispc maldet(2953768): {scan} scan of (229 files) in progress... Aug 19 05:03:27 ispc maldet(2953768): {scan} scan completed on : files 229, malware hits 0, cleaned hits 0, time 2838s Aug 19 05:03:28 ispc maldet(2953768): {scan} scan report saved, to view run: maldet --report 250819-0416.2953768 Aug 20 04:11:54 ispc maldet(3160218): {update} checking for available updates... Aug 20 04:11:55 ispc maldet(3160218): {update} could not download version file from server, please try again later. Aug 20 04:11:59 ispc maldet(3160294): {sigup} performing signature update check... Aug 20 04:12:00 ispc maldet(3160294): {sigup} local signature set is version 2017022510908 Aug 20 04:12:00 ispc maldet(3160294): {sigup} could not download signature data from server, please try again later. Aug 20 04:12:05 ispc maldet(3160378): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 20 04:12:10 ispc maldet(3160378): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 20 04:12:10 ispc maldet(3160378): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 20 04:12:11 ispc maldet(3160378): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 20 04:12:11 ispc maldet(3160378): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 20 04:54:38 ispc maldet(3160378): {scan} file list completed in 2546s, found 58 files... Aug 20 04:54:38 ispc maldet(3160378): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 20 04:54:38 ispc maldet(3160378): {scan} scan of (58 files) in progress... Aug 20 04:54:40 ispc maldet(3160378): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 2554s Aug 20 04:54:41 ispc maldet(3160378): {scan} scan report saved, to view run: maldet --report 250820-0412.3160378 Aug 21 04:11:35 ispc maldet(3286762): {update} checking for available updates... Aug 21 04:11:36 ispc maldet(3286762): {update} could not download version file from server, please try again later. Aug 21 04:11:41 ispc maldet(3286837): {sigup} performing signature update check... Aug 21 04:11:41 ispc maldet(3286837): {sigup} local signature set is version 2017022510908 Aug 21 04:11:41 ispc maldet(3286837): {sigup} could not download signature data from server, please try again later. Aug 21 04:11:46 ispc maldet(3286925): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 21 04:11:51 ispc maldet(3286925): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 21 04:11:51 ispc maldet(3286925): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 21 04:11:52 ispc maldet(3286925): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 21 04:11:52 ispc maldet(3286925): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 21 04:57:32 ispc maldet(3286925): {scan} file list completed in 2740s, found 57 files... Aug 21 04:57:32 ispc maldet(3286925): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 21 04:57:33 ispc maldet(3286925): {scan} scan of (57 files) in progress... Aug 21 04:57:37 ispc maldet(3286925): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 2750s Aug 21 04:57:37 ispc maldet(3286925): {scan} scan report saved, to view run: maldet --report 250821-0411.3286925 Aug 22 04:12:18 ispc maldet(3474535): {update} checking for available updates... Aug 22 04:12:18 ispc maldet(3474535): {update} could not download version file from server, please try again later. Aug 22 04:12:23 ispc maldet(3474608): {sigup} performing signature update check... Aug 22 04:12:23 ispc maldet(3474608): {sigup} local signature set is version 2017022510908 Aug 22 04:12:24 ispc maldet(3474608): {sigup} could not download signature data from server, please try again later. Aug 22 04:12:28 ispc maldet(3474694): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 22 04:12:35 ispc maldet(3474694): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 22 04:12:35 ispc maldet(3474694): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 22 04:12:36 ispc maldet(3474694): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 22 04:12:36 ispc maldet(3474694): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 22 05:14:14 ispc maldet(3474694): {scan} file list completed in 3697s, found 55 files... Aug 22 05:14:14 ispc maldet(3474694): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 22 05:14:15 ispc maldet(3474694): {scan} scan of (55 files) in progress... Aug 22 05:14:18 ispc maldet(3474694): {scan} scan completed on : files 55, malware hits 0, cleaned hits 0, time 3708s Aug 22 05:14:18 ispc maldet(3474694): {scan} scan report saved, to view run: maldet --report 250822-0412.3474694 Aug 23 04:12:53 ispc maldet(3661361): {update} checking for available updates... Aug 23 04:12:54 ispc maldet(3661361): {update} could not download version file from server, please try again later. Aug 23 04:12:59 ispc maldet(3661434): {sigup} performing signature update check... Aug 23 04:12:59 ispc maldet(3661434): {sigup} local signature set is version 2017022510908 Aug 23 04:13:00 ispc maldet(3661434): {sigup} could not download signature data from server, please try again later. Aug 23 04:13:05 ispc maldet(3661522): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 23 04:13:10 ispc maldet(3661522): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 23 04:13:10 ispc maldet(3661522): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 23 04:13:11 ispc maldet(3661522): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 23 04:13:11 ispc maldet(3661522): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 23 04:55:31 ispc maldet(3661522): {scan} file list completed in 2540s, found 54 files... Aug 23 04:55:32 ispc maldet(3661522): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 23 04:55:32 ispc maldet(3661522): {scan} scan of (54 files) in progress... Aug 23 04:55:36 ispc maldet(3661522): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 2550s Aug 23 04:55:36 ispc maldet(3661522): {scan} scan report saved, to view run: maldet --report 250823-0413.3661522 Aug 24 04:14:04 ispc maldet(3850528): {update} checking for available updates... Aug 24 04:14:05 ispc maldet(3850528): {update} could not download version file from server, please try again later. Aug 24 04:14:09 ispc maldet(3850617): {sigup} performing signature update check... Aug 24 04:14:09 ispc maldet(3850617): {sigup} local signature set is version 2017022510908 Aug 24 04:14:10 ispc maldet(3850617): {sigup} could not download signature data from server, please try again later. Aug 24 04:14:14 ispc maldet(3850700): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 24 04:14:20 ispc maldet(3850700): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 24 04:14:21 ispc maldet(3850700): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 24 04:14:21 ispc maldet(3850700): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 24 04:14:22 ispc maldet(3850700): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 24 04:53:16 ispc maldet(3850700): {scan} file list completed in 2333s, found 58 files... Aug 24 04:53:16 ispc maldet(3850700): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 24 04:53:17 ispc maldet(3850700): {scan} scan of (58 files) in progress... Aug 24 04:53:20 ispc maldet(3850700): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 2345s Aug 24 04:53:20 ispc maldet(3850700): {scan} scan report saved, to view run: maldet --report 250824-0414.3850700 Aug 25 04:17:01 ispc maldet(4036230): {update} checking for available updates... Aug 25 04:17:01 ispc maldet(4036230): {update} could not download version file from server, please try again later. Aug 25 04:17:05 ispc maldet(4036307): {sigup} performing signature update check... Aug 25 04:17:06 ispc maldet(4036307): {sigup} local signature set is version 2017022510908 Aug 25 04:17:07 ispc maldet(4036307): {sigup} could not download signature data from server, please try again later. Aug 25 04:17:11 ispc maldet(4036400): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 25 04:17:17 ispc maldet(4036400): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 25 04:17:17 ispc maldet(4036400): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 25 04:17:17 ispc maldet(4036400): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 25 04:17:18 ispc maldet(4036400): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 25 05:17:09 ispc maldet(4036400): {scan} file list completed in 3591s, found 56 files... Aug 25 05:17:09 ispc maldet(4036400): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 25 05:17:09 ispc maldet(4036400): {scan} scan of (56 files) in progress... Aug 25 05:17:13 ispc maldet(4036400): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 3600s Aug 25 05:17:13 ispc maldet(4036400): {scan} scan report saved, to view run: maldet --report 250825-0417.4036400 Aug 26 04:10:40 ispc maldet(4157793): {update} checking for available updates... Aug 26 04:10:40 ispc maldet(4157793): {update} could not download version file from server, please try again later. Aug 26 04:10:45 ispc maldet(4157871): {sigup} performing signature update check... Aug 26 04:10:45 ispc maldet(4157871): {sigup} local signature set is version 2017022510908 Aug 26 04:10:46 ispc maldet(4157871): {sigup} could not download signature data from server, please try again later. Aug 26 04:10:50 ispc maldet(4157957): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 26 04:10:57 ispc maldet(4157957): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 26 04:10:57 ispc maldet(4157957): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 26 04:10:58 ispc maldet(4157957): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 26 04:10:58 ispc maldet(4157957): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 26 06:14:02 ispc maldet(4157957): {scan} file list completed in 7383s, found 55 files... Aug 26 06:14:02 ispc maldet(4157957): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 26 06:14:02 ispc maldet(4157957): {scan} scan of (55 files) in progress... Aug 26 06:14:07 ispc maldet(4157957): {scan} scan completed on : files 55, malware hits 0, cleaned hits 0, time 7395s Aug 26 06:14:07 ispc maldet(4157957): {scan} scan report saved, to view run: maldet --report 250826-0410.4157957 Aug 27 04:12:52 ispc maldet(144642): {update} checking for available updates... Aug 27 04:12:52 ispc maldet(144642): {update} could not download version file from server, please try again later. Aug 27 04:12:57 ispc maldet(144716): {sigup} performing signature update check... Aug 27 04:12:57 ispc maldet(144716): {sigup} local signature set is version 2017022510908 Aug 27 04:12:58 ispc maldet(144716): {sigup} could not download signature data from server, please try again later. Aug 27 04:13:02 ispc maldet(144803): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 27 04:13:08 ispc maldet(144803): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 27 04:13:09 ispc maldet(144803): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 27 04:13:09 ispc maldet(144803): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 27 04:13:09 ispc maldet(144803): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 27 05:18:39 ispc maldet(144803): {scan} file list completed in 3929s, found 58 files... Aug 27 05:18:39 ispc maldet(144803): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 27 05:18:40 ispc maldet(144803): {scan} scan of (58 files) in progress... Aug 27 05:18:42 ispc maldet(144803): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 3940s Aug 27 05:18:42 ispc maldet(144803): {scan} scan report saved, to view run: maldet --report 250827-0412.144803 Aug 28 04:11:28 ispc maldet(325078): {update} checking for available updates... Aug 28 04:11:29 ispc maldet(325078): {update} could not download version file from server, please try again later. Aug 28 04:11:33 ispc maldet(325156): {sigup} performing signature update check... Aug 28 04:11:33 ispc maldet(325156): {sigup} local signature set is version 2017022510908 Aug 28 04:11:34 ispc maldet(325156): {sigup} could not download signature data from server, please try again later. Aug 28 04:11:38 ispc maldet(325238): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 28 04:11:43 ispc maldet(325238): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 28 04:11:44 ispc maldet(325238): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 28 04:11:44 ispc maldet(325238): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 28 04:11:44 ispc maldet(325238): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 28 04:49:12 ispc maldet(325238): {scan} file list completed in 2247s, found 51 files... Aug 28 04:49:12 ispc maldet(325238): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 28 04:49:12 ispc maldet(325238): {scan} scan of (51 files) in progress... Aug 28 04:49:15 ispc maldet(325238): {scan} scan completed on : files 51, malware hits 0, cleaned hits 0, time 2256s Aug 28 04:49:15 ispc maldet(325238): {scan} scan report saved, to view run: maldet --report 250828-0411.325238 Aug 29 04:12:28 ispc maldet(505106): {update} checking for available updates... Aug 29 04:12:28 ispc maldet(505106): {update} could not download version file from server, please try again later. Aug 29 04:12:33 ispc maldet(505180): {sigup} performing signature update check... Aug 29 04:12:33 ispc maldet(505180): {sigup} local signature set is version 2017022510908 Aug 29 04:12:34 ispc maldet(505180): {sigup} could not download signature data from server, please try again later. Aug 29 04:12:38 ispc maldet(505266): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 29 04:12:45 ispc maldet(505266): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 29 04:12:46 ispc maldet(505266): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 29 04:12:46 ispc maldet(505266): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 29 04:12:47 ispc maldet(505266): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 29 05:18:46 ispc maldet(505266): {scan} file list completed in 3960s, found 55 files... Aug 29 05:18:47 ispc maldet(505266): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 29 05:18:47 ispc maldet(505266): {scan} scan of (55 files) in progress... Aug 29 05:18:50 ispc maldet(505266): {scan} scan completed on : files 55, malware hits 0, cleaned hits 0, time 3970s Aug 29 05:18:50 ispc maldet(505266): {scan} scan report saved, to view run: maldet --report 250829-0412.505266 Aug 30 04:10:59 ispc maldet(683067): {update} checking for available updates... Aug 30 04:10:59 ispc maldet(683067): {update} could not download version file from server, please try again later. Aug 30 04:11:04 ispc maldet(683147): {sigup} performing signature update check... Aug 30 04:11:04 ispc maldet(683147): {sigup} local signature set is version 2017022510908 Aug 30 04:11:05 ispc maldet(683147): {sigup} could not download signature data from server, please try again later. Aug 30 04:11:10 ispc maldet(683239): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 30 04:11:16 ispc maldet(683239): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 30 04:11:17 ispc maldet(683239): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 30 04:11:17 ispc maldet(683239): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 30 04:11:17 ispc maldet(683239): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 30 06:01:31 ispc maldet(683239): {scan} file list completed in 6613s, found 57 files... Aug 30 06:01:31 ispc maldet(683239): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 30 06:01:31 ispc maldet(683239): {scan} scan of (57 files) in progress... Aug 30 06:01:35 ispc maldet(683239): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 6624s Aug 30 06:01:35 ispc maldet(683239): {scan} scan report saved, to view run: maldet --report 250830-0411.683239 Aug 31 04:15:51 ispc maldet(801460): {update} checking for available updates... Aug 31 04:15:51 ispc maldet(801460): {update} could not download version file from server, please try again later. Aug 31 04:15:56 ispc maldet(801535): {sigup} performing signature update check... Aug 31 04:15:56 ispc maldet(801535): {sigup} local signature set is version 2017022510908 Aug 31 04:15:57 ispc maldet(801535): {sigup} could not download signature data from server, please try again later. Aug 31 04:16:02 ispc maldet(801623): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 31 04:16:08 ispc maldet(801623): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Aug 31 04:16:09 ispc maldet(801623): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 31 04:16:09 ispc maldet(801623): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 31 04:16:10 ispc maldet(801623): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 31 06:12:32 ispc maldet(801623): {scan} file list completed in 6983s, found 57 files... Aug 31 06:12:33 ispc maldet(801623): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Aug 31 06:12:33 ispc maldet(801623): {scan} scan of (57 files) in progress... Aug 31 06:12:36 ispc maldet(801623): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 6993s Aug 31 06:12:37 ispc maldet(801623): {scan} scan report saved, to view run: maldet --report 250831-0415.801623 Sep 01 04:09:14 ispc maldet(979501): {update} checking for available updates... Sep 01 04:09:15 ispc maldet(979501): {update} could not download version file from server, please try again later. Sep 01 04:09:18 ispc maldet(979574): {sigup} performing signature update check... Sep 01 04:09:18 ispc maldet(979574): {sigup} local signature set is version 2017022510908 Sep 01 04:09:19 ispc maldet(979574): {sigup} could not download signature data from server, please try again later. Sep 01 04:09:23 ispc maldet(979659): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 01 04:09:28 ispc maldet(979659): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 01 04:09:28 ispc maldet(979659): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 01 04:09:28 ispc maldet(979659): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 01 04:09:29 ispc maldet(979659): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 01 04:48:37 ispc maldet(979659): {scan} file list completed in 2347s, found 55 files... Sep 01 04:48:37 ispc maldet(979659): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 01 04:48:38 ispc maldet(979659): {scan} scan of (55 files) in progress... Sep 01 04:48:40 ispc maldet(979659): {scan} scan completed on : files 55, malware hits 0, cleaned hits 0, time 2356s Sep 01 04:48:40 ispc maldet(979659): {scan} scan report saved, to view run: maldet --report 250901-0409.979659 Sep 02 04:10:11 ispc maldet(1161762): {update} checking for available updates... Sep 02 04:10:11 ispc maldet(1161762): {update} could not download version file from server, please try again later. Sep 02 04:10:16 ispc maldet(1161836): {sigup} performing signature update check... Sep 02 04:10:16 ispc maldet(1161836): {sigup} local signature set is version 2017022510908 Sep 02 04:10:16 ispc maldet(1161836): {sigup} could not download signature data from server, please try again later. Sep 02 04:10:20 ispc maldet(1161924): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 02 04:10:27 ispc maldet(1161924): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 02 04:10:27 ispc maldet(1161924): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 02 04:10:28 ispc maldet(1161924): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 02 04:10:28 ispc maldet(1161924): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 02 04:52:29 ispc maldet(1161924): {scan} file list completed in 2520s, found 53 files... Sep 02 04:52:29 ispc maldet(1161924): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 02 04:52:30 ispc maldet(1161924): {scan} scan of (53 files) in progress... Sep 02 04:52:33 ispc maldet(1161924): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 2532s Sep 02 04:52:33 ispc maldet(1161924): {scan} scan report saved, to view run: maldet --report 250902-0410.1161924 Sep 03 04:10:44 ispc maldet(1340287): {update} checking for available updates... Sep 03 04:10:45 ispc maldet(1340287): {update} could not download version file from server, please try again later. Sep 03 04:10:49 ispc maldet(1340364): {sigup} performing signature update check... Sep 03 04:10:50 ispc maldet(1340364): {sigup} local signature set is version 2017022510908 Sep 03 04:10:50 ispc maldet(1340364): {sigup} could not download signature data from server, please try again later. Sep 03 04:10:55 ispc maldet(1340450): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 03 04:10:58 ispc maldet(1340450): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 03 04:10:58 ispc maldet(1340450): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 03 04:10:59 ispc maldet(1340450): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 03 04:10:59 ispc maldet(1340450): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 03 04:52:59 ispc maldet(1340450): {scan} file list completed in 2520s, found 54 files... Sep 03 04:52:59 ispc maldet(1340450): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 03 04:52:59 ispc maldet(1340450): {scan} scan of (54 files) in progress... Sep 03 04:53:02 ispc maldet(1340450): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 2526s Sep 03 04:53:02 ispc maldet(1340450): {scan} scan report saved, to view run: maldet --report 250903-0410.1340450 Sep 04 04:14:04 ispc maldet(1540789): {update} checking for available updates... Sep 04 04:14:05 ispc maldet(1540789): {update} could not download version file from server, please try again later. Sep 04 04:14:09 ispc maldet(1540873): {sigup} performing signature update check... Sep 04 04:14:09 ispc maldet(1540873): {sigup} local signature set is version 2017022510908 Sep 04 04:14:10 ispc maldet(1540873): {sigup} could not download signature