?
Jun 15 16:18:26 host cxs[49250]: ['/home2/timesofnews/public_html/awstatsicons'] - Symlink to [icon] Jun 15 16:18:26 host cxs[49248]: ['/home2/timesofnews/public_html/icon/mime/conf.png'] - Symlink to [notavailable.png] Jun 15 16:18:26 host cxs[49248]: ['/home2/timesofnews/public_html/icon/mime/csv.png'] - Symlink to [notavailable.png] Jun 15 16:18:26 host cxs[49248]: ['/home2/timesofnews/public_html/icon/mime/document.png'] - Symlink to [notavailable.png] Jun 15 16:18:26 host cxs[49248]: ['/home2/timesofnews/public_html/icon/mime/dtd.png'] - Symlink to [notavailable.png] Jun 15 16:18:26 host cxs[49248]: ['/home2/timesofnews/public_html/icon/mime/flv.png'] - Symlink to [notavailable.png] Jun 15 16:18:26 host cxs[49248]: ['/home2/timesofnews/public_html/icon/mime/fon.png'] - Symlink to [notavailable.png] Jun 15 16:18:26 host cxs[49248]: ['/home2/timesofnews/public_html/icon/mime/package.png'] - Symlink to [notavailable.png] Jun 15 16:18:26 host cxs[49248]: ['/home2/timesofnews/public_html/icon/mime/runtime.png'] - Symlink to [notavailable.png] Jun 15 16:18:26 host cxs[49248]: ['/home2/timesofnews/public_html/icon/mime/swf.png'] - Symlink to [notavailable.png] Jun 15 16:18:26 host cxs[49248]: ['/home2/timesofnews/public_html/icon/mime/vbs.png'] - Symlink to [notavailable.png] Jun 15 16:18:26 host cxs[49248]: ['/home2/timesofnews/public_html/icon/mime/xsl.png'] - Symlink to [notavailable.png] Jun 15 17:01:53 host cxs[49250]: ['/home2/voucherspedia/public_html/plugins/editors/tinymce/field/index.php'] - Known exploit = [Fingerprint Match] [PHP WP Exploit [P1626]] Jun 15 17:01:54 host cxs[49248]: ['/home2/voucherspedia/public_html/modules/mod_footer/tmpl/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 15 17:01:54 host cxs[49249]: ['/home2/voucherspedia/public_html/libraries/vendor/paragonie/lib/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 15 17:07:59 host cxs[49249]: ['/home2/voucherspedia/public_html/storage/app/modules.php'] - Known exploit = [Fingerprint Match] [Hacker Sig Exploit [P1538]] Jun 15 17:08:12 host cxs[49250]: ['/home2/voucherspedia/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jun 15 17:08:16 host cxs[49249]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram9205.ph2p'] - Universal decode regex match = [universal decoder] Jun 15 17:08:16 host cxs[49249]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram9205.ph2p'] - Decode regex match = [decode regex: 6] Jun 15 17:08:16 host cxs[49249]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram6475.php'] - Universal decode regex match = [universal decoder] Jun 15 17:08:16 host cxs[49249]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram6475.php'] - Decode regex match = [decode regex: 6] Jun 15 17:08:16 host cxs[49250]: ['/home2/voucherspedia/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Jun 15 17:08:16 host cxs[49249]: ['/home2/voucherspedia/public_html/unknown_files/admin.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 15 17:08:16 host cxs[49249]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram6415.php'] - Universal decode regex match = [universal decoder] Jun 15 17:08:16 host cxs[49249]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram6415.php'] - Decode regex match = [decode regex: 6] Jun 15 17:08:16 host cxs[49249]: ['/home2/voucherspedia/public_html/unknown_files/2index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit [P1733]] Jun 15 17:08:19 host cxs[49248]: ['/home2/voucherspedia/public_html/vendor/bin/akismet.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit] Jun 15 17:08:24 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/anons79.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit [P0179]] Jun 15 17:08:24 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/pages.php'] - Known exploit = [Fingerprint Match] [PHP Exploit [P1926]] Jun 15 17:09:12 host cxs[49250]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram1126.php'] - Universal decode regex match = [universal decoder] Jun 15 17:09:12 host cxs[49250]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram1126.php'] - Decode regex match = [decode regex: 6] Jun 15 17:09:12 host cxs[49250]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram699.php'] - Universal decode regex match = [universal decoder] Jun 15 17:09:12 host cxs[49250]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram699.php'] - Decode regex match = [decode regex: 6] Jun 15 17:09:12 host cxs[49250]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram6878.php'] - Universal decode regex match = [universal decoder] Jun 15 17:09:12 host cxs[49250]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram6878.php'] - Decode regex match = [decode regex: 6] Jun 15 17:09:12 host cxs[49250]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram3827.php'] - Universal decode regex match = [universal decoder] Jun 15 17:09:12 host cxs[49250]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram3827.php'] - Decode regex match = [decode regex: 6] Jun 15 17:09:12 host cxs[49250]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram5212.php'] - Universal decode regex match = [universal decoder] Jun 15 17:09:13 host cxs[49250]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram5212.php'] - Decode regex match = [decode regex: 6] Jun 15 17:09:13 host cxs[49250]: ['/home2/voucherspedia/public_html/unknown_files/anons79.php2'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit [P0179]] Jun 15 17:36:38 host cxs[49248]: ['/home2/letsbuy24x7/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jun 15 17:36:45 host cxs[49250]: ['/home2/letsbuy24x7/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 15 17:37:01 host cxs[49248]: ['/home2/letsbuy24x7/public_html/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'] - Suspicious file type [application/x-c] Jun 15 18:37:35 host cxs[49249]: ['/home2/sheinglobal/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.1.5 < v4.1.9] Jun 15 18:38:04 host cxs[49250]: ['/home2/sheinglobal/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.4.2 < v5.7.2] Jun 15 20:39:38 host cxs[49250]: ['/home2/aushein/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.1.5 < v4.1.9] Jun 15 20:39:59 host cxs[49249]: ['/home2/aushein/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.4.2 < v5.7.2] Jun 15 20:58:52 host cxs[49250]: ['/home2/cashein/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.1.5 < v4.1.9] Jun 15 20:59:17 host cxs[49248]: ['/home2/cashein/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.4.2 < v5.7.2] Jun 15 22:04:02 host cxs[49248]: ['/home2/esshein/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.4.2 < v5.7.2] Jun 15 22:04:26 host cxs[49248]: ['/home2/esshein/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.1.5 < v4.1.9] Jun 15 22:04:31 host cxs[49248]: ['/home2/esshein/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.1.5 < v4.1.9] Jun 15 22:04:36 host cxs[49248]: ['/home2/esshein/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.4.2 < v5.7.2] Jun 15 22:09:19 host cxs[49249]: ['/home2/frshein/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.1.5 < v4.1.9] Jun 15 22:09:41 host cxs[49248]: ['/home2/frshein/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.4.2 < v5.7.2] Jun 15 22:13:34 host cxs[49250]: ['/home2/howtoplayrummy/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.1.7 < v4.1.9] Jun 15 22:13:46 host cxs[49249]: ['/home2/howtoplayrummy/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.1.7 < v4.1.9] Jun 15 22:18:14 host cxs[49248]: ['/home2/mxshein/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.1.5 < v4.1.9] Jun 15 22:18:33 host cxs[49249]: ['/home2/mxshein/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.4.2 < v5.7.2] Jun 15 22:21:04 host cxs[49248]: ['/home2/nlshein/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.1.5 < v4.1.9] Jun 15 22:21:21 host cxs[49250]: ['/home2/nlshein/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.4.2 < v5.7.2] Jun 15 22:24:01 host cxs[49248]: ['/home2/ukshein/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.1.5 < v4.1.9] Jun 15 22:24:26 host cxs[49249]: ['/home2/ukshein/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.4.2 < v5.7.2] Jun 15 22:26:21 host cxs[49249]: ['/home2/usshein/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.1.5 < v4.1.9] Jun 15 22:26:40 host cxs[49250]: ['/home2/usshein/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.4.6 < v5.7.2] Jun 15 22:31:29 host cxs[49248]: ['/home2/voucherspedia/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.1.1 < v4.1.9] Jun 15 22:31:30 host cxs[49248]: ['/home2/voucherspedia/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v2.5.16 < v3.1.4] Jun 15 22:31:47 host cxs[49248]: ['/home2/voucherspedia/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Marketer Edition v2.1.8 < v3.2.1] Jun 15 22:31:55 host cxs[49248]: ['/home2/voucherspedia/public_html/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v3.1.5 < v4.0.11] Jun 15 22:31:56 host cxs[49248]: ['/home2/voucherspedia/public_html/wp-content/plugins/redux-framework/redux-framework.php'] - Script version check [OLD] [Redux Framework v3.6.15 < v4.1.24] Jun 15 22:32:24 host cxs[49248]: ['/home2/voucherspedia/public_html/wp-content/plugins/wordpress-seo/wp-seo.php'] - Script version check [OLD] [Yoast SEO v10.0 < v15.9.2] Jun 15 22:32:54 host cxs[49248]: ['/home2/voucherspedia/public_html/wp-content/plugins/wp-user-avatar/wp-user-avatar.php'] - Script version check [OLD] [WP User Avatar v2.2.0 < v2.2.15] Jun 15 22:33:02 host cxs[49249]: ['/home2/voucherspedia/public_html/wp-content/plugins/wp-user-avatar/wp-user-avatar.php'] - Script version check [OLD] [WP User Avatar v2.2.0 < v2.2.15] Jun 15 22:33:26 host cxs[49250]: ['/home2/voucherspedia/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.0.3 < v5.7.2] Jun 15 22:46:44 host cxs[49248]: ['/home2/voucherspedia/public_html/libraries/vendor/paragonie/lib/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 15 22:46:44 host cxs[49248]: ['/home2/voucherspedia/public_html/modules/mod_footer/tmpl/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 15 22:46:44 host cxs[49248]: ['/home2/voucherspedia/public_html/plugins/editors/tinymce/field/index.php'] - Known exploit = [Fingerprint Match] [PHP WP Exploit [P1626]] Jun 15 22:46:54 host cxs[49249]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram6475.php'] - Universal decode regex match = [universal decoder] Jun 15 22:46:54 host cxs[49249]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram6475.php'] - Decode regex match = [decode regex: 6] Jun 15 22:46:54 host cxs[49249]: ['/home2/voucherspedia/public_html/unknown_files/2index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit [P1733]] Jun 15 22:46:55 host cxs[49250]: ['/home2/voucherspedia/public_html/unknown_files/anons79.php2'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit [P0179]] Jun 15 22:46:55 host cxs[49250]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram6415.php'] - Decode regex match = [decode regex: 6] Jun 15 22:46:55 host cxs[49249]: ['/home2/voucherspedia/public_html/unknown_files/anons79.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit [P0179]] Jun 15 22:46:55 host cxs[49249]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram9205.ph2p'] - Universal decode regex match = [universal decoder] Jun 15 22:46:55 host cxs[49249]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram9205.ph2p'] - Decode regex match = [decode regex: 6] Jun 15 22:46:55 host cxs[49250]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram1126.php'] - Universal decode regex match = [universal decoder] Jun 15 22:46:55 host cxs[49250]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram1126.php'] - Decode regex match = [decode regex: 6] Jun 15 22:46:55 host cxs[49250]: ['/home2/voucherspedia/public_html/vendor/bin/akismet.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit] Jun 15 22:46:55 host cxs[49250]: ['/home2/voucherspedia/public_html/unknown_files/pages.php'] - Known exploit = [Fingerprint Match] [PHP Exploit [P1926]] Jun 15 22:47:34 host cxs[49248]: ['/home2/voucherspedia/public_html/storage/app/modules.php'] - Known exploit = [Fingerprint Match] [Hacker Sig Exploit [P1538]] Jun 15 22:47:40 host cxs[49250]: ['/home2/voucherspedia/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Jun 15 22:47:54 host cxs[49249]: ['/home2/voucherspedia/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jun 15 22:48:12 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/2index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit [P1733]] Jun 15 22:48:12 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/admin.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 15 22:48:12 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/anons79.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit [P0179]] Jun 15 22:48:12 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/anons79.php2'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit [P0179]] Jun 15 22:48:12 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram1126.php'] - Universal decode regex match = [universal decoder] Jun 15 22:48:12 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram1126.php'] - Decode regex match = [decode regex: 6] Jun 15 22:48:12 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram3827.php'] - Universal decode regex match = [universal decoder] Jun 15 22:48:12 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram3827.php'] - Decode regex match = [decode regex: 6] Jun 15 22:48:12 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram5212.php'] - Universal decode regex match = [universal decoder] Jun 15 22:48:12 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram5212.php'] - Decode regex match = [decode regex: 6] Jun 15 22:48:13 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram6415.php'] - Universal decode regex match = [universal decoder] Jun 15 22:48:13 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram6415.php'] - Decode regex match = [decode regex: 6] Jun 15 22:48:13 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram6475.php'] - Universal decode regex match = [universal decoder] Jun 15 22:48:13 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram6475.php'] - Decode regex match = [decode regex: 6] Jun 15 22:48:13 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram6878.php'] - Universal decode regex match = [universal decoder] Jun 15 22:48:13 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram6878.php'] - Decode regex match = [decode regex: 6] Jun 15 22:48:13 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram699.php'] - Universal decode regex match = [universal decoder] Jun 15 22:48:13 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram699.php'] - Decode regex match = [decode regex: 6] Jun 15 22:48:13 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram9205.ph2p'] - Universal decode regex match = [universal decoder] Jun 15 22:48:13 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram9205.ph2p'] - Decode regex match = [decode regex: 6] Jun 15 22:48:13 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/pages.php'] - Known exploit = [Fingerprint Match] [PHP Exploit [P1926]] Jun 15 22:48:14 host cxs[49248]: ['/home2/voucherspedia/public_html/vendor/bin/akismet.