data from server, please try again later. Sep 04 04:14:15 ispc maldet(1540956): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 04 04:14:22 ispc maldet(1540956): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 04 04:14:22 ispc maldet(1540956): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 04 04:14:23 ispc maldet(1540956): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 04 04:14:23 ispc maldet(1540956): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 04 04:57:17 ispc maldet(1540956): {scan} file list completed in 2574s, found 53 files... Sep 04 04:57:18 ispc maldet(1540956): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 04 04:57:18 ispc maldet(1540956): {scan} scan of (53 files) in progress... Sep 04 04:57:20 ispc maldet(1540956): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 2584s Sep 04 04:57:20 ispc maldet(1540956): {scan} scan report saved, to view run: maldet --report 250904-0414.1540956 Sep 05 04:09:38 ispc maldet(1662960): {update} checking for available updates... Sep 05 04:09:39 ispc maldet(1662960): {update} could not download version file from server, please try again later. Sep 05 04:09:43 ispc maldet(1663037): {sigup} performing signature update check... Sep 05 04:09:44 ispc maldet(1663037): {sigup} local signature set is version 2017022510908 Sep 05 04:09:44 ispc maldet(1663037): {sigup} could not download signature data from server, please try again later. Sep 05 04:09:49 ispc maldet(1663122): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 05 04:09:55 ispc maldet(1663122): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 05 04:09:55 ispc maldet(1663122): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 05 04:09:55 ispc maldet(1663122): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 05 04:09:56 ispc maldet(1663122): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 05 04:57:14 ispc maldet(1663122): {scan} file list completed in 2837s, found 54 files... Sep 05 04:57:14 ispc maldet(1663122): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 05 04:57:14 ispc maldet(1663122): {scan} scan of (54 files) in progress... Sep 05 04:57:17 ispc maldet(1663122): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 2846s Sep 05 04:57:17 ispc maldet(1663122): {scan} scan report saved, to view run: maldet --report 250905-0409.1663122 Sep 06 04:11:28 ispc maldet(1850476): {update} checking for available updates... Sep 06 04:11:29 ispc maldet(1850476): {update} could not download version file from server, please try again later. Sep 06 04:11:33 ispc maldet(1850552): {sigup} performing signature update check... Sep 06 04:11:33 ispc maldet(1850552): {sigup} local signature set is version 2017022510908 Sep 06 04:11:34 ispc maldet(1850552): {sigup} could not download signature data from server, please try again later. Sep 06 04:11:39 ispc maldet(1850641): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 06 04:11:44 ispc maldet(1850641): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 06 04:11:44 ispc maldet(1850641): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 06 04:11:45 ispc maldet(1850641): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 06 04:11:45 ispc maldet(1850641): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 06 04:48:39 ispc maldet(1850641): {scan} file list completed in 2213s, found 58 files... Sep 06 04:48:39 ispc maldet(1850641): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 06 04:48:39 ispc maldet(1850641): {scan} scan of (58 files) in progress... Sep 06 04:48:42 ispc maldet(1850641): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 2222s Sep 06 04:48:42 ispc maldet(1850641): {scan} scan report saved, to view run: maldet --report 250906-0411.1850641 Sep 07 04:15:52 ispc maldet(2047545): {update} checking for available updates... Sep 07 04:15:52 ispc maldet(2047545): {update} could not download version file from server, please try again later. Sep 07 04:15:57 ispc maldet(2047638): {sigup} performing signature update check... Sep 07 04:15:57 ispc maldet(2047638): {sigup} local signature set is version 2017022510908 Sep 07 04:15:58 ispc maldet(2047638): {sigup} could not download signature data from server, please try again later. Sep 07 04:16:02 ispc maldet(2047732): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 07 04:16:08 ispc maldet(2047732): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 07 04:16:09 ispc maldet(2047732): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 07 04:16:09 ispc maldet(2047732): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 07 04:16:09 ispc maldet(2047732): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 07 04:53:31 ispc maldet(2047732): {scan} file list completed in 2242s, found 59 files... Sep 07 04:53:32 ispc maldet(2047732): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 07 04:53:32 ispc maldet(2047732): {scan} scan of (59 files) in progress... Sep 07 04:53:35 ispc maldet(2047732): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 2253s Sep 07 04:53:35 ispc maldet(2047732): {scan} scan report saved, to view run: maldet --report 250907-0415.2047732 Sep 08 04:10:18 ispc maldet(2238018): {update} checking for available updates... Sep 08 04:10:19 ispc maldet(2238018): {update} could not download version file from server, please try again later. Sep 08 04:10:22 ispc maldet(2238095): {sigup} performing signature update check... Sep 08 04:10:23 ispc maldet(2238095): {sigup} local signature set is version 2017022510908 Sep 08 04:10:23 ispc maldet(2238095): {sigup} could not download signature data from server, please try again later. Sep 08 04:10:28 ispc maldet(2238177): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 08 04:10:34 ispc maldet(2238177): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 08 04:10:34 ispc maldet(2238177): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 08 04:10:34 ispc maldet(2238177): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 08 04:10:34 ispc maldet(2238177): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 08 04:54:01 ispc maldet(2238177): {scan} file list completed in 2606s, found 58 files... Sep 08 04:54:01 ispc maldet(2238177): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 08 04:54:01 ispc maldet(2238177): {scan} scan of (58 files) in progress... Sep 08 04:54:04 ispc maldet(2238177): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 2615s Sep 08 04:54:04 ispc maldet(2238177): {scan} scan report saved, to view run: maldet --report 250908-0410.2238177 Sep 09 04:12:02 ispc maldet(2366217): {update} checking for available updates... Sep 09 04:12:02 ispc maldet(2366217): {update} could not download version file from server, please try again later. Sep 09 04:12:06 ispc maldet(2366304): {sigup} performing signature update check... Sep 09 04:12:06 ispc maldet(2366304): {sigup} local signature set is version 2017022510908 Sep 09 04:12:07 ispc maldet(2366304): {sigup} could not download signature data from server, please try again later. Sep 09 04:12:11 ispc maldet(2366386): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 09 04:12:18 ispc maldet(2366386): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 09 04:12:18 ispc maldet(2366386): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 09 04:12:19 ispc maldet(2366386): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 09 04:12:19 ispc maldet(2366386): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 09 04:54:50 ispc maldet(2366386): {scan} file list completed in 2550s, found 58 files... Sep 09 04:54:50 ispc maldet(2366386): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 09 04:54:51 ispc maldet(2366386): {scan} scan of (58 files) in progress... Sep 09 04:54:54 ispc maldet(2366386): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 2562s Sep 09 04:54:54 ispc maldet(2366386): {scan} scan report saved, to view run: maldet --report 250909-0412.2366386 Sep 10 04:09:19 ispc maldet(2549393): {update} checking for available updates... Sep 10 04:09:19 ispc maldet(2549393): {update} could not download version file from server, please try again later. Sep 10 04:09:24 ispc maldet(2549470): {sigup} performing signature update check... Sep 10 04:09:24 ispc maldet(2549470): {sigup} local signature set is version 2017022510908 Sep 10 04:09:24 ispc maldet(2549470): {sigup} could not download signature data from server, please try again later. Sep 10 04:09:28 ispc maldet(2549551): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 10 04:09:35 ispc maldet(2549551): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 10 04:09:35 ispc maldet(2549551): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 10 04:09:35 ispc maldet(2549551): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 10 04:09:35 ispc maldet(2549551): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 10 05:14:25 ispc maldet(2549551): {scan} file list completed in 3890s, found 56 files... Sep 10 05:14:26 ispc maldet(2549551): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 10 05:14:26 ispc maldet(2549551): {scan} scan of (56 files) in progress... Sep 10 05:14:29 ispc maldet(2549551): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 3900s Sep 10 05:14:30 ispc maldet(2549551): {scan} scan report saved, to view run: maldet --report 250910-0409.2549551 Sep 11 04:10:30 ispc maldet(2736284): {update} checking for available updates... Sep 11 04:10:31 ispc maldet(2736284): {update} could not download version file from server, please try again later. Sep 11 04:10:35 ispc maldet(2736361): {sigup} performing signature update check... Sep 11 04:10:36 ispc maldet(2736361): {sigup} local signature set is version 2017022510908 Sep 11 04:10:36 ispc maldet(2736361): {sigup} could not download signature data from server, please try again later. Sep 11 04:10:41 ispc maldet(2736454): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 11 04:10:46 ispc maldet(2736454): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 11 04:10:47 ispc maldet(2736454): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 11 04:10:47 ispc maldet(2736454): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 11 04:10:48 ispc maldet(2736454): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 11 04:52:39 ispc maldet(2736454): {scan} file list completed in 2512s, found 60 files... Sep 11 04:52:40 ispc maldet(2736454): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 11 04:52:40 ispc maldet(2736454): {scan} scan of (60 files) in progress... Sep 11 04:52:43 ispc maldet(2736454): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 2522s Sep 11 04:52:44 ispc maldet(2736454): {scan} scan report saved, to view run: maldet --report 250911-0410.2736454 Sep 12 04:11:43 ispc maldet(2918465): {update} checking for available updates... Sep 12 04:11:44 ispc maldet(2918465): {update} could not download version file from server, please try again later. Sep 12 04:11:47 ispc maldet(2918556): {sigup} performing signature update check... Sep 12 04:11:47 ispc maldet(2918556): {sigup} local signature set is version 2017022510908 Sep 12 04:11:47 ispc maldet(2918556): {sigup} could not download signature data from server, please try again later. Sep 12 04:11:52 ispc maldet(2918637): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 12 04:11:57 ispc maldet(2918637): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 12 04:11:58 ispc maldet(2918637): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 12 04:11:58 ispc maldet(2918637): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 12 04:11:58 ispc maldet(2918637): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 12 04:58:47 ispc maldet(2918637): {scan} file list completed in 2809s, found 57 files... Sep 12 04:58:48 ispc maldet(2918637): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 12 04:58:48 ispc maldet(2918637): {scan} scan of (57 files) in progress... Sep 12 04:58:52 ispc maldet(2918637): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 2819s Sep 12 04:58:52 ispc maldet(2918637): {scan} scan report saved, to view run: maldet --report 250912-0411.2918637 Sep 13 04:12:38 ispc maldet(3106782): {update} checking for available updates... Sep 13 04:12:39 ispc maldet(3106782): {update} could not download version file from server, please try again later. Sep 13 04:12:43 ispc maldet(3106857): {sigup} performing signature update check... Sep 13 04:12:43 ispc maldet(3106857): {sigup} local signature set is version 2017022510908 Sep 13 04:12:43 ispc maldet(3106857): {sigup} could not download signature data from server, please try again later. Sep 13 04:12:46 ispc maldet(3106941): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 13 04:12:52 ispc maldet(3106941): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 13 04:12:52 ispc maldet(3106941): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 13 04:12:52 ispc maldet(3106941): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 13 04:12:53 ispc maldet(3106941): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 13 05:01:37 ispc maldet(3106941): {scan} file list completed in 2924s, found 63 files... Sep 13 05:01:37 ispc maldet(3106941): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 13 05:01:37 ispc maldet(3106941): {scan} scan of (63 files) in progress... Sep 13 05:01:41 ispc maldet(3106941): {scan} scan completed on : files 63, malware hits 0, cleaned hits 0, time 2933s Sep 13 05:01:41 ispc maldet(3106941): {scan} scan report saved, to view run: maldet --report 250913-0412.3106941 Sep 14 04:12:14 ispc maldet(3229434): {update} checking for available updates... Sep 14 04:12:15 ispc maldet(3229434): {update} could not download version file from server, please try again later. Sep 14 04:12:18 ispc maldet(3229508): {sigup} performing signature update check... Sep 14 04:12:19 ispc maldet(3229508): {sigup} local signature set is version 2017022510908 Sep 14 04:12:20 ispc maldet(3229508): {sigup} could not download signature data from server, please try again later. Sep 14 04:12:24 ispc maldet(3229594): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 14 04:12:30 ispc maldet(3229594): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 14 04:12:30 ispc maldet(3229594): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 14 04:12:30 ispc maldet(3229594): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 14 04:12:31 ispc maldet(3229594): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 14 04:52:31 ispc maldet(3229594): {scan} file list completed in 2400s, found 59 files... Sep 14 04:52:31 ispc maldet(3229594): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 14 04:52:31 ispc maldet(3229594): {scan} scan of (59 files) in progress... Sep 14 04:52:35 ispc maldet(3229594): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 2409s Sep 14 04:52:35 ispc maldet(3229594): {scan} scan report saved, to view run: maldet --report 250914-0412.3229594 Sep 15 04:14:58 ispc maldet(3409755): {update} checking for available updates... Sep 15 04:14:58 ispc maldet(3409755): {update} could not download version file from server, please try again later. Sep 15 04:15:03 ispc maldet(3409832): {sigup} performing signature update check... Sep 15 04:15:03 ispc maldet(3409832): {sigup} local signature set is version 2017022510908 Sep 15 04:15:04 ispc maldet(3409832): {sigup} could not download signature data from server, please try again later. Sep 15 04:15:08 ispc maldet(3409967): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 15 04:15:15 ispc maldet(3409967): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 15 04:15:15 ispc maldet(3409967): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 15 04:15:15 ispc maldet(3409967): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 15 04:15:15 ispc maldet(3409967): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 15 06:06:28 ispc maldet(3409967): {scan} file list completed in 6672s, found 68 files... Sep 15 06:06:28 ispc maldet(3409967): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 15 06:06:28 ispc maldet(3409967): {scan} scan of (68 files) in progress... Sep 15 06:06:31 ispc maldet(3409967): {scan} scan completed on : files 68, malware hits 0, cleaned hits 0, time 6682s Sep 15 06:06:32 ispc maldet(3409967): {scan} scan report saved, to view run: maldet --report 250915-0415.3409967 Sep 16 04:10:46 ispc maldet(3590568): {update} checking for available updates... Sep 16 04:10:47 ispc maldet(3590568): {update} could not download version file from server, please try again later. Sep 16 04:10:51 ispc maldet(3590645): {sigup} performing signature update check... Sep 16 04:10:51 ispc maldet(3590645): {sigup} local signature set is version 2017022510908 Sep 16 04:10:52 ispc maldet(3590645): {sigup} could not download signature data from server, please try again later. Sep 16 04:10:57 ispc maldet(3590729): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 16 04:11:03 ispc maldet(3590729): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 16 04:11:03 ispc maldet(3590729): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 16 04:11:03 ispc maldet(3590729): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 16 04:11:04 ispc maldet(3590729): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 16 05:03:58 ispc maldet(3590729): {scan} file list completed in 3174s, found 254 files... Sep 16 05:03:58 ispc maldet(3590729): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 16 05:03:58 ispc maldet(3590729): {scan} scan of (254 files) in progress... Sep 16 05:04:02 ispc maldet(3590729): {scan} scan completed on : files 254, malware hits 0, cleaned hits 0, time 3184s Sep 16 05:04:03 ispc maldet(3590729): {scan} scan report saved, to view run: maldet --report 250916-0410.3590729 Sep 17 04:10:32 ispc maldet(3711367): {update} checking for available updates... Sep 17 04:10:33 ispc maldet(3711367): {update} could not download version file from server, please try again later. Sep 17 04:10:37 ispc maldet(3711441): {sigup} performing signature update check... Sep 17 04:10:37 ispc maldet(3711441): {sigup} local signature set is version 2017022510908 Sep 17 04:10:38 ispc maldet(3711441): {sigup} could not download signature data from server, please try again later. Sep 17 04:10:43 ispc maldet(3711535): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 17 04:10:49 ispc maldet(3711535): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 17 04:10:50 ispc maldet(3711535): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 17 04:10:50 ispc maldet(3711535): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 17 04:10:50 ispc maldet(3711535): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 17 04:55:58 ispc maldet(3711535): {scan} file list completed in 2708s, found 64 files... Sep 17 04:55:59 ispc maldet(3711535): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 17 04:55:59 ispc maldet(3711535): {scan} scan of (64 files) in progress... Sep 17 04:56:01 ispc maldet(3711535): {scan} scan completed on : files 64, malware hits 0, cleaned hits 0, time 2717s Sep 17 04:56:01 ispc maldet(3711535): {scan} scan report saved, to view run: maldet --report 250917-0410.3711535 Sep 18 04:10:38 ispc maldet(3890891): {update} checking for available updates... Sep 18 04:10:39 ispc maldet(3890891): {update} could not download version file from server, please try again later. Sep 18 04:10:43 ispc maldet(3890969): {sigup} performing signature update check... Sep 18 04:10:43 ispc maldet(3890969): {sigup} local signature set is version 2017022510908 Sep 18 04:10:43 ispc maldet(3890969): {sigup} could not download signature data from server, please try again later. Sep 18 04:10:48 ispc maldet(3891051): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 18 04:10:53 ispc maldet(3891051): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 18 04:10:53 ispc maldet(3891051): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 18 04:10:53 ispc maldet(3891051): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 18 04:10:54 ispc maldet(3891051): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 18 06:04:14 ispc maldet(3891051): {scan} file list completed in 6801s, found 236 files... Sep 18 06:04:15 ispc maldet(3891051): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 18 06:04:15 ispc maldet(3891051): {scan} scan of (236 files) in progress... Sep 18 06:04:18 ispc maldet(3891051): {scan} scan completed on : files 236, malware hits 0, cleaned hits 0, time 6810s Sep 18 06:04:19 ispc maldet(3891051): {scan} scan report saved, to view run: maldet --report 250918-0410.3891051 Sep 19 04:22:42 ispc maldet(4070482): {update} checking for available updates... Sep 19 04:22:42 ispc maldet(4070482): {update} could not download version file from server, please try again later. Sep 19 04:22:47 ispc maldet(4070556): {sigup} performing signature update check... Sep 19 04:22:47 ispc maldet(4070556): {sigup} local signature set is version 2017022510908 Sep 19 04:22:48 ispc maldet(4070556): {sigup} could not download signature data from server, please try again later. Sep 19 04:22:52 ispc maldet(4070637): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 19 04:22:57 ispc maldet(4070637): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 19 04:22:58 ispc maldet(4070637): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 19 04:22:58 ispc maldet(4070637): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 19 04:22:59 ispc maldet(4070637): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 19 04:51:44 ispc maldet(4070637): {scan} file list completed in 1726s, found 60 files... Sep 19 04:51:45 ispc maldet(4070637): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 19 04:51:45 ispc maldet(4070637): {scan} scan of (60 files) in progress... Sep 19 04:51:49 ispc maldet(4070637): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 1735s Sep 19 04:51:49 ispc maldet(4070637): {scan} scan report saved, to view run: maldet --report 250919-0422.4070637 Sep 20 04:15:27 ispc maldet(58282): {update} checking for available updates... Sep 20 04:15:28 ispc maldet(58282): {update} could not download version file from server, please try again later. Sep 20 04:15:32 ispc maldet(58357): {sigup} performing signature update check... Sep 20 04:15:32 ispc maldet(58357): {sigup} local signature set is version 2017022510908 Sep 20 04:15:33 ispc maldet(58357): {sigup} could not download signature data from server, please try again later. Sep 20 04:15:37 ispc maldet(58440): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 20 04:15:44 ispc maldet(58440): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 20 04:15:44 ispc maldet(58440): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 20 04:15:44 ispc maldet(58440): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 20 04:15:45 ispc maldet(58440): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 20 05:05:07 ispc maldet(58440): {scan} file list completed in 2963s, found 57 files... Sep 20 05:05:08 ispc maldet(58440): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 20 05:05:08 ispc maldet(58440): {scan} scan of (57 files) in progress... Sep 20 05:05:12 ispc maldet(58440): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 2973s Sep 20 05:05:12 ispc maldet(58440): {scan} scan report saved, to view run: maldet --report 250920-0415.58440 Sep 21 04:22:25 ispc maldet(191374): {update} checking for available updates... Sep 21 04:22:26 ispc maldet(191374): {update} could not download version file from server, please try again later. Sep 21 04:22:30 ispc maldet(191451): {sigup} performing signature update check... Sep 21 04:22:31 ispc maldet(191451): {sigup} local signature set is version 2017022510908 Sep 21 04:22:31 ispc maldet(191451): {sigup} could not download signature data from server, please try again later. Sep 21 04:22:34 ispc maldet(191535): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 21 04:22:40 ispc maldet(191535): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 21 04:22:40 ispc maldet(191535): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 21 04:22:41 ispc maldet(191535): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 21 04:22:41 ispc maldet(191535): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 21 05:00:00 ispc maldet(191535): {scan} file list completed in 2239s, found 57 files... Sep 21 05:00:01 ispc maldet(191535): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 21 05:00:01 ispc maldet(191535): {scan} scan of (57 files) in progress... Sep 21 05:00:04 ispc maldet(191535): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 2248s Sep 21 05:00:04 ispc maldet(191535): {scan} scan report saved, to view run: maldet --report 250921-0422.191535 Sep 22 04:25:12 ispc maldet(406586): {update} checking for available updates... Sep 22 04:25:13 ispc maldet(406586): {update} could not download version file from server, please try again later. Sep 22 04:25:18 ispc maldet(406665): {sigup} performing signature update check... Sep 22 04:25:18 ispc maldet(406665): {sigup} local signature set is version 2017022510908 Sep 22 04:25:19 ispc maldet(406665): {sigup} could not download signature data from server, please try again later. Sep 22 04:25:23 ispc maldet(406749): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 22 04:25:28 ispc maldet(406749): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 22 04:25:28 ispc maldet(406749): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 22 04:25:29 ispc maldet(406749): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 22 04:25:29 ispc maldet(406749): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 22 05:08:47 ispc maldet(406749): {scan} file list completed in 2598s, found 51 files... Sep 22 05:08:47 ispc maldet(406749): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 22 05:08:47 ispc maldet(406749): {scan} scan of (51 files) in progress... Sep 22 05:08:50 ispc maldet(406749): {scan} scan completed on : files 51, malware hits 0, cleaned hits 0, time 2606s Sep 22 05:08:51 ispc maldet(406749): {scan} scan report saved, to view run: maldet --report 250922-0425.406749 Sep 23 04:14:38 ispc maldet(618527): {update} checking for available updates... Sep 23 04:14:38 ispc maldet(618527): {update} could not download version file from server, please try again later. Sep 23 04:14:43 ispc maldet(618608): {sigup} performing signature update check... Sep 23 04:14:43 ispc maldet(618608): {sigup} local signature set is version 2017022510908 Sep 23 04:14:44 ispc maldet(618608): {sigup} could not download signature data from server, please try again later. Sep 23 04:14:48 ispc maldet(618691): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 23 04:14:54 ispc maldet(618691): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 23 04:14:54 ispc maldet(618691): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 23 04:14:54 ispc maldet(618691): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 23 04:14:55 ispc maldet(618691): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 23 04:51:21 ispc maldet(618691): {scan} file list completed in 2187s, found 62 files... Sep 23 04:51:21 ispc maldet(618691): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 23 04:51:21 ispc maldet(618691): {scan} scan of (62 files) in progress... Sep 23 04:51:24 ispc maldet(618691): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 2195s Sep 23 04:51:24 ispc maldet(618691): {scan} scan report saved, to view run: maldet --report 250923-0414.618691 Sep 24 04:18:45 ispc maldet(832653): {update} checking for available updates... Sep 24 04:18:46 ispc maldet(832653): {update} could not download version file from server, please try again later. Sep 24 04:18:50 ispc maldet(832732): {sigup} performing signature update check... Sep 24 04:18:50 ispc maldet(832732): {sigup} local signature set is version 2017022510908 Sep 24 04:18:51 ispc maldet(832732): {sigup} could not download signature data from server, please try again later. Sep 24 04:18:55 ispc maldet(832819): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 24 04:19:00 ispc maldet(832819): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 24 04:19:00 ispc maldet(832819): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 24 04:19:00 ispc maldet(832819): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 24 04:19:01 ispc maldet(832819): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 24 05:01:40 ispc maldet(832819): {scan} file list completed in 2559s, found 57 files... Sep 24 05:01:40 ispc maldet(832819): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 24 05:01:40 ispc maldet(832819): {scan} scan of (57 files) in progress... Sep 24 05:01:41 ispc maldet(832819): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 2565s Sep 24 05:01:41 ispc maldet(832819): {scan} scan report saved, to view run: maldet --report 250924-0418.832819 Sep 25 04:15:08 ispc maldet(1049434): {update} checking for available updates... Sep 25 04:15:09 ispc maldet(1049434): {update} could not download version file from server, please try again later. Sep 25 04:15:14 ispc maldet(1049513): {sigup} performing signature update check... Sep 25 04:15:14 ispc maldet(1049513): {sigup} local signature set is version 2017022510908 Sep 25 04:15:14 ispc maldet(1049513): {sigup} could not download signature data from server, please try again later. Sep 25 04:15:19 ispc maldet(1049597): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 25 04:15:25 ispc maldet(1049597): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 25 04:15:26 ispc maldet(1049597): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 25 04:15:26 ispc maldet(1049597): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 25 04:15:27 ispc maldet(1049597): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 25 04:52:53 ispc maldet(1049597): {scan} file list completed in 2247s, found 58 files... Sep 25 04:52:53 ispc maldet(1049597): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 25 04:52:53 ispc maldet(1049597): {scan} scan of (58 files) in progress... Sep 25 04:52:56 ispc maldet(1049597): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 2257s Sep 25 04:52:57 ispc maldet(1049597): {scan} scan report saved, to view run: maldet --report 250925-0415.1049597 Sep 26 04:24:35 ispc maldet(1279785): {update} checking for available updates... Sep 26 04:24:36 ispc maldet(1279785): {update} could not download version file from server, please try again later. Sep 26 04:24:40 ispc maldet(1279862): {sigup} performing signature update check... Sep 26 04:24:40 ispc maldet(1279862): {sigup} local signature set is version 2017022510908 Sep 26 04:24:41 ispc maldet(1279862): {sigup} could not download signature data from server, please try again later. Sep 26 04:24:46 ispc maldet(1279948): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 26 04:24:53 ispc maldet(1279948): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 26 04:24:53 ispc maldet(1279948): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 26 04:24:53 ispc maldet(1279948): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 26 04:24:54 ispc maldet(1279948): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 26 04:55:11 ispc maldet(1279948): {scan} file list completed in 1817s, found 60 files... Sep 26 04:55:11 ispc maldet(1279948): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 26 04:55:12 ispc maldet(1279948): {scan} scan of (60 files) in progress... Sep 26 04:55:15 ispc maldet(1279948): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 1828s Sep 26 04:55:16 ispc maldet(1279948): {scan} scan report saved, to view run: maldet --report 250926-0424.1279948 Sep 27 04:13:16 ispc maldet(1480530): {update} checking for available updates... Sep 27 04:13:17 ispc maldet(1480530): {update} could not download version file from server, please try again later. Sep 27 04:13:21 ispc maldet(1480606): {sigup} performing signature update check... Sep 27 04:13:21 ispc maldet(1480606): {sigup} local signature set is version 2017022510908 Sep 27 04:13:22 ispc maldet(1480606): {sigup} could not download signature data from server, please try again later. Sep 27 04:13:26 ispc maldet(1480687): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 27 04:13:33 ispc maldet(1480687): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 27 04:13:34 ispc maldet(1480687): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 27 04:13:34 ispc maldet(1480687): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 27 04:13:34 ispc maldet(1480687): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 27 04:59:10 ispc maldet(1480687): {scan} file list completed in 2736s, found 56 files... Sep 27 04:59:11 ispc maldet(1480687): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 27 04:59:11 ispc maldet(1480687): {scan} scan of (56 files) in progress... Sep 27 04:59:15 ispc maldet(1480687): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2747s Sep 27 04:59:15 ispc maldet(1480687): {scan} scan report saved, to view run: maldet --report 250927-0413.1480687 Sep 28 04:19:24 ispc maldet(1613063): {update} checking for available updates... Sep 28 04:19:25 ispc maldet(1613063): {update} could not download version file from server, please try again later. Sep 28 04:19:29 ispc maldet(1613136): {sigup} performing signature update check... Sep 28 04:19:30 ispc maldet(1613136): {sigup} local signature set is version 2017022510908 Sep 28 04:19:30 ispc maldet(1613136): {sigup} could not download signature data from server, please try again later. Sep 28 04:19:35 ispc maldet(1613221): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 28 04:19:40 ispc maldet(1613221): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 28 04:19:40 ispc maldet(1613221): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 28 04:19:40 ispc maldet(1613221): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 28 04:19:40 ispc maldet(1613221): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 28 04:53:13 ispc maldet(1613221): {scan} file list completed in 2012s, found 56 files... Sep 28 04:53:13 ispc maldet(1613221): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 28 04:53:14 ispc maldet(1613221): {scan} scan of (56 files) in progress... Sep 28 04:53:16 ispc maldet(1613221): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2020s Sep 28 04:53:16 ispc maldet(1613221): {scan} scan report saved, to view run: maldet --report 250928-0419.1613221 Sep 29 04:10:29 ispc maldet(1735702): {update} checking for available updates... Sep 29 04:10:30 ispc maldet(1735702): {update} could not download version file from server, please try again later. Sep 29 04:10:34 ispc maldet(1735774): {sigup} performing signature update check... Sep 29 04:10:34 ispc maldet(1735774): {sigup} local signature set is version 2017022510908 Sep 29 04:10:34 ispc maldet(1735774): {sigup} could not download signature data from server, please try again later. Sep 29 04:10:39 ispc maldet(1735862): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 29 04:10:45 ispc maldet(1735862): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 29 04:10:46 ispc maldet(1735862): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 29 04:10:46 ispc maldet(1735862): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 29 04:10:46 ispc maldet(1735862): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 29 04:52:56 ispc maldet(1735862): {scan} file list completed in 2529s, found 53 files... Sep 29 04:52:56 ispc maldet(1735862): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 29 04:52:57 ispc maldet(1735862): {scan} scan of (53 files) in progress... Sep 29 04:52:59 ispc maldet(1735862): {scan} scan completed on : files 53, malware hits 0, cleaned hits 0, time 2539s Sep 29 04:52:59 ispc maldet(1735862): {scan} scan report saved, to view run: maldet --report 250929-0410.1735862 Sep 30 04:12:33 ispc maldet(1858680): {update} checking for available updates... Sep 30 04:12:34 ispc maldet(1858680): {update} could not download version file from server, please try again later. Sep 30 04:12:39 ispc maldet(1858754): {sigup} performing signature update check... Sep 30 04:12:39 ispc maldet(1858754): {sigup} local signature set is version 2017022510908 Sep 30 04:12:40 ispc maldet(1858754): {sigup} could not download signature data from server, please try again later. Sep 30 04:12:45 ispc maldet(1858836): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 30 04:12:50 ispc maldet(1858836): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Sep 30 04:12:51 ispc maldet(1858836): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 30 04:12:51 ispc maldet(1858836): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 30 04:12:51 ispc maldet(1858836): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 30 05:01:29 ispc maldet(1858836): {scan} file list completed in 2918s, found 79 files... Sep 30 05:01:30 ispc maldet(1858836): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Sep 30 05:01:30 ispc maldet(1858836): {scan} scan of (79 files) in progress... Sep 30 05:01:32 ispc maldet(1858836): {scan} scan completed on : files 79, malware hits 0, cleaned hits 0, time 2926s Sep 30 05:01:32 ispc maldet(1858836): {scan} scan report saved, to view run: maldet --report 250930-0412.1858836 Oct 01 04:10:59 ispc maldet(1980865): {update} checking for available updates... Oct 01 04:10:59 ispc maldet(1980865): {update} could not download version file from server, please try again later. Oct 01 04:11:03 ispc maldet(1980941): {sigup} performing signature update check... Oct 01 04:11:03 ispc maldet(1980941): {sigup} local signature set is version 2017022510908 Oct 01 04:11:03 ispc maldet(1980941): {sigup} could not download signature data from server, please try again later. Oct 01 04:11:08 ispc maldet(1981035): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 01 04:11:13 ispc maldet(1981035): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 01 04:11:13 ispc maldet(1981035): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 01 04:11:13 ispc maldet(1981035): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 01 04:11:14 ispc maldet(1981035): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 01 04:57:44 ispc maldet(1981035): {scan} file list completed in 2790s, found 62 files... Oct 01 04:57:44 ispc maldet(1981035): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 01 04:57:45 ispc maldet(1981035): {scan} scan of (62 files) in progress... Oct 01 04:57:48 ispc maldet(1981035): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 2800s Oct 01 04:57:49 ispc maldet(1981035): {scan} scan report saved, to view run: maldet --report 251001-0411.1981035 Oct 02 04:11:16 ispc maldet(2104415): {update} checking for available updates... Oct 02 04:11:16 ispc maldet(2104415): {update} could not download version file from server, please try again later. Oct 02 04:11:21 ispc maldet(2104493): {sigup} performing signature update check... Oct 02 04:11:21 ispc maldet(2104493): {sigup} local signature set is version 2017022510908 Oct 02 04:11:22 ispc maldet(2104493): {sigup} could not download signature data from server, please try again later. Oct 02 04:11:27 ispc maldet(2104580): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 02 04:11:34 ispc maldet(2104580): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 02 04:11:34 ispc maldet(2104580): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 02 04:11:35 ispc maldet(2104580): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 02 04:11:35 ispc maldet(2104580): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 02 04:54:48 ispc maldet(2104580): {scan} file list completed in 2592s, found 66 files... Oct 02 04:54:48 ispc maldet(2104580): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 02 04:54:48 ispc maldet(2104580): {scan} scan of (66 files) in progress... Oct 02 04:54:50 ispc maldet(2104580): {scan} scan completed on : files 66, malware hits 0, cleaned hits 0, time 2603s Oct 02 04:54:50 ispc maldet(2104580): {scan} scan report saved, to view run: maldet --report 251002-0411.2104580 Oct 03 04:13:38 ispc maldet(2289738): {update} checking for available updates... Oct 03 04:13:38 ispc maldet(2289738): {update} could not download version file from server, please try again later. Oct 03 04:13:41 ispc maldet(2289818): {sigup} performing signature update check... Oct 03 04:13:41 ispc maldet(2289818): {sigup} local signature set is version 2017022510908 Oct 03 04:13:42 ispc maldet(2289818): {sigup} could not download signature data from server, please try again later. Oct 03 04:13:46 ispc maldet(2289900): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 03 04:13:50 ispc maldet(2289900): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 03 04:13:50 ispc maldet(2289900): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 03 04:13:51 ispc maldet(2289900): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 03 04:13:51 ispc maldet(2289900): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 03 04:53:22 ispc maldet(2289900): {scan} file list completed in 2371s, found 54 files... Oct 03 04:53:23 ispc maldet(2289900): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 03 04:53:23 ispc maldet(2289900): {scan} scan of (54 files) in progress... Oct 03 04:53:25 ispc maldet(2289900): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 2378s Oct 03 04:53:26 ispc maldet(2289900): {scan} scan report saved, to view run: maldet --report 251003-0413.2289900 Oct 04 04:18:16 ispc maldet(2473166): {update} checking for available updates... Oct 04 04:18:16 ispc maldet(2473166): {update} could not download version file from server, please try again later. Oct 04 04:18:21 ispc maldet(2473242): {sigup} performing signature update check... Oct 04 04:18:21 ispc maldet(2473242): {sigup} local signature set is version 2017022510908 Oct 04 04:18:22 ispc maldet(2473242): {sigup} could not download signature data from server, please try again later. Oct 04 04:18:26 ispc maldet(2473326): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 04 04:18:31 ispc maldet(2473326): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 04 04:18:32 ispc maldet(2473326): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 04 04:18:32 ispc maldet(2473326): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 04 04:18:32 ispc maldet(2473326): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 04 05:06:25 ispc maldet(2473326): {scan} file list completed in 2872s, found 58 files... Oct 04 05:06:25 ispc maldet(2473326): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 04 05:06:25 ispc maldet(2473326): {scan} scan of (58 files) in progress... Oct 04 05:06:29 ispc maldet(2473326): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 2881s Oct 04 05:06:29 ispc maldet(2473326): {scan} scan report saved, to view run: maldet --report 251004-0418.2473326 Oct 05 04:17:22 ispc maldet(2648567): {update} checking for available updates... Oct 05 04:17:23 ispc maldet(2648567): {update} could not download version file from server, please try again later. Oct 05 04:17:27 ispc maldet(2648642): {sigup} performing signature update check... Oct 05 04:17:28 ispc maldet(2648642): {sigup} local signature set is version 2017022510908 Oct 05 04:17:29 ispc maldet(2648642): {sigup} could not download signature data