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit] Jun 15 22:49:26 host cxs[49248]: ['/home2/voucherspedia/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jun 15 22:49:29 host cxs[49248]: ['/home2/voucherspedia/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Jun 15 22:49:43 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram5212.php'] - Universal decode regex match = [universal decoder] Jun 15 22:49:43 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram5212.php'] - Decode regex match = [decode regex: 6] Jun 15 22:49:43 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/admin.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 15 22:49:43 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram699.php'] - Universal decode regex match = [universal decoder] Jun 15 22:49:43 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram699.php'] - Decode regex match = [decode regex: 6] Jun 15 22:49:43 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram6878.php'] - Universal decode regex match = [universal decoder] Jun 15 22:49:43 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram6878.php'] - Decode regex match = [decode regex: 6] Jun 15 22:49:44 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram3827.php'] - Universal decode regex match = [universal decoder] Jun 15 22:49:44 host cxs[49248]: ['/home2/voucherspedia/public_html/unknown_files/masadepansuram3827.php'] - Decode regex match = [decode regex: 6] Jun 15 23:11:54 host cxs[49249]: ['/home2/gocouponsgo/public_html/libraries/vendor/paragonie/lib/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 15 23:11:57 host cxs[49250]: ['/home2/gocouponsgo/public_html/modules/mod_footer/tmpl/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 15 23:11:57 host cxs[49250]: ['/home2/gocouponsgo/public_html/libraries/vendor/paragonie/lib/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 15 23:18:04 host cxs[49248]: ['/home2/gocouponsgo/public_html/vendor/bin/akismet.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit] Jun 15 23:18:09 host cxs[49250]: ['/home2/gocouponsgo/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jun 15 23:18:12 host cxs[49250]: ['/home2/gocouponsgo/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Jun 15 23:18:32 host cxs[49249]: ['/home2/gocouponsgo/public_html/storage/app/modules.php'] - Known exploit = [Fingerprint Match] [Hacker Sig Exploit [P1538]] Jun 25 07:41:31 host cxs[6008]: ['/home2/voucherspedia/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Jun 25 07:41:33 host cxs[6007]: ['/home2/voucherspedia/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jun 25 07:41:36 host cxs[6009]: ['/home2/voucherspedia/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Jun 25 07:41:39 host cxs[6008]: ['/home2/voucherspedia/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jun 25 07:44:09 host cxs[6008]: ['/home2/voucherspedia/public_html/old_backup/storage/app/modules.php'] - Known exploit = [Fingerprint Match] [Hacker Sig Exploit [P1538]] Jun 25 07:44:09 host cxs[6007]: ['/home2/voucherspedia/public_html/old_backup/vendor/bin/akismet.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit] Jun 25 07:44:21 host cxs[6007]: ['/home2/voucherspedia/public_html/old_backup/vendor/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jun 25 07:44:23 host cxs[6007]: ['/home2/voucherspedia/public_html/old_backup/vendor/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Jun 25 07:44:36 host cxs[6007]: ['/home2/voucherspedia/public_html/old_backup/libraries/vendor/paragonie/lib/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 25 07:44:50 host cxs[6009]: ['/home2/voucherspedia/public_html/old_backup/modules/mod_footer/tmpl/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 25 07:44:50 host cxs[6009]: ['/home2/voucherspedia/public_html/old_backup/plugins/editors/tinymce/field/index.php'] - Known exploit = [Fingerprint Match] [PHP WP Exploit [P1626]] Jun 25 08:40:19 host cxs[6007]: ['/home2/voucherspedia/public_html/libraries/vendor/paragonie/lib/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 25 08:40:19 host cxs[6009]: ['/home2/voucherspedia/public_html/modules/mod_footer/tmpl/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 25 08:40:22 host cxs[6007]: ['/home2/voucherspedia/public_html/plugins/editors/tinymce/field/index.php'] - Known exploit = [Fingerprint Match] [PHP WP Exploit [P1626]] Jun 25 08:42:28 host cxs[6008]: ['/home2/voucherspedia/public_html/vendor/bin/akismet.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit] Jun 25 08:42:28 host cxs[6009]: ['/home2/voucherspedia/public_html/storage/app/modules.php'] - Known exploit = [Fingerprint Match] [Hacker Sig Exploit [P1538]] Jun 25 08:44:19 host cxs[6008]: ['/home2/voucherspedia/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jun 25 08:44:21 host cxs[6008]: ['/home2/voucherspedia/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Jun 25 10:14:20 host cxs[6008]: ['/home2/voucherspedia/public_html/backup1/vendor/bin/akismet.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit] Jun 25 10:14:21 host cxs[6009]: ['/home2/voucherspedia/public_html/backup1/modules/mod_footer/tmpl/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 25 10:15:06 host cxs[6007]: ['/home2/voucherspedia/public_html/storage/app/modules.php'] - Known exploit = [Fingerprint Match] [Hacker Sig Exploit [P1538]] Jun 25 10:15:08 host cxs[6009]: ['/home2/voucherspedia/public_html/plugins/editors/tinymce/field/index.php'] - Known exploit = [Fingerprint Match] [PHP WP Exploit [P1626]] Jun 25 10:15:08 host cxs[6009]: ['/home2/voucherspedia/public_html/modules/mod_footer/tmpl/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 25 10:15:11 host cxs[6007]: ['/home2/voucherspedia/public_html/vendor/bin/akismet.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit] Jun 25 10:15:30 host cxs[6008]: ['/home2/voucherspedia/public_html/backup1/vendor/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jun 25 10:15:32 host cxs[6008]: ['/home2/voucherspedia/public_html/backup1/vendor/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Jun 25 10:15:45 host cxs[6008]: ['/home2/voucherspedia/public_html/backup1/plugins/editors/tinymce/field/index.php'] - Known exploit = [Fingerprint Match] [PHP WP Exploit [P1626]] Jun 25 10:15:45 host cxs[6008]: ['/home2/voucherspedia/public_html/backup1/storage/app/modules.php'] - Known exploit = [Fingerprint Match] [Hacker Sig Exploit [P1538]] Jun 25 10:15:51 host cxs[6008]: ['/home2/voucherspedia/public_html/backup1/libraries/vendor/paragonie/lib/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 25 10:15:53 host cxs[6008]: ['/home2/voucherspedia/public_html/libraries/vendor/paragonie/lib/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jun 25 10:16:26 host cxs[6007]: ['/home2/voucherspedia/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jun 25 10:16:30 host cxs[6007]: ['/home2/voucherspedia/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Jun 25 10:27:11 host cxs[6007]: ['/home2/voucherspedia/public_html/vendor_old/bin/akismet.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit] Jun 25 10:28:08 host cxs[6007]: ['/home2/voucherspedia/public_html/vendor_old/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jun 25 10:28:10 host cxs[6007]: ['/home2/voucherspedia/public_html/vendor_old/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Jun 25 10:29:24 host cxs[6007]: ['/home2/voucherspedia/public_html/vendor/bin/akismet.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit] Jun 25 10:29:38 host cxs[6007]: ['/home2/voucherspedia/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jun 25 10:29:40 host cxs[6007]: ['/home2/voucherspedia/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Jun 25 11:53:56 host cxs[6009]: ['/home2/gocouponsgo/public_html/vendor1/bin/akismet.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit] Jun 25 11:54:53 host cxs[6009]: ['/home2/gocouponsgo/public_html/vendor1/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jun 25 11:54:55 host cxs[6009]: ['/home2/gocouponsgo/public_html/vendor1/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Jun 25 12:05:52 host cxs[6009]: ['/home2/gocouponsgo/public_html/vendor/bin/akismet.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit] Jun 25 12:06:09 host cxs[6009]: ['/home2/gocouponsgo/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jun 25 12:06:11 host cxs[6009]: ['/home2/gocouponsgo/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Jul 14 21:01:14 host cxs[77403]: ['/home2/letsbuy24x7/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.3.1 < v5.4.1] Jul 14 21:01:26 host cxs[77403]: ['/home2/letsbuy24x7/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jul 14 21:02:18 host cxs[77403]: ['/home2/letsbuy24x7/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Sep 9 09:03:23 host cxs[88521]: ['/home2/letsbuy24x7/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.7.3 < v5.8] Sep 28 08:40:05 host cxs[87677]: ['/home2/letsbuy24x7/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Sep 28 08:41:04 host cxs[87677]: ['/home2/letsbuy24x7/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Oct 8 06:24:56 host cxs[194690]: ['/home2/letsbuy24x7/public_html/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'] - Suspicious file type [application/x-c] Nov 10 19:58:06 host cxs[250543]: ['/home2/letsbuy24x7/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.7.4 < v5.8.1] Dec 22 14:35:19 host cxs[151699]: ['/home2/travelflake/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.5.3] Dec 22 14:35:21 host cxs[151699]: ['/home2/travelflake/public_html/wp-content/plugins/duplicator/duplicator-main.php'] - Universal decode regex match = [universal decoder] Dec 22 14:35:28 host cxs[151699]: ['/home2/travelflake/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.5.1] Dec 22 14:35:51 host cxs[151699]: ['/home2/travelflake/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.13] Dec 22 14:35:54 host cxs[151699]: ['/home2/travelflake/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.5.1] Dec 22 14:36:43 host cxs[151699]: ['/home2/travelflake/public_html/wp-content/plugins/w3-total-cache/CdnEngine_Ftp.php'] - Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/] Dec 22 14:36:50 host cxs[151699]: ['/home2/travelflake/public_html/wp-content/plugins/w3-total-cache/w3-total-cache.php'] - Script version check [OLD] [W3 Total Cache v2.1.9 < v2.2.1] Dec 22 14:37:50 host cxs[151699]: ['/home2/travelflake/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.0 < v6.0.0] Dec 22 14:38:34 host cxs[151699]: ['/home2/travelflake/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 22 14:38:57 host cxs[151699]: ['/home2/travelflake/public_html/wp-content/plugins/wordpress-seo/wp-seo.php'] - Script version check [OLD] [Yoast SEO v17.6 < v17.8] Dec 22 14:39:24 host cxs[151699]: ['/home2/travelflake/public_html/wp-content/plugins/yith-woocommerce-wishlist/init.php'] - Script version check [OLD] [YITH WooCommerce Wishlist v3.3.0 < v3.4.0] Dec 24 01:05:56 host cxs[151697]: ['/home2/travelflake/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.5.3] Dec 24 01:05:58 host cxs[151697]: ['/home2/travelflake/public_html/wp-content/plugins/duplicator/duplicator-main.php'] - Universal decode regex match = [universal decoder] Dec 24 01:06:04 host cxs[151697]: ['/home2/travelflake/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.5.1] Dec 24 01:06:26 host cxs[151697]: ['/home2/travelflake/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.13] Dec 24 01:06:29 host cxs[151697]: ['/home2/travelflake/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.5.1] Dec 24 01:07:18 host cxs[151697]: ['/home2/travelflake/public_html/wp-content/plugins/w3-total-cache/CdnEngine_Ftp.php'] - Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/] Dec 24 01:07:25 host cxs[151697]: ['/home2/travelflake/public_html/wp-content/plugins/w3-total-cache/w3-total-cache.php'] - Script version check [OLD] [W3 Total Cache v2.1.9 < v2.2.1] Dec 24 01:08:24 host cxs[151697]: ['/home2/travelflake/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.0 < v6.0.0] Dec 24 01:09:09 host cxs[151697]: ['/home2/travelflake/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 24 01:09:32 host cxs[151697]: ['/home2/travelflake/public_html/wp-content/plugins/wordpress-seo/wp-seo.php'] - Script version check [OLD] [Yoast SEO v17.6 < v17.8] Dec 24 01:09:58 host cxs[151697]: ['/home2/travelflake/public_html/wp-content/plugins/yith-woocommerce-wishlist/init.php'] - Script version check [OLD] [YITH WooCommerce Wishlist v3.3.0 < v3.4.0] Jan 6 16:02:44 host cxs[126853]: ['/home2/letsbuy24x7/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.7.5 < v5.8.2] Jan 31 15:41:29 host cxs[23837]: ['/home2/shopperzlove/public_html/libraries/vendor/paragonie/lib/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jan 31 15:41:33 host cxs[23838]: ['/home2/shopperzlove/public_html/plugins/editors/tinymce/field/index.php'] - Known exploit = [Fingerprint Match] [PHP WP Exploit [P1626]] Jan 31 15:43:19 host cxs[23838]: ['/home2/shopperzlove/public_html/backup1/libraries/vendor/paragonie/lib/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jan 31 15:43:19 host cxs[23838]: ['/home2/shopperzlove/public_html/backup1/modules/mod_footer/tmpl/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jan 31 15:43:19 host cxs[23838]: ['/home2/shopperzlove/public_html/backup1/plugins/editors/tinymce/field/index.php'] - Known exploit = [Fingerprint Match] [PHP WP Exploit [P1626]] Jan 31 15:43:22 host cxs[23836]: ['/home2/shopperzlove/public_html/vendor/bin/akismet.