from server, please try again later. Oct 05 04:17:34 ispc maldet(2648728): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 05 04:17:40 ispc maldet(2648728): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 05 04:17:41 ispc maldet(2648728): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 05 04:17:41 ispc maldet(2648728): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 05 04:17:41 ispc maldet(2648728): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 05 06:13:01 ispc maldet(2648728): {scan} file list completed in 6920s, found 55 files... Oct 05 06:13:01 ispc maldet(2648728): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 05 06:13:02 ispc maldet(2648728): {scan} scan of (55 files) in progress... Oct 05 06:13:05 ispc maldet(2648728): {scan} scan completed on : files 55, malware hits 0, cleaned hits 0, time 6930s Oct 05 06:13:06 ispc maldet(2648728): {scan} scan report saved, to view run: maldet --report 251005-0417.2648728 Oct 06 04:10:11 ispc maldet(2822088): {update} checking for available updates... Oct 06 04:10:11 ispc maldet(2822088): {update} could not download version file from server, please try again later. Oct 06 04:10:16 ispc maldet(2822164): {sigup} performing signature update check... Oct 06 04:10:16 ispc maldet(2822164): {sigup} local signature set is version 2017022510908 Oct 06 04:10:17 ispc maldet(2822164): {sigup} could not download signature data from server, please try again later. Oct 06 04:10:21 ispc maldet(2822247): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 06 04:10:29 ispc maldet(2822247): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 06 04:10:30 ispc maldet(2822247): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 06 04:10:30 ispc maldet(2822247): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 06 04:10:30 ispc maldet(2822247): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 06 04:55:42 ispc maldet(2822247): {scan} file list completed in 2711s, found 60 files... Oct 06 04:55:42 ispc maldet(2822247): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 06 04:55:42 ispc maldet(2822247): {scan} scan of (60 files) in progress... Oct 06 04:55:46 ispc maldet(2822247): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 2724s Oct 06 04:55:47 ispc maldet(2822247): {scan} scan report saved, to view run: maldet --report 251006-0410.2822247 Oct 07 04:12:56 ispc maldet(2997405): {update} checking for available updates... Oct 07 04:12:56 ispc maldet(2997405): {update} could not download version file from server, please try again later. Oct 07 04:13:00 ispc maldet(2997481): {sigup} performing signature update check... Oct 07 04:13:01 ispc maldet(2997481): {sigup} local signature set is version 2017022510908 Oct 07 04:13:01 ispc maldet(2997481): {sigup} could not download signature data from server, please try again later. Oct 07 04:13:05 ispc maldet(2997566): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 07 04:13:11 ispc maldet(2997566): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 07 04:13:11 ispc maldet(2997566): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 07 04:13:11 ispc maldet(2997566): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 07 04:13:12 ispc maldet(2997566): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 07 05:01:42 ispc maldet(2997566): {scan} file list completed in 2910s, found 57 files... Oct 07 05:01:43 ispc maldet(2997566): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 07 05:01:43 ispc maldet(2997566): {scan} scan of (57 files) in progress... Oct 07 05:01:46 ispc maldet(2997566): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 2919s Oct 07 05:01:46 ispc maldet(2997566): {scan} scan report saved, to view run: maldet --report 251007-0413.2997566 Oct 08 04:10:35 ispc maldet(3175838): {update} checking for available updates... Oct 08 04:10:35 ispc maldet(3175838): {update} could not download version file from server, please try again later. Oct 08 04:10:38 ispc maldet(3175910): {sigup} performing signature update check... Oct 08 04:10:39 ispc maldet(3175910): {sigup} local signature set is version 2017022510908 Oct 08 04:10:39 ispc maldet(3175910): {sigup} could not download signature data from server, please try again later. Oct 08 04:10:44 ispc maldet(3175995): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 08 04:10:50 ispc maldet(3175995): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 08 04:10:50 ispc maldet(3175995): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 08 04:10:51 ispc maldet(3175995): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 08 04:10:51 ispc maldet(3175995): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 08 04:54:42 ispc maldet(3175995): {scan} file list completed in 2631s, found 61 files... Oct 08 04:54:43 ispc maldet(3175995): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 08 04:54:43 ispc maldet(3175995): {scan} scan of (61 files) in progress... Oct 08 04:54:46 ispc maldet(3175995): {scan} scan completed on : files 61, malware hits 0, cleaned hits 0, time 2641s Oct 08 04:54:46 ispc maldet(3175995): {scan} scan report saved, to view run: maldet --report 251008-0410.3175995 Oct 09 04:13:04 ispc maldet(3350519): {update} checking for available updates... Oct 09 04:13:04 ispc maldet(3350519): {update} could not download version file from server, please try again later. Oct 09 04:13:09 ispc maldet(3350607): {sigup} performing signature update check... Oct 09 04:13:09 ispc maldet(3350607): {sigup} local signature set is version 2017022510908 Oct 09 04:13:10 ispc maldet(3350607): {sigup} could not download signature data from server, please try again later. Oct 09 04:13:15 ispc maldet(3350699): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 09 04:13:20 ispc maldet(3350699): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 09 04:13:21 ispc maldet(3350699): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 09 04:13:21 ispc maldet(3350699): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 09 04:13:21 ispc maldet(3350699): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 09 04:56:31 ispc maldet(3350699): {scan} file list completed in 2589s, found 62 files... Oct 09 04:56:31 ispc maldet(3350699): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 09 04:56:31 ispc maldet(3350699): {scan} scan of (62 files) in progress... Oct 09 04:56:34 ispc maldet(3350699): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 2599s Oct 09 04:56:34 ispc maldet(3350699): {scan} scan report saved, to view run: maldet --report 251009-0413.3350699 Oct 10 04:10:56 ispc maldet(3522499): {update} checking for available updates... Oct 10 04:10:57 ispc maldet(3522499): {update} could not download version file from server, please try again later. Oct 10 04:11:02 ispc maldet(3522577): {sigup} performing signature update check... Oct 10 04:11:02 ispc maldet(3522577): {sigup} local signature set is version 2017022510908 Oct 10 04:11:03 ispc maldet(3522577): {sigup} could not download signature data from server, please try again later. Oct 10 04:11:07 ispc maldet(3522669): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 10 04:11:13 ispc maldet(3522669): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 10 04:11:13 ispc maldet(3522669): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 10 04:11:13 ispc maldet(3522669): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 10 04:11:14 ispc maldet(3522669): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 10 05:03:30 ispc maldet(3522669): {scan} file list completed in 3135s, found 232 files... Oct 10 05:03:30 ispc maldet(3522669): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 10 05:03:30 ispc maldet(3522669): {scan} scan of (232 files) in progress... Oct 10 05:03:33 ispc maldet(3522669): {scan} scan completed on : files 232, malware hits 0, cleaned hits 0, time 3145s Oct 10 05:03:33 ispc maldet(3522669): {scan} scan report saved, to view run: maldet --report 251010-0411.3522669 Oct 11 04:12:34 ispc maldet(3693382): {update} checking for available updates... Oct 11 04:12:34 ispc maldet(3693382): {update} could not download version file from server, please try again later. Oct 11 04:12:38 ispc maldet(3693458): {sigup} performing signature update check... Oct 11 04:12:38 ispc maldet(3693458): {sigup} local signature set is version 2017022510908 Oct 11 04:12:39 ispc maldet(3693458): {sigup} could not download signature data from server, please try again later. Oct 11 04:12:44 ispc maldet(3693540): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 11 04:12:49 ispc maldet(3693540): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 11 04:12:49 ispc maldet(3693540): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 11 04:12:49 ispc maldet(3693540): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 11 04:12:49 ispc maldet(3693540): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 11 04:54:32 ispc maldet(3693540): {scan} file list completed in 2503s, found 56 files... Oct 11 04:54:33 ispc maldet(3693540): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 11 04:54:33 ispc maldet(3693540): {scan} scan of (56 files) in progress... Oct 11 04:54:34 ispc maldet(3693540): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2510s Oct 11 04:54:35 ispc maldet(3693540): {scan} scan report saved, to view run: maldet --report 251011-0412.3693540 Oct 12 04:12:18 ispc maldet(3867249): {update} checking for available updates... Oct 12 04:12:19 ispc maldet(3867249): {update} could not download version file from server, please try again later. Oct 12 04:12:23 ispc maldet(3867322): {sigup} performing signature update check... Oct 12 04:12:23 ispc maldet(3867322): {sigup} local signature set is version 2017022510908 Oct 12 04:12:24 ispc maldet(3867322): {sigup} could not download signature data from server, please try again later. Oct 12 04:12:28 ispc maldet(3867403): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 12 04:12:34 ispc maldet(3867403): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 12 04:12:34 ispc maldet(3867403): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 12 04:12:34 ispc maldet(3867403): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 12 04:12:35 ispc maldet(3867403): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 12 04:54:10 ispc maldet(3867403): {scan} file list completed in 2495s, found 56 files... Oct 12 04:54:10 ispc maldet(3867403): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 12 04:54:10 ispc maldet(3867403): {scan} scan of (56 files) in progress... Oct 12 04:54:13 ispc maldet(3867403): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2503s Oct 12 04:54:14 ispc maldet(3867403): {scan} scan report saved, to view run: maldet --report 251012-0412.3867403 Oct 13 04:09:25 ispc maldet(3979733): {update} checking for available updates... Oct 13 04:09:26 ispc maldet(3979733): {update} could not download version file from server, please try again later. Oct 13 04:09:30 ispc maldet(3979810): {sigup} performing signature update check... Oct 13 04:09:30 ispc maldet(3979810): {sigup} local signature set is version 2017022510908 Oct 13 04:09:31 ispc maldet(3979810): {sigup} could not download signature data from server, please try again later. Oct 13 04:09:35 ispc maldet(3979891): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 13 04:09:40 ispc maldet(3979891): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 13 04:09:41 ispc maldet(3979891): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 13 04:09:41 ispc maldet(3979891): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 13 04:09:42 ispc maldet(3979891): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 13 04:54:44 ispc maldet(3979891): {scan} file list completed in 2702s, found 62 files... Oct 13 04:54:44 ispc maldet(3979891): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 13 04:54:44 ispc maldet(3979891): {scan} scan of (62 files) in progress... Oct 13 04:54:48 ispc maldet(3979891): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 2712s Oct 13 04:54:48 ispc maldet(3979891): {scan} scan report saved, to view run: maldet --report 251013-0409.3979891 Oct 14 04:11:00 ispc maldet(4152783): {update} checking for available updates... Oct 14 04:11:00 ispc maldet(4152783): {update} could not download version file from server, please try again later. Oct 14 04:11:04 ispc maldet(4152865): {sigup} performing signature update check... Oct 14 04:11:04 ispc maldet(4152865): {sigup} local signature set is version 2017022510908 Oct 14 04:11:04 ispc maldet(4152865): {sigup} could not download signature data from server, please try again later. Oct 14 04:11:09 ispc maldet(4152957): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 14 04:11:15 ispc maldet(4152957): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 14 04:11:15 ispc maldet(4152957): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 14 04:11:15 ispc maldet(4152957): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 14 04:11:16 ispc maldet(4152957): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 14 04:53:44 ispc maldet(4152957): {scan} file list completed in 2548s, found 58 files... Oct 14 04:53:44 ispc maldet(4152957): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 14 04:53:44 ispc maldet(4152957): {scan} scan of (58 files) in progress... Oct 14 04:53:47 ispc maldet(4152957): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 2557s Oct 14 04:53:47 ispc maldet(4152957): {scan} scan report saved, to view run: maldet --report 251014-0411.4152957 Oct 15 04:10:18 ispc maldet(127781): {update} checking for available updates... Oct 15 04:10:19 ispc maldet(127781): {update} could not download version file from server, please try again later. Oct 15 04:10:23 ispc maldet(127857): {sigup} performing signature update check... Oct 15 04:10:23 ispc maldet(127857): {sigup} local signature set is version 2017022510908 Oct 15 04:10:24 ispc maldet(127857): {sigup} could not download signature data from server, please try again later. Oct 15 04:10:29 ispc maldet(127938): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 15 04:10:36 ispc maldet(127938): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 15 04:10:36 ispc maldet(127938): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 15 04:10:37 ispc maldet(127938): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 15 04:10:37 ispc maldet(127938): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 15 05:25:18 ispc maldet(127938): {scan} file list completed in 4481s, found 61 files... Oct 15 05:25:18 ispc maldet(127938): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 15 05:25:19 ispc maldet(127938): {scan} scan of (61 files) in progress... Oct 15 05:25:23 ispc maldet(127938): {scan} scan completed on : files 61, malware hits 0, cleaned hits 0, time 4493s Oct 15 05:25:23 ispc maldet(127938): {scan} scan report saved, to view run: maldet --report 251015-0410.127938 Oct 16 04:11:55 ispc maldet(243340): {update} checking for available updates... Oct 16 04:11:56 ispc maldet(243340): {update} could not download version file from server, please try again later. Oct 16 04:12:00 ispc maldet(243413): {sigup} performing signature update check... Oct 16 04:12:00 ispc maldet(243413): {sigup} local signature set is version 2017022510908 Oct 16 04:12:01 ispc maldet(243413): {sigup} could not download signature data from server, please try again later. Oct 16 04:12:05 ispc maldet(243501): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 16 04:12:09 ispc maldet(243501): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 16 04:12:09 ispc maldet(243501): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 16 04:12:10 ispc maldet(243501): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 16 04:12:10 ispc maldet(243501): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 16 05:06:56 ispc maldet(243501): {scan} file list completed in 3285s, found 58 files... Oct 16 05:06:56 ispc maldet(243501): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 16 05:06:56 ispc maldet(243501): {scan} scan of (58 files) in progress... Oct 16 05:07:00 ispc maldet(243501): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 3294s Oct 16 05:07:00 ispc maldet(243501): {scan} scan report saved, to view run: maldet --report 251016-0412.243501 Oct 17 04:11:20 ispc maldet(423349): {update} checking for available updates... Oct 17 04:11:20 ispc maldet(423349): {update} could not download version file from server, please try again later. Oct 17 04:11:24 ispc maldet(423425): {sigup} performing signature update check... Oct 17 04:11:24 ispc maldet(423425): {sigup} local signature set is version 2017022510908 Oct 17 04:11:25 ispc maldet(423425): {sigup} could not download signature data from server, please try again later. Oct 17 04:11:29 ispc maldet(423509): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 17 04:11:35 ispc maldet(423509): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 17 04:11:35 ispc maldet(423509): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 17 04:11:35 ispc maldet(423509): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 17 04:11:35 ispc maldet(423509): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 17 04:54:24 ispc maldet(423509): {scan} file list completed in 2568s, found 57 files... Oct 17 04:54:24 ispc maldet(423509): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 17 04:54:25 ispc maldet(423509): {scan} scan of (57 files) in progress... Oct 17 04:54:26 ispc maldet(423509): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 2576s Oct 17 04:54:26 ispc maldet(423509): {scan} scan report saved, to view run: maldet --report 251017-0411.423509 Oct 18 04:11:13 ispc maldet(594769): {update} checking for available updates... Oct 18 04:11:14 ispc maldet(594769): {update} could not download version file from server, please try again later. Oct 18 04:11:18 ispc maldet(594845): {sigup} performing signature update check... Oct 18 04:11:18 ispc maldet(594845): {sigup} local signature set is version 2017022510908 Oct 18 04:11:19 ispc maldet(594845): {sigup} could not download signature data from server, please try again later. Oct 18 04:11:23 ispc maldet(594926): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 18 04:11:29 ispc maldet(594926): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 18 04:11:30 ispc maldet(594926): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 18 04:11:30 ispc maldet(594926): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 18 04:11:31 ispc maldet(594926): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 18 04:56:59 ispc maldet(594926): {scan} file list completed in 2728s, found 62 files... Oct 18 04:57:00 ispc maldet(594926): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 18 04:57:00 ispc maldet(594926): {scan} scan of (62 files) in progress... Oct 18 04:57:02 ispc maldet(594926): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 2737s Oct 18 04:57:02 ispc maldet(594926): {scan} scan report saved, to view run: maldet --report 251018-0411.594926 Oct 19 04:12:58 ispc maldet(765138): {update} checking for available updates... Oct 19 04:12:59 ispc maldet(765138): {update} could not download version file from server, please try again later. Oct 19 04:13:04 ispc maldet(765212): {sigup} performing signature update check... Oct 19 04:13:04 ispc maldet(765212): {sigup} local signature set is version 2017022510908 Oct 19 04:13:05 ispc maldet(765212): {sigup} could not download signature data from server, please try again later. Oct 19 04:13:09 ispc maldet(765308): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 19 04:13:15 ispc maldet(765308): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 19 04:13:15 ispc maldet(765308): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 19 04:13:15 ispc maldet(765308): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 19 04:13:16 ispc maldet(765308): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 19 04:50:56 ispc maldet(765308): {scan} file list completed in 2260s, found 69 files... Oct 19 04:50:56 ispc maldet(765308): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 19 04:50:57 ispc maldet(765308): {scan} scan of (69 files) in progress... Oct 19 04:50:58 ispc maldet(765308): {scan} scan completed on : files 69, malware hits 0, cleaned hits 0, time 2269s Oct 19 04:50:58 ispc maldet(765308): {scan} scan report saved, to view run: maldet --report 251019-0413.765308 Oct 20 04:12:51 ispc maldet(935380): {update} checking for available updates... Oct 20 04:12:51 ispc maldet(935380): {update} could not download version file from server, please try again later. Oct 20 04:12:55 ispc maldet(935454): {sigup} performing signature update check... Oct 20 04:12:55 ispc maldet(935454): {sigup} local signature set is version 2017022510908 Oct 20 04:12:56 ispc maldet(935454): {sigup} could not download signature data from server, please try again later. Oct 20 04:13:01 ispc maldet(935535): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 20 04:13:07 ispc maldet(935535): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 20 04:13:07 ispc maldet(935535): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 20 04:13:07 ispc maldet(935535): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 20 04:13:07 ispc maldet(935535): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 20 04:51:00 ispc maldet(935535): {scan} file list completed in 2272s, found 57 files... Oct 20 04:51:00 ispc maldet(935535): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 20 04:51:00 ispc maldet(935535): {scan} scan of (57 files) in progress... Oct 20 04:51:04 ispc maldet(935535): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 2282s Oct 20 04:51:04 ispc maldet(935535): {scan} scan report saved, to view run: maldet --report 251020-0412.935535 Oct 21 04:23:29 ispc maldet(1049253): {update} checking for available updates... Oct 21 04:23:30 ispc maldet(1049253): {update} could not download version file from server, please try again later. Oct 21 04:23:34 ispc maldet(1049329): {sigup} performing signature update check... Oct 21 04:23:35 ispc maldet(1049329): {sigup} local signature set is version 2017022510908 Oct 21 04:23:36 ispc maldet(1049329): {sigup} could not download signature data from server, please try again later. Oct 21 04:23:41 ispc maldet(1049410): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 21 04:23:47 ispc maldet(1049410): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 21 04:23:48 ispc maldet(1049410): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 21 04:23:48 ispc maldet(1049410): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 21 04:23:48 ispc maldet(1049410): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 21 05:09:08 ispc maldet(1049410): {scan} file list completed in 2719s, found 56 files... Oct 21 05:09:08 ispc maldet(1049410): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 21 05:09:08 ispc maldet(1049410): {scan} scan of (56 files) in progress... Oct 21 05:09:11 ispc maldet(1049410): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2729s Oct 21 05:09:12 ispc maldet(1049410): {scan} scan report saved, to view run: maldet --report 251021-0423.1049410 Oct 22 04:11:30 ispc maldet(1220603): {update} checking for available updates... Oct 22 04:11:30 ispc maldet(1220603): {update} could not download version file from server, please try again later. Oct 22 04:11:34 ispc maldet(1220679): {sigup} performing signature update check... Oct 22 04:11:34 ispc maldet(1220679): {sigup} local signature set is version 2017022510908 Oct 22 04:11:35 ispc maldet(1220679): {sigup} could not download signature data from server, please try again later. Oct 22 04:11:40 ispc maldet(1220760): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 22 04:11:47 ispc maldet(1220760): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 22 04:11:47 ispc maldet(1220760): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 22 04:11:48 ispc maldet(1220760): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 22 04:11:48 ispc maldet(1220760): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 22 04:56:49 ispc maldet(1220760): {scan} file list completed in 2700s, found 57 files... Oct 22 04:56:49 ispc maldet(1220760): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 22 04:56:49 ispc maldet(1220760): {scan} scan of (57 files) in progress... Oct 22 04:56:51 ispc maldet(1220760): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 2711s Oct 22 04:56:52 ispc maldet(1220760): {scan} scan report saved, to view run: maldet --report 251022-0411.1220760 Oct 23 04:09:48 ispc maldet(1393060): {update} checking for available updates... Oct 23 04:09:48 ispc maldet(1393060): {update} could not download version file from server, please try again later. Oct 23 04:09:52 ispc maldet(1393133): {sigup} performing signature update check... Oct 23 04:09:53 ispc maldet(1393133): {sigup} local signature set is version 2017022510908 Oct 23 04:09:54 ispc maldet(1393133): {sigup} could not download signature data from server, please try again later. Oct 23 04:09:59 ispc maldet(1393217): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 23 04:10:04 ispc maldet(1393217): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 23 04:10:04 ispc maldet(1393217): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 23 04:10:04 ispc maldet(1393217): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 23 04:10:04 ispc maldet(1393217): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 23 06:12:58 ispc maldet(1393217): {scan} file list completed in 7373s, found 58 files... Oct 23 06:12:58 ispc maldet(1393217): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 23 06:12:58 ispc maldet(1393217): {scan} scan of (58 files) in progress... Oct 23 06:13:01 ispc maldet(1393217): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 7381s Oct 23 06:13:01 ispc maldet(1393217): {scan} scan report saved, to view run: maldet --report 251023-0409.1393217 Oct 24 04:14:30 ispc maldet(1563917): {update} checking for available updates... Oct 24 04:14:30 ispc maldet(1563917): {update} could not download version file from server, please try again later. Oct 24 04:14:35 ispc maldet(1563989): {sigup} performing signature update check... Oct 24 04:14:35 ispc maldet(1563989): {sigup} local signature set is version 2017022510908 Oct 24 04:14:36 ispc maldet(1563989): {sigup} could not download signature data from server, please try again later. Oct 24 04:14:40 ispc maldet(1564074): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 24 04:14:46 ispc maldet(1564074): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 24 04:14:47 ispc maldet(1564074): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 24 04:14:47 ispc maldet(1564074): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 24 04:14:47 ispc maldet(1564074): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 24 05:53:07 ispc maldet(1564074): {scan} file list completed in 5900s, found 54 files... Oct 24 05:53:08 ispc maldet(1564074): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 24 05:53:08 ispc maldet(1564074): {scan} scan of (54 files) in progress... Oct 24 05:53:11 ispc maldet(1564074): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 5909s Oct 24 05:53:11 ispc maldet(1564074): {scan} scan report saved, to view run: maldet --report 251024-0414.1564074 Oct 25 04:09:52 ispc maldet(1734088): {update} checking for available updates... Oct 25 04:09:52 ispc maldet(1734088): {update} could not download version file from server, please try again later. Oct 25 04:09:57 ispc maldet(1734160): {sigup} performing signature update check... Oct 25 04:09:57 ispc maldet(1734160): {sigup} local signature set is version 2017022510908 Oct 25 04:09:58 ispc maldet(1734160): {sigup} could not download signature data from server, please try again later. Oct 25 04:10:02 ispc maldet(1734242): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 25 04:10:08 ispc maldet(1734242): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 25 04:10:08 ispc maldet(1734242): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 25 04:10:08 ispc maldet(1734242): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 25 04:10:08 ispc maldet(1734242): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 25 05:22:02 ispc maldet(1734242): {scan} file list completed in 4314s, found 64 files... Oct 25 05:22:02 ispc maldet(1734242): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 25 05:22:02 ispc maldet(1734242): {scan} scan of (64 files) in progress... Oct 25 05:22:04 ispc maldet(1734242): {scan} scan completed on : files 64, malware hits 0, cleaned hits 0, time 4321s Oct 25 05:22:04 ispc maldet(1734242): {scan} scan report saved, to view run: maldet --report 251025-0409.1734242 Oct 26 04:12:53 ispc maldet(1913309): {update} checking for available updates... Oct 26 04:12:53 ispc maldet(1913309): {update} could not download version file from server, please try again later. Oct 26 04:12:58 ispc maldet(1913381): {sigup} performing signature update check... Oct 26 04:12:58 ispc maldet(1913381): {sigup} local signature set is version 2017022510908 Oct 26 04:12:59 ispc maldet(1913381): {sigup} could not download signature data from server, please try again later. Oct 26 04:13:03 ispc maldet(1913467): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 26 04:13:07 ispc maldet(1913467): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 26 04:13:08 ispc maldet(1913467): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 26 04:13:08 ispc maldet(1913467): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 26 04:13:09 ispc maldet(1913467): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 26 05:13:56 ispc maldet(1913467): {scan} file list completed in 3648s, found 61 files... Oct 26 05:13:57 ispc maldet(1913467): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 26 05:13:57 ispc maldet(1913467): {scan} scan of (61 files) in progress... Oct 26 05:14:01 ispc maldet(1913467): {scan} scan completed on : files 61, malware hits 0, cleaned hits 0, time 3657s Oct 26 05:14:01 ispc maldet(1913467): {scan} scan report saved, to view run: maldet --report 251026-0412.1913467 Oct 27 04:11:25 ispc maldet(2031062): {update} checking for available updates... Oct 27 04:11:26 ispc maldet(2031062): {update} could not download version file from server, please try again later. Oct 27 04:11:30 ispc maldet(2031135): {sigup} performing signature update check... Oct 27 04:11:30 ispc maldet(2031135): {sigup} local signature set is version 2017022510908 Oct 27 04:11:31 ispc maldet(2031135): {sigup} could not download signature data from server, please try again later. Oct 27 04:11:36 ispc maldet(2031221): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 27 04:11:41 ispc maldet(2031221): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 27 04:11:42 ispc maldet(2031221): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 27 04:11:42 ispc maldet(2031221): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 27 04:11:42 ispc maldet(2031221): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 27 06:10:33 ispc maldet(2031221): {scan} file list completed in 7130s, found 62 files... Oct 27 06:10:33 ispc maldet(2031221): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 27 06:10:33 ispc maldet(2031221): {scan} scan of (62 files) in progress... Oct 27 06:10:36 ispc maldet(2031221): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 7139s Oct 27 06:10:36 ispc maldet(2031221): {scan} scan report saved, to view run: maldet --report 251027-0411.2031221 Oct 28 04:11:08 ispc maldet(2149621): {update} checking for available updates... Oct 28 04:11:09 ispc maldet(2149621): {update} could not download version file from server, please try again later. Oct 28 04:11:14 ispc maldet(2149702): {sigup} performing signature update check... Oct 28 04:11:14 ispc maldet(2149702): {sigup} local signature set is version 2017022510908 Oct 28 04:11:15 ispc maldet(2149702): {sigup} could not download signature data from server, please try again later. Oct 28 04:11:19 ispc maldet(2149784): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 28 04:11:24 ispc maldet(2149784): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 28 04:11:24 ispc maldet(2149784): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 28 04:11:25 ispc maldet(2149784): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 28 04:11:25 ispc maldet(2149784): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 28 04:51:57 ispc maldet(2149784): {scan} file list completed in 2431s, found 58 files... Oct 28 04:51:58 ispc maldet(2149784): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 28 04:51:58 ispc maldet(2149784): {scan} scan of (58 files) in progress... Oct 28 04:52:00 ispc maldet(2149784): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 2441s Oct 28 04:52:01 ispc maldet(2149784): {scan} scan report saved, to view run: maldet --report 251028-0411.2149784 Oct 29 04:10:58 ispc maldet(2267707): {update} checking for available updates... Oct 29 04:10:58 ispc maldet(2267707): {update} could not download version file from server, please try again later. Oct 29 04:11:02 ispc maldet(2267783): {sigup} performing signature update check... Oct 29 04:11:02 ispc maldet(2267783): {sigup} local signature set is version 2017022510908 Oct 29 04:11:03 ispc maldet(2267783): {sigup} could not download signature data from server, please try again later. Oct 29 04:11:07 ispc maldet(2267875): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 29 04:11:12 ispc maldet(2267875): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 29 04:11:12 ispc maldet(2267875): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 29 04:11:13 ispc maldet(2267875): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 29 04:11:13 ispc maldet(2267875): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 29 04:52:43 ispc maldet(2267875): {scan} file list completed in 2490s, found 56 files... Oct 29 04:52:44 ispc maldet(2267875): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 29 04:52:44 ispc maldet(2267875): {scan} scan of (56 files) in progress... Oct 29 04:52:45 ispc maldet(2267875): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2498s Oct 29 04:52:46 ispc maldet(2267875): {scan} scan report saved, to view run: maldet --report 251029-0411.2267875 Oct 30 04:12:36 ispc maldet(2386389): {update} checking for available updates... Oct 30 04:12:36 ispc maldet(2386389): {update} could not download version file from server, please try again later. Oct 30 04:12:41 ispc maldet(2386462): {sigup} performing signature update check... Oct 30 04:12:41 ispc maldet(2386462): {sigup} local signature set is version 2017022510908 Oct 30 04:12:42 ispc maldet(2386462): {sigup} could not download signature data from server, please try again later. Oct 30 04:12:47 ispc maldet(2386545): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 30 04:12:52 ispc maldet(2386545): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 30 04:12:53 ispc maldet(2386545): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 30 04:12:53 ispc maldet(2386545): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 30 04:12:54 ispc maldet(2386545): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 30 05:00:10 ispc maldet(2386545): {scan} file list completed in 2836s, found 60 files... Oct 30 05:00:10 ispc maldet(2386545): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 30 05:00:11 ispc maldet(2386545): {scan} scan of (60 files) in progress... Oct 30 05:00:14 ispc maldet(2386545): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 2846s Oct 30 05:00:14 ispc maldet(2386545): {scan} scan report saved, to view run: maldet --report 251030-0412.2386545 Oct 31 04:12:57 ispc maldet(2506636): {update} checking for available updates... Oct 31 04:12:58 ispc maldet(2506636): {update} could not download version file from server, please try again later. Oct 31 04:13:02 ispc maldet(2506713): {sigup} performing signature update check... Oct 31 04:13:02 ispc maldet(2506713): {sigup} local signature set is version 2017022510908 Oct 31 04:13:03 ispc maldet(2506713): {sigup} could not download signature data from server, please try again later. Oct 31 04:13:07 ispc maldet(2506811): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 31 04:13:11 ispc maldet(2506811): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Oct 31 04:13:12 ispc maldet(2506811): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 31 04:13:12 ispc maldet(2506811): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 31 04:13:12 ispc maldet(2506811): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 31 04:51:35 ispc maldet(2506811): {scan} file list completed in 2303s, found 55 files... Oct 31 04:51:36 ispc maldet(2506811): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Oct 31 04:51:36 ispc maldet(2506811): {scan} scan of (55 files) in progress... Oct 31 04:51:37 ispc maldet(2506811): {scan} scan completed on : files 55, malware hits 0, cleaned hits 0, time 2310s Oct 31 04:51:37 ispc maldet(2506811): {scan} scan report saved, to view run: maldet --report 251031-0413.2506811 Nov 01 04:24:36 ispc maldet(2631270): {update} checking for available updates... Nov 01 04:24:37 ispc maldet(2631270): {update} could not download version file from server, please try again later. Nov 01 04:24:42 ispc maldet(2631344): {sigup} performing signature update check... Nov 01 04:24:42 ispc maldet(2631344): {sigup} local signature set is version 2017022510908 Nov 01 04:24:42 ispc maldet(2631344): {sigup} could not download signature data from server, please try again later. Nov 01 04:24:44 ispc maldet(2631425): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 01 04:24:49 ispc maldet(2631425): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 01 04:24:50 ispc maldet(2631425): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 01 04:24:50 ispc maldet(2631425): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 01 04:24:50 ispc maldet(2631425): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 01 04:49:57 ispc maldet(2631425): {scan} file list completed in 1506s, found 56 files... Nov 01 04:49:57 ispc maldet(2631425): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 01 04:49:57 ispc maldet(2631425): {scan} scan of (56 files) in progress... Nov 01 04:49:59 ispc maldet(2631425): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 1513s Nov 01 04:49:59 ispc maldet(2631425): {scan} scan report saved, to view run: maldet --report 251101-0424.2631425 Nov 02 04:12:57 ispc maldet(2760456): {update} checking for available updates... Nov 02 04:12:57 ispc maldet(2760456): {update} could not download version file from server, please try again later. Nov 02 04:13:00 ispc maldet(2760532): {sigup} performing signature update check... Nov 02 04:13:00 ispc maldet(2760532): {sigup} local signature set is version 2017022510908 Nov 02 04:13:01 ispc maldet(2760532): {sigup} could not download signature data from server, please try again later. Nov 02 04:13:05 ispc maldet(2760621): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 02 04:13:11 ispc maldet(2760621): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 02 04:13:11 ispc maldet(2760621): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 02 04:13:12 ispc maldet(2760621): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 02 04:13:12 ispc maldet(2760621): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 02 04:51:14 ispc maldet(2760621): {scan} file list completed in 2282s, found 50 files... Nov 02 04:51:15 ispc maldet(2760621): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 02 04:51:15 ispc maldet(2760621): {scan} scan of (50 files) in progress... Nov 02 04:51:18 ispc maldet(2760621): {scan} scan completed on : files 50, malware hits 0, cleaned hits 0, time 2292s Nov 02 04:51:18 ispc maldet(2760621): {scan} scan report saved, to view run: maldet --report 251102-0413.2760621 Nov 03 04:11:52 ispc maldet(2887796): {update} checking for available updates... Nov 03 04:11:52 ispc maldet(2887796): {update} could not download version file from server, please try again later. Nov 03 04:11:57 ispc maldet(2887869): {sigup} performing signature update check... Nov 03 04:11:57 ispc maldet(2887869): {sigup} local signature set is version 2017022510908 Nov 03 04:11:58 ispc maldet(2887869): {sigup} could not download signature data from server, please try again later. Nov 03 04:12:02 ispc maldet(2887956): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 03 04:12:07 ispc maldet(2887956): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 03 04:12:07 ispc maldet(2887956): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 03 04:12:08 ispc maldet(2887956): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 03 04:12:08 ispc maldet(2887956): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 03 04:54:18 ispc maldet(2887956): {scan} file list completed in 2529s, found 58 files... Nov 03 04:54:18 ispc maldet(2887956): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 03 04:54:18 ispc maldet(2887956): {scan} scan of (58 files) in progress... Nov 03 04:54:22 ispc maldet(2887956): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 2538s Nov 03 04:54:22 ispc maldet(2887956): {scan} scan report saved, to view run: maldet --report 251103-0411.2887956 Nov 04 04:13:02 ispc maldet(3014844): {update} checking for available updates... Nov 04 04:13:02 ispc maldet(3014844): {update} could not download version file from server, please try again later. Nov 04 04:13:07 ispc maldet(3014926): {sigup} performing signature update check... Nov 04 04:13:07 ispc maldet(3014926): {sigup} local signature set is version 2017022510908 Nov 04 04:13:07 ispc maldet(3014926): {sigup} could not download signature data from server, please try again later. Nov 04 04:13:13 ispc maldet(3015015): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 04 04:13:19 ispc maldet(3015015): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 04 04:13:20 ispc maldet(3015015): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 04 04:13:20 ispc maldet(3015015): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 04 04:13:21 ispc maldet(3015015): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 04 05:58:20 ispc maldet(3015015): {scan} file list completed in 6299s, found 56 files... Nov 04 05:58:21 ispc maldet(3015015): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 04 05:58:21 ispc maldet(3015015): {scan} scan of (56 files) in progress... Nov 04 05:58:23 ispc maldet(3015015): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 6309s Nov 04 05:58:24 ispc maldet(3015015): {scan} scan report saved, to view run: maldet --report 251104-0413.3015015 Nov 05 04:09:40 ispc maldet(3138931): {update} checking for available updates... Nov 05 04:09:41 ispc maldet(3138931): {update} could not download version file from server, please try again later. Nov 05 04:09:45 ispc maldet(3139006): {sigup} performing signature update check... Nov 05 04:09:45 ispc maldet(3139006): {sigup} local signature set is version 2017022510908 Nov 05 04:09:46 ispc maldet(3139006): {sigup} could not download signature data from server, please