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit] Jan 31 15:43:28 host cxs[23837]: ['/home2/shopperzlove/public_html/old_backup/libraries/vendor/paragonie/lib/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jan 31 15:43:28 host cxs[23837]: ['/home2/shopperzlove/public_html/old_backup/modules/mod_footer/tmpl/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jan 31 15:43:28 host cxs[23837]: ['/home2/shopperzlove/public_html/old_backup/plugins/editors/tinymce/field/index.php'] - Known exploit = [Fingerprint Match] [PHP WP Exploit [P1626]] Jan 31 15:43:29 host cxs[23838]: ['/home2/shopperzlove/public_html/backup1/storage/app/modules.php'] - Known exploit = [Fingerprint Match] [Hacker Sig Exploit [P1538]] Jan 31 15:43:34 host cxs[23838]: ['/home2/shopperzlove/public_html/backup1/vendor/bin/akismet.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit] Jan 31 15:43:36 host cxs[23837]: ['/home2/shopperzlove/public_html/old_backup/storage/app/modules.php'] - Known exploit = [Fingerprint Match] [Hacker Sig Exploit [P1538]] Jan 31 15:43:50 host cxs[23837]: ['/home2/shopperzlove/public_html/old_backup/vendor/bin/akismet.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit] Jan 31 15:44:00 host cxs[23837]: ['/home2/shopperzlove/public_html/old_backup/vendor/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jan 31 15:44:02 host cxs[23837]: ['/home2/shopperzlove/public_html/old_backup/vendor/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Jan 31 15:44:14 host cxs[23837]: ['/home2/shopperzlove/public_html/vendor_old/bin/akismet.php'] - Known exploit = [Fingerprint Match] [PHP Shell Exploit] Jan 31 15:44:32 host cxs[23836]: ['/home2/shopperzlove/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jan 31 15:44:34 host cxs[23836]: ['/home2/shopperzlove/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Jan 31 15:44:44 host cxs[23838]: ['/home2/shopperzlove/public_html/backup1/vendor/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jan 31 15:44:46 host cxs[23838]: ['/home2/shopperzlove/public_html/backup1/vendor/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Jan 31 15:44:48 host cxs[23836]: ['/home2/shopperzlove/public_html/modules/mod_footer/tmpl/index.php'] - Known exploit = [Fingerprint Match] [PHP Exploit] Jan 31 15:45:00 host cxs[23838]: ['/home2/shopperzlove/public_html/storage/app/modules.php'] - Known exploit = [Fingerprint Match] [Hacker Sig Exploit [P1538]] Jan 31 15:45:21 host cxs[23837]: ['/home2/shopperzlove/public_html/vendor_old/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Jan 31 15:45:23 host cxs[23837]: ['/home2/shopperzlove/public_html/vendor_old/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Mar 10 20:01:02 host cxs[13662]: ['/home2/letsbuy24x7/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.7.2 < v6.1.1] Mar 10 20:01:16 host cxs[13662]: ['/home2/letsbuy24x7/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Mar 10 20:02:12 host cxs[13662]: ['/home2/letsbuy24x7/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 10 21:14:59 host cxs[13661]: ['/home2/travelflake/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v6.1.1] Mar 10 21:15:06 host cxs[13661]: ['/home2/travelflake/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Mar 10 21:15:41 host cxs[13661]: ['/home2/travelflake/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 11 05:27:31 host cxs[13663]: ['/home2/letsbuy24x7/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.7.6 < v5.9.1] Mar 11 09:13:59 host cxs[13663]: ['/home2/travelflake/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.8.4 < v5.9.1] Aug 30 20:57:32 host cxs[53006]: ['/home2/letsbuy24x7/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.7.7 < v6.0.1] Aug 30 22:13:48 host cxs[53007]: ['/home2/travelflake/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.8.5 < v6.0.1] Oct 17 19:01:21 host cxs[80086]: ['/home2/letsbuy24x7/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.7.8 < v6.0.2] Oct 17 19:20:57 host cxs[80088]: ['/home2/travelflake/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.8.6 < v6.0.2] Dec 12 04:22:25 host cxs[113750]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Dec 12 04:22:27 host cxs[113750]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.6.4] Dec 12 04:22:29 host cxs[113750]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.8.1] Dec 12 04:22:41 host cxs[113748]: ['/home2/travelflake/public_html/travelbackup/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.8.6 < v6.1.1] Dec 12 04:23:03 host cxs[113750]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.15] Dec 12 04:23:04 host cxs[113750]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.11] Dec 12 04:23:08 host cxs[113750]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.8] Dec 12 04:23:08 host cxs[113750]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Dec 12 04:23:11 host cxs[113750]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.7] Dec 12 04:23:21 host cxs[113750]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.9] Dec 12 04:23:23 host cxs[113749]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/maxbuttons/maxbuttons.php'] - Script version check [OLD] [MaxButtons v9.2 < v9.4.1] Dec 12 04:23:26 host cxs[113748]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Dec 12 04:24:08 host cxs[113750]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/w3-total-cache/CdnEngine_Ftp.php'] - Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/] Dec 12 04:24:20 host cxs[113750]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/w3-total-cache/w3-total-cache.php'] - Script version check [OLD] [W3 Total Cache v2.1.9 < v2.2.7] Dec 12 04:24:45 host cxs[113748]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.0] Dec 12 04:24:58 host cxs[113748]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 12 04:25:46 host cxs[113750]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Dec 12 04:25:59 host cxs[113748]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 12 04:26:22 host cxs[113750]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/wordpress-seo/wp-seo.php'] - Script version check [OLD] [Yoast SEO v17.6 < v19.10] Dec 12 04:26:54 host cxs[113750]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/wp-job-manager/wp-job-manager.php'] - Script version check [OLD] [WP Job Manager v1.35.2 < v1.38.1] Dec 12 04:27:04 host cxs[113750]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/yith-woocommerce-wishlist/init.php'] - Script version check [OLD] [YITH WooCommerce Wishlist v3.3.0 < v3.14.0] Dec 12 04:27:55 host cxs[113750]: ['/home2/travelflake/public_html/travelbackup/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.2.1 < v5.0.1] Dec 13 03:53:41 host cxs[113749]: ['/home2/flaketravel/public_html/travelbackup/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Dec 13 03:53:43 host cxs[113749]: ['/home2/flaketravel/public_html/travelbackup/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.2.1 < v5.0.1] Dec 13 03:53:44 host cxs[113749]: ['/home2/flaketravel/public_html/travelbackup/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.6.4] Dec 13 03:53:46 host cxs[113749]: ['/home2/flaketravel/public_html/travelbackup/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.8.1] Dec 13 03:53:55 host cxs[113748]: ['/home2/flaketravel/public_html/travelbackup/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.2.1 < v5.0.1] Dec 13 03:54:13 host cxs[113750]: ['/home2/flaketravel/public_html/travelbackup/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.8.6 < v6.1.1] Dec 13 03:54:22 host cxs[113749]: ['/home2/flaketravel/public_html/travelbackup/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.15] Dec 13 03:54:23 host cxs[113749]: ['/home2/flaketravel/public_html/travelbackup/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.11] Dec 13 03:54:26 host cxs[113749]: ['/home2/flaketravel/public_html/travelbackup/wp-content/plugins/maxbuttons/maxbuttons.php'] - Script version check [OLD] [MaxButtons v9.2 < v9.4.1] Dec 13 03:54:35 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Dec 13 03:54:36 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.2.1 < v5.0.1] Dec 13 03:54:37 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.6.4] Dec 13 03:54:38 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.8.1] Dec 13 03:54:50 host cxs[113748]: ['/home2/flaketravel/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.8.6 < v6.1.1] Dec 13 03:54:53 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.15] Dec 13 03:54:53 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.11] Dec 13 03:54:55 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/maxbuttons/maxbuttons.php'] - Script version check [OLD] [MaxButtons v9.2 < v9.4.1] Dec 13 03:54:59 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.8] Dec 13 03:55:02 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Dec 13 03:55:05 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.7] Dec 13 03:55:15 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.9] Dec 13 03:56:45 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/w3-total-cache/CdnEngine_Ftp.php'] - Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/] Dec 13 03:56:59 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/w3-total-cache/w3-total-cache.php'] - Script version check [OLD] [W3 Total Cache v2.1.9 < v2.2.7] Dec 13 03:58:36 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.0] Dec 13 03:59:56 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 13 03:59:59 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Dec 13 04:00:38 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/wordpress-seo/wp-seo.php'] - Script version check [OLD] [Yoast SEO v17.6 < v19.10] Dec 13 04:01:19 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/wp-job-manager/wp-job-manager.php'] - Script version check [OLD] [WP Job Manager v1.35.2 < v1.38.1] Dec 13 04:01:31 host cxs[113750]: ['/home2/flaketravel/public_html/wp-content/plugins/yith-woocommerce-wishlist/init.php'] - Script version check [OLD] [YITH WooCommerce Wishlist v3.3.0 < v3.14.0] Dec 13 06:34:33 host cxs[113749]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Dec 13 06:34:42 host cxs[113748]: ['/home2/flaketravel/public_html/backup/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.8.6 < v6.1.1] Dec 13 06:34:59 host cxs[113748]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Dec 13 06:34:59 host cxs[113748]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.2.1 < v5.0.1] Dec 13 06:35:00 host cxs[113748]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.6.4] Dec 13 06:35:01 host cxs[113748]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.8.1] Dec 13 06:35:07 host cxs[113750]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.2.1 < v5.0.1] Dec 13 06:35:16 host cxs[113748]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.15] Dec 13 06:35:17 host cxs[113748]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.11] Dec 13 06:35:17 host cxs[113750]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.0] Dec 13 06:35:19 host cxs[113748]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/maxbuttons/maxbuttons.php'] - Script version check [OLD] [MaxButtons v9.2 < v9.4.1] Dec 13 06:35:21 host cxs[113748]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.8] Dec 13 06:35:23 host cxs[113748]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Dec 13 06:35:24 host cxs[113748]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.7] Dec 13 06:35:30 host cxs[113748]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.9] Dec 13 06:35:55 host cxs[113750]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 13 06:36:09 host cxs[113748]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/w3-total-cache/CdnEngine_Ftp.php'] - Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/] Dec 13 06:36:16 host cxs[113748]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/w3-total-cache/w3-total-cache.php'] - Script version check [OLD] [W3 Total Cache v2.1.9 < v2.2.7] Dec 13 06:37:18 host cxs[113748]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.0] Jan 10 03:55:13 host cxs[237312]: ['/home2/affonix/public_html/affonix.com/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v3.4.4 < v7.1.1] Jan 10 03:55:32 host cxs[237311]: ['/home2/affonix/public_html/affonix.com/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jan 10 03:55:53 host cxs[237312]: ['/home2/affonix/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.2.17 < v6.1.1] Jan 10 03:55:54 host cxs[237311]: ['/home2/affonix/public_html/affonix.com/wp-content/plugins/js_composer/locale'] - Suspected exploit file Jan 10 03:56:48 host cxs[237311]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/awscrt.c'] - Suspicious file type [application/x-c] Jan 10 03:56:48 host cxs[237311]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/crc.c'] - Suspicious file type [application/x-c] Jan 10 03:56:48 host cxs[237311]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/credentials.c'] - Suspicious file type [application/x-c] Jan 10 03:56:48 host cxs[237311]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/crt.c'] - Suspicious file type [application/x-c] Jan 10 03:56:48 host cxs[237311]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/event_loop.c'] - Suspicious file type [application/x-c] Jan 10 03:56:48 host cxs[237311]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/http.c'] - Suspicious file type [application/x-c] Jan 10 03:56:49 host cxs[237311]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/logging.c'] - Suspicious file type [application/x-c] Jan 10 03:56:49 host cxs[237311]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/php_util.c'] - Suspicious file type [application/x-c] Jan 10 03:56:49 host cxs[237311]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/signing.c'] - Suspicious file type [application/x-c] Jan 10 03:56:49 host cxs[237311]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/stream.c'] - Suspicious file type [application/x-c] Jan 10 03:58:08 host cxs[237311]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/pimple/pimple/ext/pimple/pimple.c'] - Suspicious file type [application/x-c] Jan 10 03:58:28 host cxs[237311]: ['/home2/affonix/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.0.3 < v5.7] Jan 10 03:59:20 host cxs[237311]: ['/home2/affonix/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v3.4.4 < v7.1.1] Jan 10 