try again later. Nov 05 04:09:48 ispc maldet(3139089): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 05 04:09:54 ispc maldet(3139089): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 05 04:09:55 ispc maldet(3139089): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 05 04:09:55 ispc maldet(3139089): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 05 04:09:55 ispc maldet(3139089): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 05 04:51:55 ispc maldet(3139089): {scan} file list completed in 2520s, found 52 files... Nov 05 04:51:56 ispc maldet(3139089): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 05 04:51:56 ispc maldet(3139089): {scan} scan of (52 files) in progress... Nov 05 04:51:58 ispc maldet(3139089): {scan} scan completed on : files 52, malware hits 0, cleaned hits 0, time 2530s Nov 05 04:51:59 ispc maldet(3139089): {scan} scan report saved, to view run: maldet --report 251105-0409.3139089 Nov 06 04:14:44 ispc maldet(3261289): {update} checking for available updates... Nov 06 04:14:45 ispc maldet(3261289): {update} could not download version file from server, please try again later. Nov 06 04:14:47 ispc maldet(3261363): {sigup} performing signature update check... Nov 06 04:14:47 ispc maldet(3261363): {sigup} local signature set is version 2017022510908 Nov 06 04:14:48 ispc maldet(3261363): {sigup} could not download signature data from server, please try again later. Nov 06 04:14:53 ispc maldet(3261444): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 06 04:14:57 ispc maldet(3261444): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 06 04:14:57 ispc maldet(3261444): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 06 04:14:57 ispc maldet(3261444): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 06 04:14:58 ispc maldet(3261444): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 06 04:53:03 ispc maldet(3261444): {scan} file list completed in 2285s, found 51 files... Nov 06 04:53:04 ispc maldet(3261444): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 06 04:53:04 ispc maldet(3261444): {scan} scan of (51 files) in progress... Nov 06 04:53:08 ispc maldet(3261444): {scan} scan completed on : files 51, malware hits 0, cleaned hits 0, time 2294s Nov 06 04:53:08 ispc maldet(3261444): {scan} scan report saved, to view run: maldet --report 251106-0414.3261444 Nov 07 04:15:06 ispc maldet(3382138): {update} checking for available updates... Nov 07 04:15:06 ispc maldet(3382138): {update} could not download version file from server, please try again later. Nov 07 04:15:11 ispc maldet(3382262): {sigup} performing signature update check... Nov 07 04:15:11 ispc maldet(3382262): {sigup} local signature set is version 2017022510908 Nov 07 04:15:12 ispc maldet(3382262): {sigup} could not download signature data from server, please try again later. Nov 07 04:15:17 ispc maldet(3382350): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 07 04:15:23 ispc maldet(3382350): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 07 04:15:23 ispc maldet(3382350): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 07 04:15:24 ispc maldet(3382350): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 07 04:15:24 ispc maldet(3382350): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 07 04:50:25 ispc maldet(3382350): {scan} file list completed in 2101s, found 56 files... Nov 07 04:50:25 ispc maldet(3382350): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 07 04:50:25 ispc maldet(3382350): {scan} scan of (56 files) in progress... Nov 07 04:50:27 ispc maldet(3382350): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2109s Nov 07 04:50:28 ispc maldet(3382350): {scan} scan report saved, to view run: maldet --report 251107-0415.3382350 Nov 08 04:23:14 ispc maldet(3521261): {update} checking for available updates... Nov 08 04:23:15 ispc maldet(3521261): {update} could not download version file from server, please try again later. Nov 08 04:23:17 ispc maldet(3521339): {sigup} performing signature update check... Nov 08 04:23:17 ispc maldet(3521339): {sigup} local signature set is version 2017022510908 Nov 08 04:23:18 ispc maldet(3521339): {sigup} could not download signature data from server, please try again later. Nov 08 04:23:20 ispc maldet(3521423): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 08 04:23:24 ispc maldet(3521423): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 08 04:23:24 ispc maldet(3521423): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 08 04:23:24 ispc maldet(3521423): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 08 04:23:24 ispc maldet(3521423): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 08 04:55:39 ispc maldet(3521423): {scan} file list completed in 1934s, found 57 files... Nov 08 04:55:39 ispc maldet(3521423): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 08 04:55:39 ispc maldet(3521423): {scan} scan of (57 files) in progress... Nov 08 04:55:41 ispc maldet(3521423): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 1939s Nov 08 04:55:41 ispc maldet(3521423): {scan} scan report saved, to view run: maldet --report 251108-0423.3521423 Nov 09 04:22:27 ispc maldet(3654749): {update} checking for available updates... Nov 09 04:22:28 ispc maldet(3654749): {update} could not download version file from server, please try again later. Nov 09 04:22:31 ispc maldet(3654827): {sigup} performing signature update check... Nov 09 04:22:31 ispc maldet(3654827): {sigup} local signature set is version 2017022510908 Nov 09 04:22:32 ispc maldet(3654827): {sigup} could not download signature data from server, please try again later. Nov 09 04:22:36 ispc maldet(3654909): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 09 04:22:39 ispc maldet(3654909): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 09 04:22:39 ispc maldet(3654909): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 09 04:22:40 ispc maldet(3654909): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 09 04:22:40 ispc maldet(3654909): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 09 04:52:05 ispc maldet(3654909): {scan} file list completed in 1764s, found 56 files... Nov 09 04:52:05 ispc maldet(3654909): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 09 04:52:05 ispc maldet(3654909): {scan} scan of (56 files) in progress... Nov 09 04:52:07 ispc maldet(3654909): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 1770s Nov 09 04:52:08 ispc maldet(3654909): {scan} scan report saved, to view run: maldet --report 251109-0422.3654909 Nov 10 04:21:00 ispc maldet(3794078): {update} checking for available updates... Nov 10 04:21:01 ispc maldet(3794078): {update} could not download version file from server, please try again later. Nov 10 04:21:06 ispc maldet(3794162): {sigup} performing signature update check... Nov 10 04:21:06 ispc maldet(3794162): {sigup} local signature set is version 2017022510908 Nov 10 04:21:07 ispc maldet(3794162): {sigup} could not download signature data from server, please try again later. Nov 10 04:21:10 ispc maldet(3794258): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 10 04:21:15 ispc maldet(3794258): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 10 04:21:15 ispc maldet(3794258): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 10 04:21:15 ispc maldet(3794258): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 10 04:21:15 ispc maldet(3794258): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 10 04:49:53 ispc maldet(3794258): {scan} file list completed in 1718s, found 57 files... Nov 10 04:49:54 ispc maldet(3794258): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 10 04:49:54 ispc maldet(3794258): {scan} scan of (57 files) in progress... Nov 10 04:49:56 ispc maldet(3794258): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 1726s Nov 10 04:49:56 ispc maldet(3794258): {scan} scan report saved, to view run: maldet --report 251110-0421.3794258 Nov 11 04:23:35 ispc maldet(3928026): {update} checking for available updates... Nov 11 04:23:36 ispc maldet(3928026): {update} could not download version file from server, please try again later. Nov 11 04:23:41 ispc maldet(3928098): {sigup} performing signature update check... Nov 11 04:23:42 ispc maldet(3928098): {sigup} local signature set is version 2017022510908 Nov 11 04:23:42 ispc maldet(3928098): {sigup} could not download signature data from server, please try again later. Nov 11 04:23:48 ispc maldet(3928184): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 11 04:23:55 ispc maldet(3928184): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 11 04:23:56 ispc maldet(3928184): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 11 04:23:56 ispc maldet(3928184): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 11 04:23:57 ispc maldet(3928184): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 11 05:23:30 ispc maldet(3928184): {scan} file list completed in 3573s, found 57 files... Nov 11 05:23:30 ispc maldet(3928184): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 11 05:23:30 ispc maldet(3928184): {scan} scan of (57 files) in progress... Nov 11 05:23:30 ispc maldet(3928184): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 3582s Nov 11 05:23:30 ispc maldet(3928184): {scan} scan report saved, to view run: maldet --report 251111-0423.3928184 Nov 12 04:10:12 ispc maldet(4035110): {update} checking for available updates... Nov 12 04:10:12 ispc maldet(4035110): {update} could not download version file from server, please try again later. Nov 12 04:10:18 ispc maldet(4035189): {sigup} performing signature update check... Nov 12 04:10:18 ispc maldet(4035189): {sigup} local signature set is version 2017022510908 Nov 12 04:10:18 ispc maldet(4035189): {sigup} could not download signature data from server, please try again later. Nov 12 04:10:24 ispc maldet(4035270): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 12 04:10:31 ispc maldet(4035270): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 12 04:10:32 ispc maldet(4035270): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 12 04:10:32 ispc maldet(4035270): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 12 04:10:33 ispc maldet(4035270): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 12 05:05:45 ispc maldet(4035270): {scan} file list completed in 3312s, found 63 files... Nov 12 05:05:45 ispc maldet(4035270): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 12 05:05:46 ispc maldet(4035270): {scan} scan of (63 files) in progress... Nov 12 05:05:49 ispc maldet(4035270): {scan} scan completed on : files 63, malware hits 0, cleaned hits 0, time 3323s Nov 12 05:05:49 ispc maldet(4035270): {scan} scan report saved, to view run: maldet --report 251112-0410.4035270 Nov 13 04:12:14 ispc maldet(4141887): {update} checking for available updates... Nov 13 04:12:15 ispc maldet(4141887): {update} could not download version file from server, please try again later. Nov 13 04:12:20 ispc maldet(4141960): {sigup} performing signature update check... Nov 13 04:12:20 ispc maldet(4141960): {sigup} local signature set is version 2017022510908 Nov 13 04:12:21 ispc maldet(4141960): {sigup} could not download signature data from server, please try again later. Nov 13 04:12:27 ispc maldet(4142079): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 13 04:12:33 ispc maldet(4142079): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 13 04:12:33 ispc maldet(4142079): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 13 04:12:34 ispc maldet(4142079): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 13 04:12:34 ispc maldet(4142079): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 13 05:34:00 ispc maldet(4142079): {scan} file list completed in 4885s, found 58 files... Nov 13 05:34:00 ispc maldet(4142079): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 13 05:34:00 ispc maldet(4142079): {scan} scan of (58 files) in progress... Nov 13 05:34:01 ispc maldet(4142079): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 4894s Nov 13 05:34:01 ispc maldet(4142079): {scan} scan report saved, to view run: maldet --report 251113-0412.4142079 Nov 14 04:19:16 ispc maldet(80270): {update} checking for available updates... Nov 14 04:19:16 ispc maldet(80270): {update} could not download version file from server, please try again later. Nov 14 04:19:19 ispc maldet(80344): {sigup} performing signature update check... Nov 14 04:19:19 ispc maldet(80344): {sigup} local signature set is version 2017022510908 Nov 14 04:19:19 ispc maldet(80344): {sigup} could not download signature data from server, please try again later. Nov 14 04:19:24 ispc maldet(80430): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 14 04:19:26 ispc maldet(80430): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 14 04:19:27 ispc maldet(80430): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 14 04:19:27 ispc maldet(80430): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 14 04:19:27 ispc maldet(80430): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 14 04:53:12 ispc maldet(80430): {scan} file list completed in 2025s, found 54 files... Nov 14 04:53:13 ispc maldet(80430): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 14 04:53:13 ispc maldet(80430): {scan} scan of (54 files) in progress... Nov 14 04:53:16 ispc maldet(80430): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 2031s Nov 14 04:53:16 ispc maldet(80430): {scan} scan report saved, to view run: maldet --report 251114-0419.80430 Nov 15 04:21:01 ispc maldet(207798): {update} checking for available updates... Nov 15 04:21:01 ispc maldet(207798): {update} could not download version file from server, please try again later. Nov 15 04:21:05 ispc maldet(207888): {sigup} performing signature update check... Nov 15 04:21:06 ispc maldet(207888): {sigup} local signature set is version 2017022510908 Nov 15 04:21:06 ispc maldet(207888): {sigup} could not download signature data from server, please try again later. Nov 15 04:21:10 ispc maldet(207975): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 15 04:21:15 ispc maldet(207975): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 15 04:21:15 ispc maldet(207975): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 15 04:21:15 ispc maldet(207975): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 15 04:21:15 ispc maldet(207975): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 15 04:55:30 ispc maldet(207975): {scan} file list completed in 2054s, found 57 files... Nov 15 04:55:30 ispc maldet(207975): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 15 04:55:30 ispc maldet(207975): {scan} scan of (57 files) in progress... Nov 15 04:55:35 ispc maldet(207975): {scan} scan completed on : files 57, malware hits 0, cleaned hits 0, time 2065s Nov 15 04:55:36 ispc maldet(207975): {scan} scan report saved, to view run: maldet --report 251115-0421.207975 Nov 16 04:20:43 ispc maldet(332712): {update} checking for available updates... Nov 16 04:20:44 ispc maldet(332712): {update} could not download version file from server, please try again later. Nov 16 04:20:49 ispc maldet(332791): {sigup} performing signature update check... Nov 16 04:20:49 ispc maldet(332791): {sigup} local signature set is version 2017022510908 Nov 16 04:20:50 ispc maldet(332791): {sigup} could not download signature data from server, please try again later. Nov 16 04:20:54 ispc maldet(332878): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 16 04:21:00 ispc maldet(332878): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 16 04:21:00 ispc maldet(332878): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 16 04:21:00 ispc maldet(332878): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 16 04:21:00 ispc maldet(332878): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 16 04:54:28 ispc maldet(332878): {scan} file list completed in 2008s, found 59 files... Nov 16 04:54:28 ispc maldet(332878): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 16 04:54:28 ispc maldet(332878): {scan} scan of (59 files) in progress... Nov 16 04:54:31 ispc maldet(332878): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 2016s Nov 16 04:54:31 ispc maldet(332878): {scan} scan report saved, to view run: maldet --report 251116-0420.332878 Nov 17 04:17:30 ispc maldet(452544): {update} checking for available updates... Nov 17 04:17:31 ispc maldet(452544): {update} could not download version file from server, please try again later. Nov 17 04:17:36 ispc maldet(452616): {sigup} performing signature update check... Nov 17 04:17:37 ispc maldet(452616): {sigup} local signature set is version 2017022510908 Nov 17 04:17:37 ispc maldet(452616): {sigup} could not download signature data from server, please try again later. Nov 17 04:17:44 ispc maldet(452701): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 17 04:17:50 ispc maldet(452701): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 17 04:17:51 ispc maldet(452701): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 17 04:17:51 ispc maldet(452701): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 17 04:17:52 ispc maldet(452701): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 17 05:11:55 ispc maldet(452701): {scan} file list completed in 3242s, found 52 files... Nov 17 05:11:55 ispc maldet(452701): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 17 05:11:55 ispc maldet(452701): {scan} scan of (52 files) in progress... Nov 17 05:11:59 ispc maldet(452701): {scan} scan completed on : files 52, malware hits 0, cleaned hits 0, time 3254s Nov 17 05:12:00 ispc maldet(452701): {scan} scan report saved, to view run: maldet --report 251117-0417.452701 Nov 18 04:10:23 ispc maldet(564329): {update} checking for available updates... Nov 18 04:10:23 ispc maldet(564329): {update} could not download version file from server, please try again later. Nov 18 04:10:27 ispc maldet(564408): {sigup} performing signature update check... Nov 18 04:10:28 ispc maldet(564408): {sigup} local signature set is version 2017022510908 Nov 18 04:10:28 ispc maldet(564408): {sigup} could not download signature data from server, please try again later. Nov 18 04:10:34 ispc maldet(564490): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 18 04:10:43 ispc maldet(564490): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 18 04:10:44 ispc maldet(564490): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 18 04:10:44 ispc maldet(564490): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 18 04:10:45 ispc maldet(564490): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 18 05:12:19 ispc maldet(564490): {scan} file list completed in 3694s, found 32 files... Nov 18 05:12:20 ispc maldet(564490): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 18 05:12:20 ispc maldet(564490): {scan} scan of (32 files) in progress... Nov 18 05:12:24 ispc maldet(564490): {scan} scan completed on : files 32, malware hits 0, cleaned hits 0, time 3708s Nov 18 05:12:25 ispc maldet(564490): {scan} scan report saved, to view run: maldet --report 251118-0410.564490 Nov 19 04:10:01 ispc maldet(676807): {update} checking for available updates... Nov 19 04:10:02 ispc maldet(676807): {update} could not download version file from server, please try again later. Nov 19 04:10:07 ispc maldet(676906): {sigup} performing signature update check... Nov 19 04:10:07 ispc maldet(676906): {sigup} local signature set is version 2017022510908 Nov 19 04:10:08 ispc maldet(676906): {sigup} could not download signature data from server, please try again later. Nov 19 04:10:13 ispc maldet(677043): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 19 04:10:22 ispc maldet(677043): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 19 04:10:22 ispc maldet(677043): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 19 04:10:22 ispc maldet(677043): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 19 04:10:23 ispc maldet(677043): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 19 05:26:36 ispc maldet(677043): {scan} file list completed in 4572s, found 32 files... Nov 19 05:26:37 ispc maldet(677043): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 19 05:26:37 ispc maldet(677043): {scan} scan of (32 files) in progress... Nov 19 05:26:38 ispc maldet(677043): {scan} scan completed on : files 32, malware hits 0, cleaned hits 0, time 4584s Nov 19 05:26:38 ispc maldet(677043): {scan} scan report saved, to view run: maldet --report 251119-0410.677043 Nov 20 04:22:40 ispc maldet(792850): {update} checking for available updates... Nov 20 04:22:41 ispc maldet(792850): {update} could not download version file from server, please try again later. Nov 20 04:22:45 ispc maldet(792922): {sigup} performing signature update check... Nov 20 04:22:46 ispc maldet(792922): {sigup} local signature set is version 2017022510908 Nov 20 04:22:47 ispc maldet(792922): {sigup} could not download signature data from server, please try again later. Nov 20 04:22:51 ispc maldet(793009): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 20 04:22:58 ispc maldet(793009): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 20 04:22:58 ispc maldet(793009): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 20 04:22:58 ispc maldet(793009): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 20 04:22:59 ispc maldet(793009): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 20 05:15:31 ispc maldet(793009): {scan} file list completed in 3152s, found 32 files... Nov 20 05:15:32 ispc maldet(793009): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 20 05:15:32 ispc maldet(793009): {scan} scan of (32 files) in progress... Nov 20 05:15:37 ispc maldet(793009): {scan} scan completed on : files 32, malware hits 0, cleaned hits 0, time 3165s Nov 20 05:15:37 ispc maldet(793009): {scan} scan report saved, to view run: maldet --report 251120-0422.793009 Nov 21 04:10:25 ispc maldet(911205): {update} checking for available updates... Nov 21 04:10:26 ispc maldet(911205): {update} could not download version file from server, please try again later. Nov 21 04:10:30 ispc maldet(911282): {sigup} performing signature update check... Nov 21 04:10:30 ispc maldet(911282): {sigup} local signature set is version 2017022510908 Nov 21 04:10:31 ispc maldet(911282): {sigup} could not download signature data from server, please try again later. Nov 21 04:10:36 ispc maldet(911369): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 21 04:10:44 ispc maldet(911369): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 21 04:10:45 ispc maldet(911369): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 21 04:10:45 ispc maldet(911369): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 21 04:10:46 ispc maldet(911369): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 21 07:05:38 ispc maldet(911369): {scan} file list completed in 10491s, found 206 files... Nov 21 07:05:39 ispc maldet(911369): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 21 07:05:39 ispc maldet(911369): {scan} scan of (206 files) in progress... Nov 21 07:05:42 ispc maldet(911369): {scan} scan completed on : files 206, malware hits 0, cleaned hits 0, time 10504s Nov 21 07:05:43 ispc maldet(911369): {scan} scan report saved, to view run: maldet --report 251121-0410.911369 Nov 22 04:11:32 ispc maldet(1031172): {update} checking for available updates... Nov 22 04:11:33 ispc maldet(1031172): {update} could not download version file from server, please try again later. Nov 22 04:11:37 ispc maldet(1031245): {sigup} performing signature update check... Nov 22 04:11:37 ispc maldet(1031245): {sigup} local signature set is version 2017022510908 Nov 22 04:11:38 ispc maldet(1031245): {sigup} could not download signature data from server, please try again later. Nov 22 04:11:44 ispc maldet(1031327): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 22 04:11:52 ispc maldet(1031327): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 22 04:11:52 ispc maldet(1031327): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 22 04:11:52 ispc maldet(1031327): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 22 04:11:53 ispc maldet(1031327): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 22 07:02:35 ispc maldet(1031327): {scan} file list completed in 10243s, found 80 files... Nov 22 07:02:36 ispc maldet(1031327): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 22 07:02:36 ispc maldet(1031327): {scan} scan of (80 files) in progress... Nov 22 07:02:41 ispc maldet(1031327): {scan} scan completed on : files 80, malware hits 0, cleaned hits 0, time 10256s Nov 22 07:02:41 ispc maldet(1031327): {scan} scan report saved, to view run: maldet --report 251122-0411.1031327 Nov 23 04:15:16 ispc maldet(1152416): {update} checking for available updates... Nov 23 04:15:17 ispc maldet(1152416): {update} could not download version file from server, please try again later. Nov 23 04:15:22 ispc maldet(1152492): {sigup} performing signature update check... Nov 23 04:15:22 ispc maldet(1152492): {sigup} local signature set is version 2017022510908 Nov 23 04:15:23 ispc maldet(1152492): {sigup} could not download signature data from server, please try again later. Nov 23 04:15:28 ispc maldet(1152574): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 23 04:15:36 ispc maldet(1152574): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 23 04:15:36 ispc maldet(1152574): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 23 04:15:37 ispc maldet(1152574): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 23 04:15:37 ispc maldet(1152574): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 23 05:11:08 ispc maldet(1152574): {scan} file list completed in 3330s, found 32 files... Nov 23 05:11:08 ispc maldet(1152574): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 23 05:11:09 ispc maldet(1152574): {scan} scan of (32 files) in progress... Nov 23 05:11:11 ispc maldet(1152574): {scan} scan completed on : files 32, malware hits 0, cleaned hits 0, time 3343s Nov 23 05:11:12 ispc maldet(1152574): {scan} scan report saved, to view run: maldet --report 251123-0415.1152574 Nov 24 04:15:57 ispc maldet(1272550): {update} checking for available updates... Nov 24 04:15:57 ispc maldet(1272550): {update} could not download version file from server, please try again later. Nov 24 04:16:02 ispc maldet(1272629): {sigup} performing signature update check... Nov 24 04:16:03 ispc maldet(1272629): {sigup} local signature set is version 2017022510908 Nov 24 04:16:04 ispc maldet(1272629): {sigup} could not download signature data from server, please try again later. Nov 24 04:16:09 ispc maldet(1272722): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 24 04:16:17 ispc maldet(1272722): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 24 04:16:17 ispc maldet(1272722): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 24 04:16:18 ispc maldet(1272722): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 24 04:16:18 ispc maldet(1272722): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 24 04:59:23 ispc maldet(1272722): {scan} file list completed in 2585s, found 32 files... Nov 24 04:59:24 ispc maldet(1272722): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 24 04:59:24 ispc maldet(1272722): {scan} scan of (32 files) in progress... Nov 24 04:59:28 ispc maldet(1272722): {scan} scan completed on : files 32, malware hits 0, cleaned hits 0, time 2597s Nov 24 04:59:28 ispc maldet(1272722): {scan} scan report saved, to view run: maldet --report 251124-0416.1272722 Nov 25 04:08:20 ispc maldet(1390183): {update} checking for available updates... Nov 25 04:08:20 ispc maldet(1390183): {update} could not download version file from server, please try again later. Nov 25 04:08:25 ispc maldet(1390259): {sigup} performing signature update check... Nov 25 04:08:26 ispc maldet(1390259): {sigup} local signature set is version 2017022510908 Nov 25 04:08:26 ispc maldet(1390259): {sigup} could not download signature data from server, please try again later. Nov 25 04:08:32 ispc maldet(1390346): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 25 04:08:37 ispc maldet(1390346): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 25 04:08:37 ispc maldet(1390346): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 25 04:08:37 ispc maldet(1390346): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 25 04:08:38 ispc maldet(1390346): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 25 05:49:37 ispc maldet(1390346): {scan} file list completed in 6060s, found 32 files... Nov 25 05:49:38 ispc maldet(1390346): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 25 05:49:38 ispc maldet(1390346): {scan} scan of (32 files) in progress... Nov 25 05:49:42 ispc maldet(1390346): {scan} scan completed on : files 32, malware hits 0, cleaned hits 0, time 6069s Nov 25 05:49:43 ispc maldet(1390346): {scan} scan report saved, to view run: maldet --report 251125-0408.1390346 Nov 26 04:04:59 ispc maldet(88421): {update} checking for available updates... Nov 26 04:04:59 ispc maldet(88421): {update} could not download version file from server, please try again later. Nov 26 04:04:59 ispc maldet(88493): {sigup} performing signature update check... Nov 26 04:04:59 ispc maldet(88493): {sigup} local signature set is version 2017022510908 Nov 26 04:04:59 ispc maldet(88493): {sigup} could not download signature data from server, please try again later. Nov 26 04:04:59 ispc maldet(88574): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 26 04:05:00 ispc maldet(88574): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 26 04:05:00 ispc maldet(88574): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 26 04:05:00 ispc maldet(88574): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 26 04:05:00 ispc maldet(88574): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 26 04:05:24 ispc maldet(88574): {scan} file list completed in 24s, found 66 files... Nov 26 04:05:24 ispc maldet(88574): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 26 04:05:24 ispc maldet(88574): {scan} scan of (66 files) in progress... Nov 26 04:05:24 ispc maldet(88574): {scan} scan completed on : files 66, malware hits 0, cleaned hits 0, time 25s Nov 26 04:05:24 ispc maldet(88574): {scan} scan report saved, to view run: maldet --report 251126-0404.88574 Nov 27 04:07:52 ispc maldet(226308): {update} checking for available updates... Nov 27 04:07:52 ispc maldet(226308): {update} could not download version file from server, please try again later. Nov 27 04:07:53 ispc maldet(226380): {sigup} performing signature update check... Nov 27 04:07:53 ispc maldet(226380): {sigup} local signature set is version 2017022510908 Nov 27 04:07:53 ispc maldet(226380): {sigup} could not download signature data from server, please try again later. Nov 27 04:07:53 ispc maldet(226465): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 27 04:07:53 ispc maldet(226465): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 27 04:07:53 ispc maldet(226465): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 27 04:07:53 ispc maldet(226465): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 27 04:07:53 ispc maldet(226465): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 27 04:08:17 ispc maldet(226465): {scan} file list completed in 24s, found 58 files... Nov 27 04:08:17 ispc maldet(226465): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 27 04:08:17 ispc maldet(226465): {scan} scan of (58 files) in progress... Nov 27 04:08:18 ispc maldet(226465): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 24s Nov 27 04:08:18 ispc maldet(226465): {scan} scan report saved, to view run: maldet --report 251127-0407.226465 Nov 28 04:20:44 ispc maldet(359182): {update} checking for available updates... Nov 28 04:20:44 ispc maldet(359182): {update} could not download version file from server, please try again later. Nov 28 04:20:44 ispc maldet(359255): {sigup} performing signature update check... Nov 28 04:20:44 ispc maldet(359255): {sigup} local signature set is version 2017022510908 Nov 28 04:20:44 ispc maldet(359255): {sigup} could not download signature data from server, please try again later. Nov 28 04:20:44 ispc maldet(359336): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 28 04:20:44 ispc maldet(359336): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 28 04:20:44 ispc maldet(359336): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 28 04:20:44 ispc maldet(359336): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 28 04:20:44 ispc maldet(359336): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 28 04:21:10 ispc maldet(359336): {scan} file list completed in 26s, found 60 files... Nov 28 04:21:10 ispc maldet(359336): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 28 04:21:10 ispc maldet(359336): {scan} scan of (60 files) in progress... Nov 28 04:21:10 ispc maldet(359336): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 26s Nov 28 04:21:10 ispc maldet(359336): {scan} scan report saved, to view run: maldet --report 251128-0420.359336 Nov 30 04:04:23 ispc maldet(79040): {update} checking for available updates... Nov 30 04:04:23 ispc maldet(79040): {update} could not download version file from server, please try again later. Nov 30 04:04:24 ispc maldet(79112): {sigup} performing signature update check... Nov 30 04:04:24 ispc maldet(79112): {sigup} local signature set is version 2017022510908 Nov 30 04:04:24 ispc maldet(79112): {sigup} could not download signature data from server, please try again later. Nov 30 04:04:24 ispc maldet(79193): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 30 04:04:24 ispc maldet(79193): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Nov 30 04:04:24 ispc maldet(79193): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 30 04:04:24 ispc maldet(79193): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 30 04:04:24 ispc maldet(79193): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 30 04:04:59 ispc maldet(79193): {scan} file list completed in 31s, found 888645 files... Nov 30 04:04:59 ispc maldet(79193): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Nov 30 04:04:59 ispc maldet(79193): {scan} scan of (888645 files) in progress... Nov 30 04:04:59 ispc maldet(79193): {scan} scan completed on : files 888645, malware hits 0, cleaned hits 0, time 35s Nov 30 04:05:00 ispc maldet(79193): {scan} scan report saved, to view run: maldet --report 251130-0404.79193 Dec 01 04:05:34 ispc maldet(41488): {update} checking for available updates... Dec 01 04:05:34 ispc maldet(41488): {update} could not download version file from server, please try again later. Dec 01 04:05:34 ispc maldet(41560): {sigup} performing signature update check... Dec 01 04:05:35 ispc maldet(41560): {sigup} local signature set is version 2017022510908 Dec 01 04:05:35 ispc maldet(41560): {sigup} could not download signature data from server, please try again later. Dec 01 04:05:35 ispc maldet(41641): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 01 04:05:35 ispc maldet(41641): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 01 04:05:35 ispc maldet(41641): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 01 04:05:35 ispc maldet(41641): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 01 04:05:35 ispc maldet(41641): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 01 04:05:56 ispc maldet(41641): {scan} file list completed in 19s, found 888646 files... Dec 01 04:05:56 ispc maldet(41641): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 01 04:05:57 ispc maldet(41641): {scan} scan of (888646 files) in progress... Dec 01 04:05:57 ispc maldet(41641): {scan} scan completed on : files 888646, malware hits 0, cleaned hits 0, time 22s Dec 01 04:05:57 ispc maldet(41641): {scan} scan report saved, to view run: maldet --report 251201-0405.41641 Dec 02 04:05:58 ispc maldet(152462): {update} checking for available updates... Dec 02 04:05:58 ispc maldet(152462): {update} could not download version file from server, please try again later. Dec 02 04:05:58 ispc maldet(152534): {sigup} performing signature update check... Dec 02 04:05:58 ispc maldet(152534): {sigup} local signature set is version 2017022510908 Dec 02 04:05:58 ispc maldet(152534): {sigup} could not download signature data from server, please try again later. Dec 02 04:05:59 ispc maldet(152615): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 02 04:05:59 ispc maldet(152615): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 02 04:05:59 ispc maldet(152615): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 02 04:05:59 ispc maldet(152615): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 02 04:05:59 ispc maldet(152615): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 02 04:06:17 ispc maldet(152615): {scan} file list completed in 18s, found 59 files... Dec 02 04:06:17 ispc maldet(152615): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 02 04:06:17 ispc maldet(152615): {scan} scan of (59 files) in progress... Dec 02 04:06:17 ispc maldet(152615): {scan} scan completed on : files 59, malware hits 0, cleaned hits 0, time 18s Dec 02 04:06:17 ispc maldet(152615): {scan} scan report saved, to view run: maldet --report 251202-0405.152615 Dec 03 04:10:26 ispc maldet(265194): {update} checking for available updates... Dec 03 04:10:26 ispc maldet(265194): {update} could not download version file from server, please try again later. Dec 03 04:10:26 ispc maldet(265266): {sigup} performing signature update check... Dec 03 04:10:26 ispc maldet(265266): {sigup} local signature set is version 2017022510908 Dec 03 04:10:27 ispc maldet(265266): {sigup} could not download signature data from server, please try again later. Dec 03 04:10:27 ispc maldet(265347): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 03 04:10:27 ispc maldet(265347): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 03 04:10:27 ispc maldet(265347): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 03 04:10:27 ispc maldet(265347): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 03 04:10:27 ispc maldet(265347): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 03 04:11:01 ispc maldet(265347): {scan} file list completed in 34s, found 63 files... Dec 03 04:11:01 ispc maldet(265347): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 03 04:11:01 ispc maldet(265347): {scan} scan of (63 files) in progress... Dec 03 04:11:01 ispc maldet(265347): {scan} scan completed on : files 63, malware hits 0, cleaned hits 0, time 34s Dec 03 04:11:01 ispc maldet(265347): {scan} scan report saved, to view run: maldet --report 251203-0410.265347 Dec 04 04:10:28 ispc maldet(379930): {update} checking for available updates... Dec 04 04:10:29 ispc maldet(379930): {update} could not download version file from server, please try again later. Dec 04 04:10:29 ispc maldet(380002): {sigup} performing signature update check... Dec 04 04:10:29 ispc maldet(380002): {sigup} local signature set is version 2017022510908 Dec 04 04:10:29 ispc maldet(380002): {sigup} could not download signature data from server, please try again later. Dec 04 04:10:30 ispc maldet(380083): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 04 04:10:31 ispc maldet(380083): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 04 04:10:31 ispc maldet(380083): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 04 04:10:31 ispc maldet(380083): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 04 04:10:31 ispc maldet(380083): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 04 04:16:51 ispc maldet(380083): {scan} file list completed in 380s, found 58 files... Dec 04 04:16:51 ispc maldet(380083): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 04 04:16:51 ispc maldet(380083): {scan} scan of (58 files) in progress... Dec 04 04:16:52 ispc maldet(380083): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 382s Dec 04 04:16:52 ispc maldet(380083): {scan} scan report saved, to view run: maldet --report 251204-0410.380083 Dec 05 04:09:03 ispc maldet(489942): {update} checking for available updates... Dec 05 04:09:03 ispc maldet(489942): {update} could not download version file from server, please try again later. Dec 05 04:09:05 ispc maldet(490014): {sigup} performing signature update check... Dec 05 04:09:05 ispc maldet(490014): {sigup} local signature set is version 2017022510908 Dec 05 04:09:05 ispc maldet(490014): {sigup} could not download signature data from server, please try again later. Dec 05 04:09:06 ispc maldet(490096): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 05 04:09:09 ispc maldet(490096): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 05 04:09:09 ispc maldet(490096): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 05 04:09:09 ispc maldet(490096): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 05 04:09:09 ispc maldet(490096): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 05 04:54:33 ispc maldet(490096): {scan} file list completed in 2724s, found 56 files... Dec 05 04:54:33 ispc maldet(490096): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 05 04:54:33 ispc maldet(490096): {scan} scan of (56 files) in progress... Dec 05 04:54:36 ispc maldet(490096): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 2729s Dec 05 04:54:37 ispc maldet(490096): {scan} scan report saved, to view run: maldet --report 251205-0409.490096 Dec 06 04:19:50 ispc maldet(602437): {update} checking for available updates... Dec 06 04:19:50 ispc maldet(602437): {update} could not download version file from server, please try again later. Dec 06 04:19:50 ispc maldet(602509): {sigup} performing signature update check... Dec 06 04:19:50 ispc maldet(602509): {sigup} local signature set is version 2017022510908 Dec 06 04:19:50 ispc maldet(602509): {sigup} could not download signature data from server, please try again later. Dec 06 04:19:51 ispc maldet(602590): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 06 04:19:52 ispc maldet(602590): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 06 04:19:52 ispc maldet(602590): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 06 04:19:52 ispc maldet(602590): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 06 04:19:52 ispc maldet(602590): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 06 05:28:14 ispc maldet(602590): {scan} file list completed in 4102s, found 54 files... Dec 06 05:28:14 ispc maldet(602590): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 06 05:28:14 ispc maldet(602590): {scan} scan of (54 files) in progress... Dec 06 05:28:16 ispc maldet(602590): {scan} scan completed on : files 54, malware hits 0, cleaned hits 0, time 4105s Dec 06 05:28:16 ispc maldet(602590): {scan} scan report saved, to view run: maldet --report 251206-0419.602590 Dec 07 04:21:01 ispc maldet(714193): {update} checking for available updates... Dec 07 04:21:01 ispc maldet(714193): {update} could not download version file from server, please try again later. Dec 07 04:21:02 ispc maldet(714274): {sigup} performing signature update check... Dec 07 04:21:02 ispc maldet(714274): {sigup} local signature set is version 2017022510908 Dec 07 04:21:02 ispc maldet(714274): {sigup} could not download signature data from server, please try again later. Dec 07 04:21:03 ispc