04:00:17 host cxs[237311]: ['/home2/affonix/public_html/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'] - Suspicious file type [application/x-c] Jan 10 04:38:20 host cxs[237312]: ['/home2/affonix/public_html/affonix_backup/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jan 10 04:38:26 host cxs[237313]: ['/home2/affonix/public_html/affonix_backup/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.2.17 < v6.1.1] Jan 10 04:38:32 host cxs[237312]: ['/home2/affonix/public_html/affonix_backup/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/awscrt.c'] - Suspicious file type [application/x-c] Jan 10 04:38:32 host cxs[237312]: ['/home2/affonix/public_html/affonix_backup/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/crc.c'] - Suspicious file type [application/x-c] Jan 10 04:38:32 host cxs[237312]: ['/home2/affonix/public_html/affonix_backup/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/credentials.c'] - Suspicious file type [application/x-c] Jan 10 04:38:32 host cxs[237312]: ['/home2/affonix/public_html/affonix_backup/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/crt.c'] - Suspicious file type [application/x-c] Jan 10 04:38:32 host cxs[237312]: ['/home2/affonix/public_html/affonix_backup/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/event_loop.c'] - Suspicious file type [application/x-c] Jan 10 04:38:32 host cxs[237312]: ['/home2/affonix/public_html/affonix_backup/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/http.c'] - Suspicious file type [application/x-c] Jan 10 04:38:32 host cxs[237312]: ['/home2/affonix/public_html/affonix_backup/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/logging.c'] - Suspicious file type [application/x-c] Jan 10 04:38:32 host cxs[237312]: ['/home2/affonix/public_html/affonix_backup/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/php_util.c'] - Suspicious file type [application/x-c] Jan 10 04:38:32 host cxs[237312]: ['/home2/affonix/public_html/affonix_backup/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/signing.c'] - Suspicious file type [application/x-c] Jan 10 04:38:32 host cxs[237312]: ['/home2/affonix/public_html/affonix_backup/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/stream.c'] - Suspicious file type [application/x-c] Jan 10 04:39:11 host cxs[237312]: ['/home2/affonix/public_html/affonix_backup/wp-content/plugins/backwpup/vendor/pimple/pimple/ext/pimple/pimple.c'] - Suspicious file type [application/x-c] Jan 10 04:39:21 host cxs[237312]: ['/home2/affonix/public_html/affonix_backup/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.0.3 < v5.7] Jan 10 04:39:47 host cxs[237312]: ['/home2/affonix/public_html/affonix_backup/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v3.4.4 < v7.1.1] Jan 10 04:40:19 host cxs[237312]: ['/home2/affonix/public_html/affonix_backup/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'] - Suspicious file type [application/x-c] Jan 12 23:15:22 host cxs[23779]: ['/home2/affonix/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jan 13 04:25:13 host cxs[23778]: ['/home2/affonix/public_html/affi.affonix.com/affi.affonix.com/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.6.4 < v5.7] Jan 13 04:25:58 host cxs[23778]: ['/home2/affonix/public_html/affi.affonix.com/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.6.4 < v5.7] Jan 16 00:18:50 host cxs[23778]: ['/home2/uttamweld/public_html/wp-content/plugins/backup/BackupGuard.php'] - Universal decode regex match = [universal decoder] Jan 16 00:18:57 host cxs[23778]: ['/home2/uttamweld/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.6.4 < v5.7] Jan 16 00:19:25 host cxs[23778]: ['/home2/uttamweld/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.6.8 < v5.6.14] Jan 16 04:43:13 host cxs[23779]: ['/home2/uttamweld/public_html/uttamweldingg liquify hosting/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.6.4 < v5.7] Jan 16 04:43:40 host cxs[23779]: ['/home2/uttamweld/public_html/uttamweldingg liquify hosting/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.6.8 < v5.6.14] Jan 17 06:01:20 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Jan 17 06:01:22 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.2.1 < v5.0.2] Jan 17 06:01:23 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7] Jan 17 06:01:26 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.9.0] Jan 17 06:01:51 host cxs[23779]: ['/home2/flaketravel/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.8.6 < v6.1.1] Jan 17 06:01:57 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.16] Jan 17 06:01:58 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.12] Jan 17 06:02:01 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/maxbuttons/maxbuttons.php'] - Script version check [OLD] [MaxButtons v9.2 < v9.5] Jan 17 06:02:05 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.14] Jan 17 06:02:08 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Jan 17 06:02:11 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Jan 17 06:02:22 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.12] Jan 17 06:03:43 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/w3-total-cache/CdnEngine_Ftp.php'] - Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/] Jan 17 06:03:55 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/w3-total-cache/w3-total-cache.php'] - Script version check [OLD] [W3 Total Cache v2.1.9 < v2.2.9] Jan 17 06:05:23 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Jan 17 06:06:41 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jan 17 06:06:43 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Jan 17 06:07:21 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/wordpress-seo/wp-seo.php'] - Script version check [OLD] [Yoast SEO v17.6 < v19.12] Jan 17 06:08:00 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/wp-job-manager/wp-job-manager.php'] - Script version check [OLD] [WP Job Manager v1.35.2 < v1.39.0] Jan 17 06:08:11 host cxs[23778]: ['/home2/flaketravel/public_html/wp-content/plugins/yith-woocommerce-wishlist/init.php'] - Script version check [OLD] [YITH WooCommerce Wishlist v3.3.0 < v3.15.0] Jan 18 00:11:01 host cxs[144009]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Jan 18 00:11:07 host cxs[144009]: ['/home2/flaketravel/public_html/backup/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jan 18 00:11:20 host cxs[144010]: ['/home2/flaketravel/public_html/backup/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.8.6 < v6.1.1] Jan 18 00:11:56 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Jan 18 00:11:56 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.2.1 < v5.0.2] Jan 18 00:11:57 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7] Jan 18 00:11:58 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.9.0] Jan 18 00:12:05 host cxs[144010]: ['/home2/flaketravel/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.8.6 < v6.1.1] Jan 18 00:12:12 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.16] Jan 18 00:12:13 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.12] Jan 18 00:12:15 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/maxbuttons/maxbuttons.php'] - Script version check [OLD] [MaxButtons v9.2 < v9.5] Jan 18 00:12:18 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.14] Jan 18 00:12:18 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Jan 18 00:12:19 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Jan 18 00:12:21 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Jan 18 00:12:26 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.12] Jan 18 00:13:02 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/w3-total-cache/CdnEngine_Ftp.php'] - Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/] Jan 18 00:13:09 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/w3-total-cache/w3-total-cache.php'] - Script version check [OLD] [W3 Total Cache v2.1.9 < v2.2.9] Jan 18 00:14:06 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Jan 18 00:14:41 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jan 18 00:14:42 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Jan 18 00:15:01 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/wordpress-seo/wp-seo.php'] - Script version check [OLD] [Yoast SEO v17.6 < v19.12] Jan 18 00:15:20 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/wp-job-manager/wp-job-manager.php'] - Script version check [OLD] [WP Job Manager v1.35.2 < v1.39.0] Jan 18 00:15:26 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/yith-woocommerce-wishlist/init.php'] - Script version check [OLD] [YITH WooCommerce Wishlist v3.3.0 < v3.15.0] Jan 18 00:20:21 host cxs[144009]: ['/home2/flaketravel/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.6.0 < v3.9.0] Jan 18 00:32:52 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Jan 18 00:32:52 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.2.1 < v5.0.2] Jan 18 00:32:53 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7] Jan 18 00:32:54 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.9.0] Jan 18 00:33:02 host cxs[144010]: ['/home2/flaketravel/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.8.6 < v6.1.1] Jan 18 00:33:09 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.16] Jan 18 00:33:09 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.12] Jan 18 00:33:11 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/maxbuttons/maxbuttons.php'] - Script version check [OLD] [MaxButtons v9.2 < v9.5] Jan 18 00:33:14 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.14] Jan 18 00:33:15 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Jan 18 00:33:16 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Jan 18 00:33:21 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.12] Jan 18 00:33:57 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/w3-total-cache/CdnEngine_Ftp.php'] - Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/] Jan 18 00:34:03 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/w3-total-cache/w3-total-cache.php'] - Script version check [OLD] [W3 Total Cache v2.1.9 < v2.2.9] Jan 18 00:34:59 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Jan 18 00:35:33 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jan 18 00:35:35 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Jan 18 00:35:53 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/wordpress-seo/wp-seo.php'] - Script version check [OLD] [Yoast SEO v17.6 < v19.12] Jan 18 00:36:13 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/wp-job-manager/wp-job-manager.php'] - Script version check [OLD] [WP Job Manager v1.35.2 < v1.39.0] Jan 18 00:36:20 host cxs[144008]: ['/home2/flaketravel/public_html/wp-content/plugins/yith-woocommerce-wishlist/init.php'] - Script version check [OLD] [YITH WooCommerce Wishlist v3.3.0 < v3.15.0] Jan 23 01:02:31 host cxs[144010]: ['/home2/affonix/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jan 23 07:26:23 host cxs[144009]: ['/home2/uttamweld/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.6.4 < v5.7] Jan 23 07:26:50 host cxs[144009]: ['/home2/uttamweld/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.6.8 < v5.6.14] Jan 23 23:17:24 host cxs[144009]: ['/home2/uttamweld/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.6.4 < v5.7] Jan 23 23:17:35 host cxs[144009]: ['/home2/uttamweld/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.6.8 < v5.6.14] Jan 23 23:28:14 host cxs[144009]: ['/home2/uttamweld/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.6.4 < v5.7] Jan 23 23:28:25 host cxs[144009]: ['/home2/uttamweld/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.6.8 < v5.6.14] Jan 25 03:51:13 host cxs[187112]: ['/home2/gosrushtiuser/public_html/backup/wp-content/plugins/Ultimate_VC_Addons/presets/Ultimate_Google_Maps.php'] - Universal decode regex match = [universal decoder] Jan 25 03:51:30 host cxs[187113]: ['/home2/gosrushtiuser/public_html/backup/wp-content/plugins/js_composer/locale'] - Suspected exploit file Jan 25 03:52:01 host cxs[187112]: ['/home2/gosrushtiuser/public_html/wp-content/plugins/disable-gutenberg/disable-gutenberg.php'] - Script version check [OLD] [Disable Gutenberg v2.7 < v2.8.1] Jan 25 04:12:12 host cxs[187113]: ['/home2/gosrushtiuser/public_html/backup/wp-content/plugins/Ultimate_VC_Addons/presets/Ultimate_Google_Maps.php'] - Universal decode regex match = [universal decoder] Jan 25 04:12:16 host cxs[187113]: ['/home2/gosrushtiuser/public_html/backup/wp-content/plugins/disable-gutenberg/disable-gutenberg.php'] - Script version check [OLD] [Disable Gutenberg v2.7 < v2.8.1] Jan 25 04:12:30 host cxs[187113]: ['/home2/gosrushtiuser/public_html/backup/wp-content/plugins/js_composer/locale'] - Suspected exploit file Jan 25 04:12:31 host cxs[187114]: ['/home2/gosrushtiuser/public_html/wp-content/plugins/Ultimate_VC_Addons/presets/Ultimate_Google_Maps.php'] - Universal decode regex match = [universal decoder] Jan 25 04:12:34 host cxs[187114]: ['/home2/gosrushtiuser/public_html/wp-content/plugins/disable-gutenberg/disable-gutenberg.php'] - Script version check [OLD] [Disable Gutenberg v2.7 < v2.8.1] Jan 25 04:46:47 host cxs[187112]: ['/home2/gosrushtiuser/public_html/backup/wp-content/plugins/disable-gutenberg/disable-gutenberg.php'] - Script version check [OLD] [Disable Gutenberg v2.7 < v2.8.1] Jan 27 00:35:56 host cxs[187114]: ['/home2/gosrushtiuser/public_html/wp-content/plugins-old/js_composer/locale'] - Suspected exploit file Jan 27 00:36:06 host cxs[187112]: ['/home2/gosrushtiuser/public_html/wp-content/plugins/disable-gutenberg/disable-gutenberg.php'] - Script version check [OLD] [Disable Gutenberg v2.7 < v2.8.1] Jan 30 02:14:36 host cxs[187112]: ['/home2/uttamweld/public_html/uttamweldingg liquify hosting after changes/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.6.4 < v5.7] Jan 30 02:14:45 host cxs[187112]: ['/home2/uttamweld/public_html/uttamweldingg liquify hosting after changes/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.6.8 < v5.6.14] Feb 14 08:33:23 host cxs[232938]: ['/home2/revupilot/public_html/revupilot.com/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Feb 14 08:45:49 host cxs[232939]: ['/home2/revupilot/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Feb 22 00:16:44 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Feb 22 00:16:46 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.2.1 < v5.0.2] Feb 22 00:16:48 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7] Feb 22 00:16:52 