maldet(714360): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 07 04:21:05 ispc maldet(714360): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 07 04:21:05 ispc maldet(714360): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 07 04:21:05 ispc maldet(714360): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 07 04:21:05 ispc maldet(714360): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 07 05:12:51 ispc maldet(714360): {scan} file list completed in 3106s, found 63 files... Dec 07 05:12:51 ispc maldet(714360): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 07 05:12:51 ispc maldet(714360): {scan} scan of (63 files) in progress... Dec 07 05:12:52 ispc maldet(714360): {scan} scan completed on : files 63, malware hits 0, cleaned hits 0, time 3109s Dec 07 05:12:52 ispc maldet(714360): {scan} scan report saved, to view run: maldet --report 251207-0421.714360 Dec 08 04:10:07 ispc maldet(825423): {update} checking for available updates... Dec 08 04:10:08 ispc maldet(825423): {update} could not download version file from server, please try again later. Dec 08 04:10:09 ispc maldet(825497): {sigup} performing signature update check... Dec 08 04:10:10 ispc maldet(825497): {sigup} local signature set is version 2017022510908 Dec 08 04:10:10 ispc maldet(825497): {sigup} could not download signature data from server, please try again later. Dec 08 04:10:11 ispc maldet(825580): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 08 04:10:14 ispc maldet(825580): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 08 04:10:14 ispc maldet(825580): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 08 04:10:14 ispc maldet(825580): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 08 04:10:14 ispc maldet(825580): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 08 05:33:43 ispc maldet(825580): {scan} file list completed in 5009s, found 58 files... Dec 08 05:33:43 ispc maldet(825580): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 08 05:33:43 ispc maldet(825580): {scan} scan of (58 files) in progress... Dec 08 05:33:44 ispc maldet(825580): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 5012s Dec 08 05:33:44 ispc maldet(825580): {scan} scan report saved, to view run: maldet --report 251208-0410.825580 Dec 09 04:07:43 ispc maldet(938251): {update} checking for available updates... Dec 09 04:07:44 ispc maldet(938251): {update} could not download version file from server, please try again later. Dec 09 04:07:45 ispc maldet(938327): {sigup} performing signature update check... Dec 09 04:07:45 ispc maldet(938327): {sigup} local signature set is version 2017022510908 Dec 09 04:07:45 ispc maldet(938327): {sigup} could not download signature data from server, please try again later. Dec 09 04:07:47 ispc maldet(938408): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 09 04:07:50 ispc maldet(938408): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 09 04:07:50 ispc maldet(938408): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 09 04:07:50 ispc maldet(938408): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 09 04:07:50 ispc maldet(938408): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 09 04:16:10 ispc maldet(938408): {scan} file list completed in 499s, found 62 files... Dec 09 04:16:10 ispc maldet(938408): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 09 04:16:10 ispc maldet(938408): {scan} scan of (62 files) in progress... Dec 09 04:16:11 ispc maldet(938408): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 503s Dec 09 04:16:11 ispc maldet(938408): {scan} scan report saved, to view run: maldet --report 251209-0407.938408 Dec 10 04:08:01 ispc maldet(1051227): {update} checking for available updates... Dec 10 04:08:02 ispc maldet(1051227): {update} could not download version file from server, please try again later. Dec 10 04:08:03 ispc maldet(1051306): {sigup} performing signature update check... Dec 10 04:08:03 ispc maldet(1051306): {sigup} local signature set is version 2017022510908 Dec 10 04:08:03 ispc maldet(1051306): {sigup} could not download signature data from server, please try again later. Dec 10 04:08:04 ispc maldet(1051395): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 10 04:08:06 ispc maldet(1051395): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 10 04:08:06 ispc maldet(1051395): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 10 04:08:06 ispc maldet(1051395): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 10 04:08:06 ispc maldet(1051395): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 10 04:21:38 ispc maldet(1051395): {scan} file list completed in 812s, found 64 files... Dec 10 04:21:38 ispc maldet(1051395): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 10 04:21:38 ispc maldet(1051395): {scan} scan of (64 files) in progress... Dec 10 04:21:39 ispc maldet(1051395): {scan} scan completed on : files 64, malware hits 0, cleaned hits 0, time 814s Dec 10 04:21:39 ispc maldet(1051395): {scan} scan report saved, to view run: maldet --report 251210-0408.1051395 Dec 11 04:18:38 ispc maldet(1161855): {update} checking for available updates... Dec 11 04:18:38 ispc maldet(1161855): {update} could not download version file from server, please try again later. Dec 11 04:18:39 ispc maldet(1161928): {sigup} performing signature update check... Dec 11 04:18:39 ispc maldet(1161928): {sigup} local signature set is version 2017022510908 Dec 11 04:18:39 ispc maldet(1161928): {sigup} could not download signature data from server, please try again later. Dec 11 04:18:40 ispc maldet(1162009): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 11 04:18:44 ispc maldet(1162009): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 11 04:18:44 ispc maldet(1162009): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 11 04:18:44 ispc maldet(1162009): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 11 04:18:44 ispc maldet(1162009): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 11 04:56:16 ispc maldet(1162009): {scan} file list completed in 2251s, found 61 files... Dec 11 04:56:16 ispc maldet(1162009): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 11 04:56:16 ispc maldet(1162009): {scan} scan of (61 files) in progress... Dec 11 04:56:16 ispc maldet(1162009): {scan} scan completed on : files 61, malware hits 0, cleaned hits 0, time 2256s Dec 11 04:56:17 ispc maldet(1162009): {scan} scan report saved, to view run: maldet --report 251211-0418.1162009 Dec 12 04:09:37 ispc maldet(1271983): {update} checking for available updates... Dec 12 04:09:37 ispc maldet(1271983): {update} could not download version file from server, please try again later. Dec 12 04:09:37 ispc maldet(1272056): {sigup} performing signature update check... Dec 12 04:09:37 ispc maldet(1272056): {sigup} local signature set is version 2017022510908 Dec 12 04:09:38 ispc maldet(1272056): {sigup} could not download signature data from server, please try again later. Dec 12 04:09:39 ispc maldet(1272138): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 12 04:09:40 ispc maldet(1272138): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 12 04:09:40 ispc maldet(1272138): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 12 04:09:40 ispc maldet(1272138): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 12 04:09:40 ispc maldet(1272138): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 12 04:52:01 ispc maldet(1272138): {scan} file list completed in 2541s, found 61 files... Dec 12 04:52:01 ispc maldet(1272138): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 12 04:52:01 ispc maldet(1272138): {scan} scan of (61 files) in progress... Dec 12 04:52:01 ispc maldet(1272138): {scan} scan completed on : files 61, malware hits 0, cleaned hits 0, time 2542s Dec 12 04:52:01 ispc maldet(1272138): {scan} scan report saved, to view run: maldet --report 251212-0409.1272138 Dec 13 04:09:24 ispc maldet(1383642): {update} checking for available updates... Dec 13 04:09:25 ispc maldet(1383642): {update} could not download version file from server, please try again later. Dec 13 04:09:26 ispc maldet(1383714): {sigup} performing signature update check... Dec 13 04:09:26 ispc maldet(1383714): {sigup} local signature set is version 2017022510908 Dec 13 04:09:26 ispc maldet(1383714): {sigup} could not download signature data from server, please try again later. Dec 13 04:09:29 ispc maldet(1383795): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 13 04:09:30 ispc maldet(1383795): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 13 04:09:30 ispc maldet(1383795): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 13 04:09:30 ispc maldet(1383795): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 13 04:09:30 ispc maldet(1383795): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 13 04:54:21 ispc maldet(1383795): {scan} file list completed in 2691s, found 58 files... Dec 13 04:54:21 ispc maldet(1383795): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 13 04:54:22 ispc maldet(1383795): {scan} scan of (58 files) in progress... Dec 13 04:54:22 ispc maldet(1383795): {scan} scan completed on : files 58, malware hits 0, cleaned hits 0, time 2693s Dec 13 04:54:23 ispc maldet(1383795): {scan} scan report saved, to view run: maldet --report 251213-0409.1383795 Dec 14 04:21:07 ispc maldet(1495069): {update} checking for available updates... Dec 14 04:21:08 ispc maldet(1495069): {update} could not download version file from server, please try again later. Dec 14 04:21:09 ispc maldet(1495143): {sigup} performing signature update check... Dec 14 04:21:09 ispc maldet(1495143): {sigup} local signature set is version 2017022510908 Dec 14 04:21:09 ispc maldet(1495143): {sigup} could not download signature data from server, please try again later. Dec 14 04:21:10 ispc maldet(1495224): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 14 04:21:11 ispc maldet(1495224): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 14 04:21:11 ispc maldet(1495224): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 14 04:21:11 ispc maldet(1495224): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 14 04:21:11 ispc maldet(1495224): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 14 04:40:41 ispc maldet(1495224): {scan} file list completed in 1169s, found 65 files... Dec 14 04:40:41 ispc maldet(1495224): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 14 04:40:41 ispc maldet(1495224): {scan} scan of (65 files) in progress... Dec 14 04:40:43 ispc maldet(1495224): {scan} scan completed on : files 65, malware hits 0, cleaned hits 0, time 1173s Dec 14 04:40:44 ispc maldet(1495224): {scan} scan report saved, to view run: maldet --report 251214-0421.1495224 Dec 15 04:07:51 ispc maldet(1605238): {update} checking for available updates... Dec 15 04:07:51 ispc maldet(1605238): {update} could not download version file from server, please try again later. Dec 15 04:07:53 ispc maldet(1605310): {sigup} performing signature update check... Dec 15 04:07:53 ispc maldet(1605310): {sigup} local signature set is version 2017022510908 Dec 15 04:07:53 ispc maldet(1605310): {sigup} could not download signature data from server, please try again later. Dec 15 04:07:54 ispc maldet(1605391): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 15 04:07:56 ispc maldet(1605391): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 15 04:07:56 ispc maldet(1605391): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 15 04:07:56 ispc maldet(1605391): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 15 04:07:56 ispc maldet(1605391): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 15 04:48:54 ispc maldet(1605391): {scan} file list completed in 2458s, found 60 files... Dec 15 04:48:55 ispc maldet(1605391): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 15 04:48:55 ispc maldet(1605391): {scan} scan of (60 files) in progress... Dec 15 04:48:55 ispc maldet(1605391): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 2461s Dec 15 04:48:55 ispc maldet(1605391): {scan} scan report saved, to view run: maldet --report 251215-0407.1605391 Dec 16 04:16:04 ispc maldet(1717658): {update} checking for available updates... Dec 16 04:16:04 ispc maldet(1717658): {update} could not download version file from server, please try again later. Dec 16 04:16:06 ispc maldet(1717730): {sigup} performing signature update check... Dec 16 04:16:06 ispc maldet(1717730): {sigup} local signature set is version 2017022510908 Dec 16 04:16:06 ispc maldet(1717730): {sigup} could not download signature data from server, please try again later. Dec 16 04:16:09 ispc maldet(1717815): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 16 04:16:11 ispc maldet(1717815): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 16 04:16:11 ispc maldet(1717815): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 16 04:16:11 ispc maldet(1717815): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 16 04:16:11 ispc maldet(1717815): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 16 04:27:32 ispc maldet(1717815): {scan} file list completed in 680s, found 62 files... Dec 16 04:27:32 ispc maldet(1717815): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 16 04:27:32 ispc maldet(1717815): {scan} scan of (62 files) in progress... Dec 16 04:27:32 ispc maldet(1717815): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 683s Dec 16 04:27:32 ispc maldet(1717815): {scan} scan report saved, to view run: maldet --report 251216-0416.1717815 Dec 17 04:08:06 ispc maldet(1828656): {update} checking for available updates... Dec 17 04:08:06 ispc maldet(1828656): {update} could not download version file from server, please try again later. Dec 17 04:08:07 ispc maldet(1828728): {sigup} performing signature update check... Dec 17 04:08:07 ispc maldet(1828728): {sigup} local signature set is version 2017022510908 Dec 17 04:08:07 ispc maldet(1828728): {sigup} could not download signature data from server, please try again later. Dec 17 04:08:07 ispc maldet(1828809): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 17 04:08:08 ispc maldet(1828809): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 17 04:08:08 ispc maldet(1828809): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 17 04:08:08 ispc maldet(1828809): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 17 04:08:08 ispc maldet(1828809): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 17 04:19:20 ispc maldet(1828809): {scan} file list completed in 672s, found 60 files... Dec 17 04:19:20 ispc maldet(1828809): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 17 04:19:20 ispc maldet(1828809): {scan} scan of (60 files) in progress... Dec 17 04:19:20 ispc maldet(1828809): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 673s Dec 17 04:19:20 ispc maldet(1828809): {scan} scan report saved, to view run: maldet --report 251217-0408.1828809 Dec 18 04:07:58 ispc maldet(1937442): {update} checking for available updates... Dec 18 04:07:58 ispc maldet(1937442): {update} could not download version file from server, please try again later. Dec 18 04:07:59 ispc maldet(1937516): {sigup} performing signature update check... Dec 18 04:07:59 ispc maldet(1937516): {sigup} local signature set is version 2017022510908 Dec 18 04:07:59 ispc maldet(1937516): {sigup} could not download signature data from server, please try again later. Dec 18 04:08:00 ispc maldet(1937597): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 18 04:08:01 ispc maldet(1937597): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 18 04:08:01 ispc maldet(1937597): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 18 04:08:01 ispc maldet(1937597): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 18 04:08:01 ispc maldet(1937597): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 18 04:18:10 ispc maldet(1937597): {scan} file list completed in 609s, found 62 files... Dec 18 04:18:10 ispc maldet(1937597): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 18 04:18:10 ispc maldet(1937597): {scan} scan of (62 files) in progress... Dec 18 04:18:10 ispc maldet(1937597): {scan} scan completed on : files 62, malware hits 0, cleaned hits 0, time 610s Dec 18 04:18:10 ispc maldet(1937597): {scan} scan report saved, to view run: maldet --report 251218-0408.1937597 Dec 19 04:10:53 ispc maldet(2045315): {update} checking for available updates... Dec 19 04:10:53 ispc maldet(2045315): {update} could not download version file from server, please try again later. Dec 19 04:10:54 ispc maldet(2045387): {sigup} performing signature update check... Dec 19 04:10:54 ispc maldet(2045387): {sigup} local signature set is version 2017022510908 Dec 19 04:10:54 ispc maldet(2045387): {sigup} could not download signature data from server, please try again later. Dec 19 04:10:55 ispc maldet(2045468): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 19 04:10:56 ispc maldet(2045468): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 19 04:10:56 ispc maldet(2045468): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 19 04:10:56 ispc maldet(2045468): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 19 04:10:56 ispc maldet(2045468): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 19 04:17:03 ispc maldet(2045468): {scan} file list completed in 367s, found 60 files... Dec 19 04:17:03 ispc maldet(2045468): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 19 04:17:03 ispc maldet(2045468): {scan} scan of (60 files) in progress... Dec 19 04:17:04 ispc maldet(2045468): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 369s Dec 19 04:17:04 ispc maldet(2045468): {scan} scan report saved, to view run: maldet --report 251219-0410.2045468 Dec 20 04:23:15 ispc maldet(2157595): {update} checking for available updates... Dec 20 04:23:15 ispc maldet(2157595): {update} could not download version file from server, please try again later. Dec 20 04:23:16 ispc maldet(2157667): {sigup} performing signature update check... Dec 20 04:23:16 ispc maldet(2157667): {sigup} local signature set is version 2017022510908 Dec 20 04:23:16 ispc maldet(2157667): {sigup} could not download signature data from server, please try again later. Dec 20 04:23:17 ispc maldet(2157748): {scan} launching scan of /var/www/clients/?/web?/web,/var/www/clients/?/web?/subdomains,/var/www changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 20 04:23:19 ispc maldet(2157748): {scan} signatures loaded: 12079 (9345 MD5 | 1951 HEX | 783 YARA | 0 USER) Dec 20 04:23:19 ispc maldet(2157748): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 20 04:23:19 ispc maldet(2157748): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 20 04:23:19 ispc maldet(2157748): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/var/www/clients/client0/web38/web" "/var/www/clients/client0/web38_bak_2018_06_27_23_10_41/web" "/var/www/clients/client10/web14/web" "/var/www/clients/client10/web148/web" "/var/www/clients/client10/web266/web" "/var/www/clients/client10/web281/web" "/var/www/clients/client11/web15/web" "/var/www/clients/client12/web135/web" "/var/www/clients/client14/web186/web" "/var/www/clients/client15/web105/web" "/var/www/clients/client15/web26/web" "/var/www/clients/client16/web208/web" "/var/www/clients/client16/web300/web" "/var/www/clients/client16/web301/web" "/var/www/clients/client18/web202/web" "/var/www/clients/client18/web331/web" "/var/www/clients/client21/web130/web" "/var/www/clients/client21/web145/web" "/var/www/clients/client21/web286/web" "/var/www/clients/client21/web319/web" "/var/www/clients/client21/web336/web" "/var/www/clients/client24/web289/web" "/var/www/clients/client24/web302/web" "/var/www/clients/client24/web304/web" "/var/www/clients/client24/web305/web" "/var/www/clients/client24/web318/web" "/var/www/clients/client24/web320/web" "/var/www/clients/client24/web324/web" "/var/www/clients/client24/web340/web" "/var/www/clients/client24/web349/web" "/var/www/clients/client24/web350/web" "/var/www/clients/client24/web373/web" "/var/www/clients/client27/web133/web" "/var/www/clients/client27/web154/web" "/var/www/clients/client27/web180/web" "/var/www/clients/client27/web239/web" "/var/www/clients/client27/web285/web" "/var/www/clients/client28/web120/web" "/var/www/clients/client29/web128/web" "/var/www/clients/client34/web150/web" "/var/www/clients/client37/web227/web" "/var/www/clients/client38/web194/web" "/var/www/clients/client38/web216/web" "/var/www/clients/client38/web269/web" "/var/www/clients/client39/web196/web" "/var/www/clients/client4/web117/web" "/var/www/clients/client4/web7/web" "/var/www/clients/client41/web371/web" "/var/www/clients/client42/web223/web" "/var/www/clients/client43/web233/web" "/var/www/clients/client48/web268/web" "/var/www/clients/client48/web327/web" "/var/www/clients/client49/web272/web" "/var/www/clients/client53/web333/web" "/var/www/clients/client54/web297/web" "/var/www/clients/client54/web334/web" "/var/www/clients/client57/web357/web" "/var/www/clients/client6/web372/web" "/var/www/clients/client6/web9/web" "/var/www/clients/\*/web\*/subdomains" "/var/www" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 20 04:26:58 ispc maldet(2157748): {scan} file list completed in 219s, found 60 files... Dec 20 04:26:58 ispc maldet(2157748): {scan} found clamav binary at /usr/bin/clamscan, using clamav scanner engine... Dec 20 04:26:58 ispc maldet(2157748): {scan} scan of (60 files) in progress... Dec 20 04:27:00 ispc maldet(2157748): {scan} scan completed on : files 60, malware hits 0, cleaned hits 0, time 221s Dec 20 04:27:00 ispc maldet(2157748): {scan} scan report saved, to view run: maldet --report 251220-0423.2157748