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.9.0] Feb 22 00:17:06 host cxs[105913]: ['/home2/flaketravel/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.8.6 < v6.1.1] Feb 22 00:17:39 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.16] Feb 22 00:17:40 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.12] Feb 22 00:17:45 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/maxbuttons/maxbuttons.php'] - Script version check [OLD] [MaxButtons v9.2 < v9.5] Feb 22 00:17:52 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.14] Feb 22 00:17:53 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Feb 22 00:17:57 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Feb 22 00:18:01 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Feb 22 00:18:14 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.12] Feb 22 00:19:56 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/w3-total-cache/CdnEngine_Ftp.php'] - Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/] Feb 22 00:20:13 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/w3-total-cache/w3-total-cache.php'] - Script version check [OLD] [W3 Total Cache v2.1.9 < v2.2.9] Feb 22 00:22:11 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Feb 22 00:23:44 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 22 00:23:48 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Feb 22 00:24:31 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/wordpress-seo/wp-seo.php'] - Script version check [OLD] [Yoast SEO v17.6 < v19.12] Feb 22 00:25:22 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/wp-job-manager/wp-job-manager.php'] - Script version check [OLD] [WP Job Manager v1.35.2 < v1.39.0] Feb 22 00:25:35 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/yith-woocommerce-wishlist/init.php'] - Script version check [OLD] [YITH WooCommerce Wishlist v3.3.0 < v3.15.0] Feb 22 05:59:24 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Feb 22 05:59:26 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.2.1 < v5.0.2] Feb 22 05:59:27 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7] Feb 22 05:59:30 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.9.0] Feb 22 05:59:46 host cxs[105914]: ['/home2/flaketravel/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.8.6 < v6.1.1] Feb 22 06:00:12 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.16] Feb 22 06:00:13 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.12] Feb 22 06:00:19 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/maxbuttons/maxbuttons.php'] - Script version check [OLD] [MaxButtons v9.2 < v9.5] Feb 22 06:00:26 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.14] Feb 22 06:00:31 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Feb 22 06:00:35 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Feb 22 06:00:48 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.12] Feb 22 06:02:31 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/w3-total-cache/CdnEngine_Ftp.php'] - Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/] Feb 22 06:02:48 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/w3-total-cache/w3-total-cache.php'] - Script version check [OLD] [W3 Total Cache v2.1.9 < v2.2.9] Feb 22 06:04:43 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Feb 22 06:06:18 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 22 06:06:22 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Feb 22 06:07:03 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/wordpress-seo/wp-seo.php'] - Script version check [OLD] [Yoast SEO v17.6 < v19.12] Feb 22 06:07:52 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/wp-job-manager/wp-job-manager.php'] - Script version check [OLD] [WP Job Manager v1.35.2 < v1.39.0] Feb 22 06:08:05 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/yith-woocommerce-wishlist/init.php'] - Script version check [OLD] [YITH WooCommerce Wishlist v3.3.0 < v3.15.0] Feb 22 07:14:46 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Feb 22 07:14:46 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v4.2.1 < v5.0.2] Feb 22 07:14:47 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7] Feb 22 07:14:49 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.9.0] Feb 22 07:15:10 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.16] Feb 22 07:15:10 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.12] Feb 22 07:15:13 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/maxbuttons/maxbuttons.php'] - Script version check [OLD] [MaxButtons v9.2 < v9.5] Feb 22 07:15:16 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.14] Feb 22 07:15:17 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Feb 22 07:15:18 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Feb 22 07:15:21 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Feb 22 07:15:28 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.12] Feb 22 07:16:17 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/w3-total-cache/CdnEngine_Ftp.php'] - Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/] Feb 22 07:16:26 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/w3-total-cache/w3-total-cache.php'] - Script version check [OLD] [W3 Total Cache v2.1.9 < v2.2.9] Feb 22 07:17:40 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Feb 22 07:18:27 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 22 07:18:29 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Feb 22 07:18:53 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/wordpress-seo/wp-seo.php'] - Script version check [OLD] [Yoast SEO v17.6 < v19.12] Feb 22 07:19:19 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/wp-job-manager/wp-job-manager.php'] - Script version check [OLD] [WP Job Manager v1.35.2 < v1.39.0] Feb 22 07:19:28 host cxs[105914]: ['/home2/flaketravel/public_html/wp-content/plugins/yith-woocommerce-wishlist/init.php'] - Script version check [OLD] [YITH WooCommerce Wishlist v3.3.0 < v3.15.0] Feb 23 09:32:20 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Feb 23 09:32:23 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7] Feb 23 09:32:25 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.9.0] Feb 23 09:32:35 host cxs[105914]: ['/home2/flaketravel/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.8.6 < v6.1.1] Feb 23 09:33:03 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.16] Feb 23 09:33:03 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.12] Feb 23 09:33:08 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/maxbuttons/maxbuttons.php'] - Script version check [OLD] [MaxButtons v9.2 < v9.5] Feb 23 09:33:15 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.14] Feb 23 09:33:20 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Feb 23 09:33:24 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Feb 23 09:33:37 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.12] Feb 23 09:35:14 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Feb 23 09:36:40 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 23 09:36:43 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Feb 23 09:37:22 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/wordpress-seo/wp-seo.php'] - Script version check [OLD] [Yoast SEO v17.6 < v19.12] Feb 23 09:38:05 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/wp-job-manager/wp-job-manager.php'] - Script version check [OLD] [WP Job Manager v1.35.2 < v1.39.0] Feb 23 09:38:18 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/yith-woocommerce-wishlist/init.php'] - Script version check [OLD] [YITH WooCommerce Wishlist v3.3.0 < v3.15.0] Feb 23 10:48:55 host cxs[105913]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Feb 23 10:49:03 host cxs[105913]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Feb 23 10:49:22 host cxs[105912]: ['/home2/flaketravel/public_html/backup_23_2_2023/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Feb 23 10:49:23 host cxs[105912]: ['/home2/flaketravel/public_html/backup_23_2_2023/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7] Feb 23 10:49:25 host cxs[105912]: ['/home2/flaketravel/public_html/backup_23_2_2023/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.9.0] Feb 23 10:49:40 host cxs[105913]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 23 10:49:43 host cxs[105912]: ['/home2/flaketravel/public_html/backup_23_2_2023/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.16] Feb 23 10:49:43 host cxs[105912]: ['/home2/flaketravel/public_html/backup_23_2_2023/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.12] Feb 23 10:49:50 host cxs[105912]: ['/home2/flaketravel/public_html/backup_23_2_2023/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.14] Feb 23 10:49:52 host cxs[105912]: ['/home2/flaketravel/public_html/backup_23_2_2023/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Feb 23 10:49:54 host cxs[105912]: ['/home2/flaketravel/public_html/backup_23_2_2023/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Feb 23 10:50:00 host cxs[105912]: ['/home2/flaketravel/public_html/backup_23_2_2023/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.12] Feb 23 10:50:18 host cxs[105912]: ['/home2/flaketravel/public_html/backup_23_2_2023/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Feb 23 10:51:05 host cxs[105912]: ['/home2/flaketravel/public_html/backup_23_2_2023/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 23 10:51:07 host cxs[105912]: ['/home2/flaketravel/public_html/backup_23_2_2023/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Feb 23 10:51:30 host cxs[105912]: ['/home2/flaketravel/public_html/backup_23_2_2023/wp-content/plugins/wp-job-manager/wp-job-manager.php'] - Script version check [OLD] [WP Job Manager v1.35.2 < v1.39.0] Feb 23 10:53:14 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Feb 23 10:53:15 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7] Feb 23 10:53:17 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.9.0] Feb 23 10:53:35 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.16] Feb 23 10:53:36 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.12] Feb 23 10:53:43 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.14] Feb 23 10:53:45 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Feb 23 10:53:47 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Feb 23 10:53:53 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.12] Feb 23 10:54:11 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Feb 23 10:55:00 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 23 10:55:02 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Feb 23 10:55:27 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/wp-job-manager/wp-job-manager.php'] - Script version check [OLD] [WP Job Manager v1.35.2 < v1.39.0] Feb 23 10:56:58 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Feb 23 10:57:11 host cxs[105912]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Feb 23 23:07:31 host cxs[165710]: ['/home2/flaketravel/public_html/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Feb 23 23:07:35 host cxs[165710]: ['/home2/flaketravel/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7] Feb 23 23:07:38 host cxs[165710]: ['/home2/flaketravel/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.9.0] Feb 23 23:08:23 host cxs[165710]: ['/home2/flaketravel/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.16] Feb 23 23:08:24 host cxs[165710]: ['/home2/flaketravel/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.12] Feb 23 23:08:36 host cxs[165710]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.14] Feb 23 23:08:37 host cxs[165710]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Feb 23 23:08:40 host cxs[165710]: ['/home2/flaketravel/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Feb 23 23:08:44 host cxs[165710]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Feb 23 23:08:59 host cxs[165710]: ['/home2/flaketravel/public_html/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.12] Feb 23 23:09:46 host cxs[165710]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Feb 23 23:11:22 host cxs[165710]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 23 23:11:25 host cxs[165710]: ['/home2/flaketravel/public_html/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Feb 23 23:12:09 host cxs[165710]: ['/home2/flaketravel/public_html/wp-content/plugins/wp-job-manager/wp-job-manager.php'] - Script version check [OLD] [WP Job Manager v1.35.2 < v1.39.0] Feb 24 00:31:26 host cxs[165710]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Feb 24 00:36:11 host cxs[165711]: ['/home2/flaketravel/public_html/wp-content/plugins.bc/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Feb 24 00:36:58 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/pluginsbc/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Feb 24 00:37:10 host cxs[165711]: ['/home2/flaketravel/public_html/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Feb 24 00:37:10 host cxs[165711]: ['/home2/flaketravel/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7] Feb 24 00:37:12 host cxs[165711]: ['/home2/flaketravel/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.9.0] Feb 24 00:37:30 host cxs[165711]: ['/home2/flaketravel/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.16] Feb 24 00:37:30 host cxs[165711]: ['/home2/flaketravel/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.12] Feb 24 00:37:36 host cxs[165711]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.14] Feb 24 00:37:37 host cxs[165711]: ['/home2/flaketravel/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Feb 24 00:37:39 host cxs[165711]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Feb 24 00:37:46 host cxs[165711]: ['/home2/flaketravel/public_html/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.12] Feb 24 00:38:02 host cxs[165711]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Feb 24 00:38:49 host cxs[165711]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 24 00:38:51 host cxs[165711]: ['/home2/flaketravel/public_html/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Feb 24 00:39:13 host cxs[165711]: ['/home2/flaketravel/public_html/wp-content/plugins/wp-job-manager/wp-job-manager.php'] - Script version check [OLD] [WP Job Manager v1.35.2 < v1.39.0] Feb 24 01:06:27 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Feb 24 01:06:28 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7] Feb 24 01:06:29 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.9.0] Feb 24 01:06:46 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.16] Feb 24 01:06:47 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.12] Feb 24 01:06:53 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.14] Feb 24 01:06:54 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Feb 24 01:06:57 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Feb 24 01:07:03 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.12] Feb 24 01:07:19 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Feb 24 01:08:05 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 24 01:08:06 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Feb 24 01:09:11 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Feb 24 01:09:12 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7] Feb 24 01:09:13 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.9.0] Feb 24 01:09:31 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.16] Feb 24 01:09:31 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.12] Feb 24 01:09:37 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.14] Feb 24 01:09:39 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Feb 24 01:09:41 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Feb 24 01:09:48 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.12] Feb 24 01:10:05 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Feb 24 01:10:48 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 24 01:10:50 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Feb 24 01:11:12 host cxs[165712]: ['/home2/flaketravel/public_html/wp-content/plugins/wp-job-manager/wp-job-manager.php'] - Script version check [OLD] [WP Job Manager v1.35.2 < v1.39.0] Mar 3 08:51:43 host cxs[26982]: ['/home2/flaketravel/public_html/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Mar 3 08:51:46 host cxs[26982]: ['/home2/flaketravel/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7] Mar 3 08:51:48 host cxs[26982]: ['/home2/flaketravel/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.9.0] Mar 3 08:52:31 host cxs[26982]: ['/home2/flaketravel/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.16] Mar 3 08:52:32 host cxs[26982]: ['/home2/flaketravel/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.12] Mar 3 08:52:43 host cxs[26982]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.14] Mar 3 08:52:44 host cxs[26982]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Mar 3 08:52:47 host cxs[26982]: ['/home2/flaketravel/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Mar 3 08:52:51 host cxs[26982]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Mar 3 08:53:04 host cxs[26982]: ['/home2/flaketravel/public_html/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.12] Mar 3 08:53:43 host cxs[26982]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Mar 3 08:55:06 host cxs[26982]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 3 08:55:09 host cxs[26982]: ['/home2/flaketravel/public_html/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Mar 3 08:55:54 host cxs[26982]: ['/home2/flaketravel/public_html/wp-content/plugins/wp-job-manager/wp-job-manager.php'] - Script version check [OLD] [WP Job Manager v1.35.2 < v1.39.0] Mar 7 01:09:49 host cxs[106183]: ['/home2/flaketravel/public_html/backup_7_3_2023/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Mar 7 01:09:51 host cxs[106183]: ['/home2/flaketravel/public_html/backup_7_3_2023/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7] Mar 7 01:09:54 host cxs[106183]: ['/home2/flaketravel/public_html/backup_7_3_2023/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.9.0] Mar 7 01:10:08 host cxs[106184]: ['/home2/flaketravel/public_html/backup_7_3_2023/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Mar 7 01:10:10 host cxs[106184]: ['/home2/flaketravel/public_html/backup_7_3_2023/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Mar 7 01:10:22 host cxs[106184]: ['/home2/flaketravel/public_html/backup_7_3_2023/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Mar 7 01:10:27 host cxs[106183]: ['/home2/flaketravel/public_html/backup_7_3_2023/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.16] Mar 7 01:10:28 host cxs[106183]: ['/home2/flaketravel/public_html/backup_7_3_2023/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.12] Mar 7 01:10:32 host cxs[106183]: ['/home2/flaketravel/public_html/backup_7_3_2023/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.14] Mar 7 01:10:33 host cxs[106183]: ['/home2/flaketravel/public_html/backup_7_3_2023/wp-content/plugins/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Mar 7 01:10:36 host cxs[106183]: ['/home2/flaketravel/public_html/backup_7_3_2023/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Mar 7 01:10:38 host cxs[106183]: ['/home2/flaketravel/public_html/backup_7_3_2023/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Mar 7 01:10:48 host cxs[106183]: ['/home2/flaketravel/public_html/backup_7_3_2023/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.12] Mar 7 01:11:01 host cxs[106183]: ['/home2/flaketravel/public_html/backup_7_3_2023/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Mar 7 01:11:01 host cxs[106183]: ['/home2/flaketravel/public_html/backup_7_3_2023/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Mar 7 01:11:22 host cxs[106184]: ['/home2/flaketravel/public_html/backup_7_3_2023/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 7 01:11:40 host cxs[106183]: ['/home2/flaketravel/public_html/backup_7_3_2023/wp-content/plugins/wp-job-manager/wp-job-manager.php'] - Script version check [OLD] [WP Job Manager v1.35.2 < v1.39.0] Mar 14 06:28:35 host cxs[167614]: ['/home2/revupilot/public_html/backup_14_3_2022_final/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Mar 14 06:30:41 host cxs[167613]: ['/home2/revupilot/public_html/backup_14_3_2022_final/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Mar 17 06:20:15 host cxs[84292]: ['/home2/flaketravel/public_html/wp-content/plugins.deactivate/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Mar 17 06:21:46 host cxs[84294]: ['/home2/flaketravel/public_html/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.5] Mar 17 06:21:47 host cxs[84294]: ['/home2/flaketravel/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7] Mar 17 06:21:49 host cxs[84294]: ['/home2/flaketravel/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.9.0] Mar 17 06:22:06 host cxs[84294]: ['/home2/flaketravel/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.16] Mar 17 06:22:07 host cxs[84294]: ['/home2/flaketravel/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.8.12] Mar 17 06:22:13 host cxs[84294]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.14] Mar 17 06:22:13 host cxs[84294]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Mar 17 06:22:14 host cxs[84294]: ['/home2/flaketravel/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Mar 17 06:22:17 host cxs[84294]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.2.8] Mar 17 06:22:23 host cxs[84294]: ['/home2/flaketravel/public_html/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v6.0.12] Mar 17 06:22:41 host cxs[84294]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.1.1] Mar 17 06:23:50 host cxs[84294]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 17 06:23:53 host cxs[84294]: ['/home2/flaketravel/public_html/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Mar 17 06:24:32 host cxs[84294]: ['/home2/flaketravel/public_html/wp-content/plugins/wp-job-manager/wp-job-manager.php'] - Script version check [OLD] [WP Job Manager v1.35.2 < v1.39.0] Mar 17 12:42:29 host cxs[84292]: ['/home2/uttamweld/public_html/wp-content/plugins.bak/js_composer/locale'] - Suspected exploit file Mar 17 12:42:31 host cxs[84294]: ['/home2/uttamweld/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.6.4 < v5.7] Mar 17 12:42:37 host cxs[84292]: ['/home2/uttamweld/public_html/wp-content/plugins.bak/ultimate-product-catalogue/lib/PHPSpreadsheet/vendor/phpoffice/phpspreadsheet/src/PhpSpreadsheet/Calculation/locale'] - Suspected exploit file Mar 17 12:42:50 host cxs[84294]: ['/home2/uttamweld/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.6.8 < v5.6.14] Apr 10 00:07:58 host cxs[96060]: ['/home2/revupilot/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] May 1 00:04:16 host cxs[27821]: ['/home2/revupilot/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] May 16 20:58:44 host cxs[17327]: ['/home2/letsbuy24x7/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.7.9 < v6.2] May 16 22:14:16 host cxs[17326]: ['/home2/flaketravel/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.1.2 < v6.2] May 16 23:28:09 host cxs[17328]: ['/home2/affonix/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.2.18 < v6.2] May 16 23:30:06 host cxs[17326]: ['/home2/affonix/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.2.18 < v6.2] May 18 12:12:29 host cxs[17328]: ['/home2/uttamweld/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.1.2 < v6.2.1] May 20 07:21:27 host cxs[17327]: ['/home2/uttamweld/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.1.3 < v6.2.2] May 20 10:13:59 host cxs[17326]: ['/home2/flaketravel/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.1.3 < v6.2.2] May 23 01:44:48 host cxs[240829]: ['/home2/revupilot/public_html/wp-content/plugins/weglot/src/actions/admin/class-admin-enqueue-weglot.php'] - Universal decode regex match = [universal decoder] May 25 00:16:38 host cxs[240831]: ['/home2/revupilot/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Jun 15 09:56:08 host cxs[200729]: ['/home2/revupilot/public_html/backup 15 6 2023/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.7.1 < v5.7.6] Jun 15 09:57:17 host cxs[200730]: ['/home2/revupilot/public_html/backup 15 6 2023/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Jun 16 01:54:02 host cxs[200728]: ['/home2/couponrovers/public_html/new-db.php.php'] - Regular expression match = [Adminer - Compact database management] Jun 16 01:54:35 host cxs[200728]: ['/home2/couponrovers/public_html/new-db.php'] - Regular expression match = [Adminer - Compact database management] Jun 19 00:15:27 host cxs[200728]: ['/home2/revupilot/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Jul 6 08:47:52 host cxs[53871]: ['/home2/revupilot/public_html/6 7 2023/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.7.1 < v5.7.6] Jul 6 08:50:38 host cxs[53871]: ['/home2/revupilot/public_html/6 7 2023/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Jul 13 02:00:06 host cxs[205856]: ['/home2/revupilot/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Jul 13 02:52:06 host cxs[205858]: ['/home2/affonix/public_html/wp-content/plugins/wordfence/wordfence.php'] - Script version check [OLD] [Wordfence Security v7.9.0 < v7.9.2] Jul 14 00:40:19 host cxs[213482]: ['/home2/prime786enews/public_html/wp-content/plugins/bunyad-amp/src/Admin/OptionsMenu.php'] - Universal decode regex match = [universal decoder] Jul 21 00:48:53 host cxs[52361]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jul 21 00:50:16 host cxs[52361]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jul 24 13:29:50 host cxs[52362]: ['/home2/couponrovers/public_html/new-db.php'] - Regular expression match = [Adminer - Compact database management] Jul 25 05:07:56 host cxs[52360]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jul 25 05:09:19 host cxs[52360]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jul 25 05:11:13 host cxs[52362]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jul 28 07:12:37 host cxs[254250]: ['/home2/couponrovers/public_html/adminer-4.8.1-mysql.php'] - Regular expression match = [Adminer - Compact database management] Jul 28 07:13:13 host cxs[254250]: ['/home2/couponrovers/public_html/adminer.php'] - Regular expression match = [Adminer - Compact database management] Aug 1 04:55:28 host cxs[110417]: ['/home2/affonix/public_html/affonix_backup/wp-content/plugins/js_composer/locale'] - Suspected exploit file Aug 1 04:56:11 host cxs[110417]: ['/home2/affonix/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.2.17 < v6.2.2] Aug 1 04:56:38 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/akismet/akismet.php'] - Script version check [OLD] [Akismet Anti-Spam v5.0.2 < v5.1] Aug 1 04:56:40 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/all-in-one-seo-pack/all_in_one_seo_pack.php'] - Script version check [OLD] [All in One SEO v4.2.8 < v4.3.7] Aug 1 04:56:49 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Aug 1 04:57:14 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/awscrt.c'] - Suspicious file type [application/x-c] Aug 1 04:57:15 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/crc.c'] - Suspicious file type [application/x-c] Aug 1 04:57:15 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/credentials.c'] - Suspicious file type [application/x-c] Aug 1 04:57:15 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/crt.c'] - Suspicious file type [application/x-c] Aug 1 04:57:15 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/event_loop.c'] - Suspicious file type [application/x-c] Aug 1 04:57:15 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/http.c'] - Suspicious file type [application/x-c] Aug 1 04:57:15 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/logging.c'] - Suspicious file type [application/x-c] Aug 1 04:57:15 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/php_util.c'] - Suspicious file type [application/x-c] Aug 1 04:57:15 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/signing.c'] - Suspicious file type [application/x-c] Aug 1 04:57:15 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/aws/aws-crt-php/ext/stream.c'] - Suspicious file type [application/x-c] Aug 1 04:58:30 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/backwpup/vendor/pimple/pimple/ext/pimple/pimple.c'] - Suspicious file type [application/x-c] Aug 1 04:58:51 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.0.3 < v5.7.6] Aug 1 04:58:53 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/google-analytics-for-wordpress/googleanalytics.php'] - Script version check [OLD] [Google Analytics for WordPress by MonsterInsights v8.11.0 < v8.14.1] Aug 1 04:59:16 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/optinmonster/optin-monster-wp-api.php'] - Script version check [OLD] [OptinMonster v2.11.1 < v2.13.2] Aug 1 04:59:53 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v3.4.4 < v7.7.0] Aug 1 05:00:30 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/wordfence/wordfence.php'] - Script version check [OLD] [Wordfence Security v7.8.2 < v7.9.2] Aug 1 05:01:00 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'] - Suspicious file type [application/x-c] Aug 1 05:01:12 host cxs[110417]: ['/home2/affonix/public_html/wp-content/plugins/wp-mail-smtp/wp_mail_smtp.php'] - Script version check [OLD] [WP Mail SMTP v3.6.1 < v3.8.0] Aug 1 11:04:46 host cxs[110419]: ['/home2/affonix/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.2.18 < v6.2.2] Aug 1 11:11:50 host cxs[110418]: ['/home2/affonix/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.2.18 < v6.2.2] Aug 1 11:12:48 host cxs[110418]: ['/home2/affonix/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.2.18 < v6.2.2] Aug 1 12:05:50 host cxs[110417]: ['/home2/stayreviewed/public_html/public_html/domains/aaryam.in/awstats/icon'] - Symlink to [/usr/local/awstats/wwwroot/icon] Aug 1 12:05:50 host cxs[110417]: ['/home2/stayreviewed/public_html/public_html/domains/aaryam.in/awstats/lang'] - Symlink to [/usr/local/awstats/wwwroot/cgi-bin/lang] Aug 1 12:05:50 host cxs[110417]: ['/home2/stayreviewed/public_html/public_html/domains/aaryam.in/awstats/lib'] - Symlink to [/usr/local/awstats/wwwroot/cgi-bin/lib] Aug 1 12:05:50 host cxs[110417]: ['/home2/stayreviewed/public_html/public_html/domains/aaryam.in/awstats/plugins'] - Symlink to [/usr/local/awstats/wwwroot/cgi-bin/plugins] Aug 1 12:05:57 host cxs[110417]: ['/home2/stayreviewed/public_html/public_html/domains/swadeshi.aaryam.in/public_html/app/storage/framework/cache/data/f3'] - Suspected exploit file Aug 1 12:06:15 host cxs[110418]: ['/home2/stayreviewed/public_html/domains/aaryam.in/awstats/icon'] - Symlink to [/usr/local/awstats/wwwroot/icon] Aug 1 12:06:15 host cxs[110418]: ['/home2/stayreviewed/public_html/domains/aaryam.in/awstats/lang'] - Symlink to [/usr/local/awstats/wwwroot/cgi-bin/lang] Aug 1 12:06:15 host cxs[110418]: ['/home2/stayreviewed/public_html/domains/aaryam.in/awstats/lib'] - Symlink to [/usr/local/awstats/wwwroot/cgi-bin/lib] Aug 1 12:06:15 host cxs[110418]: ['/home2/stayreviewed/public_html/domains/aaryam.in/awstats/plugins'] - Symlink to [/usr/local/awstats/wwwroot/cgi-bin/plugins] Aug 1 12:06:16 host cxs[110418]: ['/home2/stayreviewed/public_html/domains/aaryam.in/awstats/book/icon'] - Symlink to [/usr/local/awstats/wwwroot/icon] Aug 1 12:06:16 host cxs[110418]: ['/home2/stayreviewed/public_html/domains/aaryam.in/awstats/book/lang'] - Symlink to [/usr/local/awstats/wwwroot/cgi-bin/lang] Aug 1 12:06:16 host cxs[110418]: ['/home2/stayreviewed/public_html/domains/aaryam.in/awstats/book/lib'] - Symlink to [/usr/local/awstats/wwwroot/cgi-bin/lib] Aug 1 12:06:16 host cxs[110418]: ['/home2/stayreviewed/public_html/domains/aaryam.in/awstats/book/plugins'] - Symlink to [/usr/local/awstats/wwwroot/cgi-bin/plugins] Aug 1 12:06:18 host cxs[110418]: ['/home2/stayreviewed/public_html/domains/aaryam.in/awstats/swadeshi/icon'] - Symlink to [/usr/local/awstats/wwwroot/icon] Aug 1 12:06:18 host cxs[110418]: ['/home2/stayreviewed/public_html/domains/aaryam.in/awstats/swadeshi/lang'] - Symlink to [/usr/local/awstats/wwwroot/cgi-bin/lang] Aug 1 12:06:18 host cxs[110418]: ['/home2/stayreviewed/public_html/domains/aaryam.in/awstats/swadeshi/lib'] - Symlink to [/usr/local/awstats/wwwroot/cgi-bin/lib] Aug 1 12:06:18 host cxs[110418]: ['/home2/stayreviewed/public_html/domains/aaryam.in/awstats/swadeshi/plugins'] - Symlink to [/usr/local/awstats/wwwroot/cgi-bin/plugins] Aug 1 12:06:20 host cxs[110418]: ['/home2/stayreviewed/public_html/domains/aaryam.in/awstats/tms/icon'] - Symlink to [/usr/local/awstats/wwwroot/icon] Aug 1 12:06:20 host cxs[110418]: ['/home2/stayreviewed/public_html/domains/aaryam.in/awstats/tms/lang'] - Symlink to [/usr/local/awstats/wwwroot/cgi-bin/lang] Aug 1 12:06:20 host cxs[110418]: ['/home2/stayreviewed/public_html/domains/aaryam.in/awstats/tms/lib'] - Symlink to [/usr/local/awstats/wwwroot/cgi-bin/lib] Aug 1 12:06:20 host cxs[110418]: ['/home2/stayreviewed/public_html/domains/aaryam.in/awstats/tms/plugins'] - Symlink to [/usr/local/awstats/wwwroot/cgi-bin/plugins] Aug 4 01:11:42 host cxs[110418]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Aug 7 00:18:07 host cxs[110419]: ['/home2/revupilot/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Aug 10 02:09:07 host cxs[51932]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Aug 10 02:10:16 host cxs[51932]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Aug 10 02:10:35 host cxs[51932]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Aug 10 02:13:44 host cxs[51930]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Aug 10 02:14:24 host cxs[51930]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Aug 10 02:14:37 host cxs[51930]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Aug 17 05:02:49 host cxs[202397]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Aug 17 05:04:05 host cxs[202397]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Aug 17 05:04:25 host cxs[202397]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Aug 18 01:17:38 host cxs[202397]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Aug 18 01:21:54 host cxs[202398]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Aug 18 01:22:33 host cxs[202398]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Aug 18 01:22:48 host cxs[202398]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Aug 23 02:31:23 host cxs[92266]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Aug 23 02:31:41 host cxs[92266]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Aug 23 14:29:51 host cxs[92265]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Aug 23 16:59:49 host cxs[92264]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Aug 28 00:16:59 host cxs[92266]: ['/home2/revupilot/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Sep 11 01:55:54 host cxs[63682]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Sep 11 01:57:02 host cxs[63680]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Sep 11 01:58:15 host cxs[63680]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Sep 11 01:58:35 host cxs[63680]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Sep 11 02:04:54 host cxs[63681]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Sep 11 02:05:35 host cxs[63681]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Sep 11 02:05:49 host cxs[63681]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Sep 11 02:16:42 host cxs[63681]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Sep 12 23:40:14 host cxs[62954]: ['/home2/revupilot/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Sep 15 08:39:41 host cxs[62954]: ['/home2/affonix/tms.affonix.com/adminer-4.8.1.php'] - Regular expression match = [Adminer - Compact database management] Sep 15 08:39:42 host cxs[62954]: ['/home2/affonix/tms.affonix.com/adminer-4.8.1.php'] - (decoded file [depth: 0]) Regular expression match = [Adminer - Compact database management] Sep 15 08:41:26 host cxs[62956]: ['/home2/affonix/tms.affonix.com/adminer.php'] - Regular expression match = [Adminer - Compact database management] Sep 15 08:41:26 host cxs[62956]: ['/home2/affonix/tms.affonix.com/adminer.php'] - (decoded file [depth: 0]) Regular expression match = [Adminer - Compact database management] Sep 19 02:46:35 host cxs[54253]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Sep 19 02:48:03 host cxs[54253]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Sep 19 02:49:13 host cxs[54253]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Sep 19 02:49:31 host cxs[54253]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Sep 19 02:53:46 host cxs[54253]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Sep 19 02:54:56 host cxs[54253]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Sep 19 02:55:15 host cxs[54253]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Sep 19 03:02:10 host cxs[54253]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Sep 26 00:31:54 host cxs[243909]: ['/home2/revupilot/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Sep 26 06:22:16 host cxs[243910]: ['/home2/flaketravel/public_html/old/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.6] Sep 26 06:22:17 host cxs[243909]: ['/home2/flaketravel/public_html/old/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.1.3 < v6.3.1] Sep 26 06:22:19 host cxs[243910]: ['/home2/flaketravel/public_html/old/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7.6] Sep 26 06:22:22 host cxs[243910]: ['/home2/flaketravel/public_html/old/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.13.2] Sep 26 06:23:07 host cxs[243910]: ['/home2/flaketravel/public_html/old/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.19] Sep 26 06:23:08 host cxs[243910]: ['/home2/flaketravel/public_html/old/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.9.4] Sep 26 06:23:21 host cxs[243910]: ['/home2/flaketravel/public_html/old/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.18] Sep 26 06:23:22 host cxs[243910]: ['/home2/flaketravel/public_html/old/wp-content/plugins/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Sep 26 06:23:25 host cxs[243910]: ['/home2/flaketravel/public_html/old/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Sep 26 06:23:28 host cxs[243910]: ['/home2/flaketravel/public_html/old/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.4.2] Sep 26 06:23:29 host cxs[243909]: ['/home2/flaketravel/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.1.1 < v6.3.1] Sep 26 06:23:41 host cxs[243910]: ['/home2/flaketravel/public_html/old/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v7.0.1] Sep 26 06:23:52 host cxs[243909]: ['/home2/flaketravel/public_html/wp-content/plugins/add-to-any/add-to-any.php'] - Script version check [OLD] [AddToAny Share Buttons v1.8.2 < v1.8.6] Sep 26 06:23:53 host cxs[243909]: ['/home2/flaketravel/public_html/wp-content/plugins/classic-editor/classic-editor.php'] - Script version check [OLD] [Classic Editor v1.6.2 < v1.6.3] Sep 26 06:23:53 host cxs[243909]: ['/home2/flaketravel/public_html/wp-content/plugins/contact-form-7/wp-contact-form-7.php'] - Script version check [OLD] [Contact Form 7 v5.5.2 < v5.7.6] Sep 26 06:23:55 host cxs[243909]: ['/home2/flaketravel/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.4.8 < v3.13.2] Sep 26 06:24:12 host cxs[243909]: ['/home2/flaketravel/public_html/wp-content/plugins/google-language-translator/google-language-translator.php'] - Script version check [OLD] [Google Language Translator v6.0.12 < v6.0.19] Sep 26 06:24:12 host cxs[243909]: ['/home2/flaketravel/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.8.6 < v4.9.4] Sep 26 06:24:18 host cxs[243910]: ['/home2/flaketravel/public_html/old/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.7.0] Sep 26 06:24:19 host cxs[243909]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/meta-box.php'] - Script version check [OLD] [Meta Box v5.4.8 < v5.6.18] Sep 26 06:24:20 host cxs[243909]: ['/home2/flaketravel/public_html/wp-content/plugins/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Sep 26 06:24:21 host cxs[243909]: ['/home2/flaketravel/public_html/wp-content/plugins/one-click-demo-import/one-click-demo-import.php'] - Script version check [OLD] [One Click Demo Import v3.0.2 < v3.1.2] Sep 26 06:24:23 host cxs[243909]: ['/home2/flaketravel/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.4.2] Sep 26 06:24:30 host cxs[243909]: ['/home2/flaketravel/public_html/wp-content/plugins/really-simple-ssl/rlrsssl-really-simple-ssl.php'] - Script version check [OLD] [Really Simple SSL v5.2.1 < v7.0.1] Sep 26 06:24:35 host cxs[243910]: ['/home2/flaketravel/public_html/old/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Sep 26 06:24:50 host cxs[243909]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v5.9.1 < v7.7.0] Sep 26 06:24:59 host cxs[243909]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Sep 26 06:25:38 host cxs[243909]: ['/home2/flaketravel/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Sep 26 06:25:38 host cxs[243910]: ['/home2/flaketravel/public_html/old/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Sep 26 06:25:40 host cxs[243909]: ['/home2/flaketravel/public_html/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Sep 26 06:25:40 host cxs[243910]: ['/home2/flaketravel/public_html/old/wp-content/plugins/woosidebars/woosidebars.php'] - Script version check [OLD] [WooSidebars v1.4.5 < v1.4.6] Sep 26 06:25:41 host cxs[243909]: ['/home2/flaketravel/public_html/wp-content/plugins/wordpress-seo/wp-seo.php'] - Script version check [OLD] [Yoast SEO v20.1 < v20.7] Sep 26 06:25:41 host cxs[243910]: ['/home2/flaketravel/public_html/old/wp-content/plugins/wordpress-seo/wp-seo.php'] - Script version check [OLD] [Yoast SEO v20.1 < v20.7] Oct 3 00:48:05 host cxs[214937]: ['/home2/revupilot/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Oct 3 05:46:25 host cxs[214938]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Oct 3 06:07:47 host cxs[214939]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Oct 3 15:41:10 host cxs[214938]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Oct 3 16:59:40 host cxs[214938]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Oct 3 16:59:54 host cxs[214939]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Oct 9 17:00:45 host cxs[11624]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Oct 10 02:31:34 host cxs[11624]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Oct 12 19:23:01 host cxs[37515]: ['/home2/uttamweld/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.1.4 < v6.3.1] Oct 12 20:57:37 host cxs[37517]: ['/home2/letsbuy24x7/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.7.10 < v6.3.1] Oct 12 22:13:59 host cxs[37516]: ['/home2/flaketravel/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.1.4 < v6.3.1] Oct 12 23:07:13 host cxs[37515]: ['/home2/affonix/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.2.19 < v6.3.1] Oct 13 00:49:49 host cxs[37515]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Oct 13 00:50:31 host cxs[37516]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Oct 13 00:51:43 host cxs[37516]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Oct 13 00:52:03 host cxs[37516]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Oct 16 02:31:08 host cxs[37517]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Oct 16 02:32:19 host cxs[37517]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Oct 16 02:32:39 host cxs[37517]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Oct 16 02:43:28 host cxs[37517]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Oct 26 02:05:35 host cxs[207828]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Oct 26 02:06:51 host cxs[207828]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Oct 26 02:07:11 host cxs[207828]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Oct 26 02:18:11 host cxs[207827]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Oct 26 02:18:48 host cxs[207827]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Oct 26 02:19:02 host cxs[207827]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Oct 30 02:26:01 host cxs[34097]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Oct 30 02:56:41 host cxs[34097]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Nov 1 05:38:29 host cxs[34097]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Nov 1 05:39:38 host cxs[34097]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Nov 1 05:39:57 host cxs[34097]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Nov 1 07:50:34 host cxs[34097]: ['/home2/revupilot/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Nov 2 03:12:42 host cxs[34098]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Nov 3 01:12:48 host cxs[34097]: ['/home2/aidigitas/public_html/wp-content/plugins/smart-slider/Nextend/SmartSlider3/Storage.php'] - Universal decode regex match = [universal decoder] Nov 3 06:25:42 host cxs[34098]: ['/home2/aidigitas/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Nov 6 00:41:42 host cxs[123664]: ['/home2/prime786enews/public_html/wp-content/plugins/bunyad-amp/src/Admin/OptionsMenu.php'] - Universal decode regex match = [universal decoder] Nov 6 01:02:54 host cxs[123664]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Nov 6 01:17:27 host cxs[123665]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Nov 13 11:00:07 host cxs[14846]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Nov 13 11:57:17 host cxs[14844]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Nov 14 05:52:51 host cxs[28031]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Nov 14 05:54:05 host cxs[28031]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Nov 14 05:54:25 host cxs[28031]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Nov 14 06:16:06 host cxs[28032]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Nov 14 06:17:05 host cxs[28031]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Nov 14 06:17:43 host cxs[28031]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Nov 14 06:17:57 host cxs[28031]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Nov 14 06:26:12 host cxs[28029]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Nov 14 06:26:51 host cxs[28029]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Nov 14 06:27:05 host cxs[28029]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Nov 14 06:34:21 host cxs[28029]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Nov 21 08:30:05 host cxs[1345]: ['/home2/kliktoverkoop/public_html/backup/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Nov 21 08:31:44 host cxs[1345]: ['/home2/kliktoverkoop/public_html/backup/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Nov 21 08:32:54 host cxs[1345]: ['/home2/kliktoverkoop/public_html/backup/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Nov 21 08:33:14 host cxs[1345]: ['/home2/kliktoverkoop/public_html/backup/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Nov 21 22:02:42 host cxs[1343]: ['/home2/starfiremedia/public_html/backup/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Nov 21 22:02:59 host cxs[1345]: ['/home2/starfiremedia/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Nov 21 22:03:00 host cxs[1343]: ['/home2/starfiremedia/public_html/backup/wp-content/plugins/unyson/framework/extensions/post-reaction/.git/objects/bd'] - Suspected exploit file Nov 21 22:03:02 host cxs[1343]: ['/home2/starfiremedia/public_html/backup/wp-content/plugins/unyson/framework/extensions/sign-form/.git/objects/c4'] - Suspected exploit file Nov 21 22:03:02 host cxs[1343]: ['/home2/starfiremedia/public_html/backup/wp-content/plugins/unyson/framework/extensions/stunning-header/.git/objects/bd'] - Suspected exploit file Nov 21 22:03:02 host cxs[1343]: ['/home2/starfiremedia/public_html/backup/wp-content/plugins/unyson/framework/extensions/stunning-header/.git/objects/f3'] - Suspected exploit file Nov 21 22:03:43 host cxs[1345]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Nov 21 22:04:22 host cxs[1345]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Nov 21 22:04:37 host cxs[1345]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Nov 24 06:11:03 host cxs[1345]: ['/home2/adfraudshield/public_html/wp-content/plugins/elementskit/libs/composer/vendor/build/vendor/src/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'] - Universal decode regex match = [universal decoder] Nov 24 06:11:03 host cxs[1345]: ['/home2/adfraudshield/public_html/wp-content/plugins/elementskit/libs/composer/vendor/build/vendor/src/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'] - Universal decode regex match = [universal decoder] Nov 24 06:11:31 host cxs[1344]: ['/home2/adfraudshield/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Nov 24 06:13:01 host cxs[1344]: ['/home2/adfraudshield/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Nov 24 06:13:23 host cxs[1344]: ['/home2/adfraudshield/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Nov 27 23:02:50 host cxs[147402]: ['/home2/revupilot/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Nov 27 23:04:13 host cxs[147402]: ['/home2/revupilot/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Nov 28 01:02:07 host cxs[147403]: ['/home2/aidigitas/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Nov 28 01:12:48 host cxs[147402]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Nov 28 01:13:16 host cxs[147403]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Nov 28 01:14:38 host cxs[147403]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Nov 28 01:14:59 host cxs[147403]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Nov 28 01:33:31 host cxs[147402]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Nov 28 01:34:11 host cxs[147403]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Nov 28 01:34:53 host cxs[147403]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Nov 28 01:35:06 host cxs[147403]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Nov 28 01:40:00 host cxs[147403]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Nov 28 01:40:41 host cxs[147403]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Nov 28 01:40:54 host cxs[147403]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Nov 28 01:46:25 host cxs[147401]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Nov 28 01:53:50 host cxs[147401]: ['/home2/starfiremedia/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Nov 28 01:54:16 host cxs[147401]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Nov 28 01:54:59 host cxs[147401]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Nov 28 01:55:13 host cxs[147401]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Nov 29 13:29:54 host cxs[147403]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Nov 29 16:04:31 host cxs[147403]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 3 23:18:23 host cxs[147402]: ['/home2/revupilot/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 3 23:18:23 host cxs[147403]: ['/home2/revupilot/public_html/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 4 04:19:00 host cxs[147401]: ['/home2/aidigitas/public_html/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 4 04:19:07 host cxs[147402]: ['/home2/aidigitas/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 4 04:26:09 host cxs[147403]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 4 04:32:18 host cxs[147401]: ['/home2/starfiremedia/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 12 02:10:54 host cxs[100267]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Dec 12 02:10:54 host cxs[100266]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Dec 12 02:26:07 host cxs[100266]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Dec 13 00:04:06 host cxs[100270]: ['/home2/revupilot/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Dec 14 13:32:48 host cxs[100270]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 14 15:59:36 host cxs[100266]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 18 01:52:54 host cxs[48074]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 18 01:52:54 host cxs[48075]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 18 01:54:08 host cxs[48074]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Dec 18 01:54:27 host cxs[48074]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 18 02:02:46 host cxs[48075]: ['/home2/shoutout360/public_html/wp-content/upgrade-temp-backup/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 18 02:02:46 host cxs[48076]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 18 02:03:30 host cxs[48076]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Dec 18 02:03:44 host cxs[48076]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 18 02:25:48 host cxs[48074]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 18 02:26:30 host cxs[48074]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Dec 18 02:26:45 host cxs[48074]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 18 02:30:09 host cxs[48074]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 18 02:30:48 host cxs[48074]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Dec 18 02:31:03 host cxs[48074]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 18 02:38:31 host cxs[48076]: ['/home2/adfraudshield/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 18 02:39:14 host cxs[48076]: ['/home2/adfraudshield/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Dec 18 02:39:29 host cxs[48076]: ['/home2/adfraudshield/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 18 11:00:07 host cxs[48074]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 18 13:39:00 host cxs[48076]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 26 00:21:04 host cxs[159116]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Dec 26 00:51:06 host cxs[159116]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jan 2 01:18:30 host cxs[51995]: ['/home2/adfraudshield/public_html/wp-content/plugins/elementskit/libs/composer/vendor/build/vendor/src/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'] - Universal decode regex match = [universal decoder] Jan 2 01:18:30 host cxs[51995]: ['/home2/adfraudshield/public_html/wp-content/plugins/elementskit/libs/composer/vendor/build/vendor/src/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'] - Universal decode regex match = [universal decoder] Jan 7 23:06:48 host cxs[259744]: ['/home2/revupilot/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Jan 8 00:50:45 host cxs[259743]: ['/home2/revupilot/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.5.3] Jan 12 04:26:26 host cxs[168940]: ['/home2/revupilot/public_html/wp-content/plugins/amp/src/Admin/OptionsMenu.php'] - Universal decode regex match = [universal decoder] Jan 15 01:18:16 host cxs[168940]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jan 15 01:30:07 host cxs[168942]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jan 18 23:57:31 host cxs[65241]: ['/home2/revupilot/public_html/backup-19-1-2024/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 18 23:57:44 host cxs[65242]: ['/home2/revupilot/public_html/backup-19-1-2024/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Jan 18 23:58:48 host cxs[65241]: ['/home2/revupilot/public_html/backup-19-1-2024/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.6.2] Jan 18 23:59:29 host cxs[65241]: ['/home2/revupilot/public_html/backup-19-1-2024/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Jan 19 00:00:35 host cxs[65241]: ['/home2/revupilot/public_html/backup-19-1-2024/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Jan 19 00:01:58 host cxs[65241]: ['/home2/revupilot/public_html/backup-19-1-2024/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Jan 19 00:01:59 host cxs[65241]: ['/home2/revupilot/public_html/backup-19-1-2024/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 19 00:02:00 host cxs[65241]: ['/home2/revupilot/public_html/backup-19-1-2024/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.6.2] Jan 19 00:02:42 host cxs[65241]: ['/home2/revupilot/public_html/backup-19-1-2024/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Jan 19 00:48:09 host cxs[65241]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 19 00:54:29 host cxs[65241]: ['/home2/pilotrevu/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.6.2] Jan 19 00:55:58 host cxs[65241]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Jan 19 00:56:48 host cxs[65241]: ['/home2/pilotrevu/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Jan 19 04:00:36 host cxs[65241]: ['/home2/revupilot/de.revupilot.com/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.6.2] Jan 22 23:17:04 host cxs[65240]: ['/home2/revupilot/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Jan 23 01:21:04 host cxs[65242]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jan 23 01:21:52 host cxs[65242]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jan 23 01:22:18 host cxs[65242]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jan 23 01:38:34 host cxs[65242]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jan 23 01:42:13 host cxs[65242]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jan 23 01:42:33 host cxs[65242]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jan 23 02:16:31 host cxs[65240]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jan 23 02:17:03 host cxs[65240]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jan 23 02:17:24 host cxs[65240]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jan 23 02:21:03 host cxs[65240]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jan 23 02:21:35 host cxs[65240]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jan 23 02:21:54 host cxs[65240]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jan 23 02:33:06 host cxs[65242]: ['/home2/adfraudshield/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jan 23 02:33:41 host cxs[65242]: ['/home2/adfraudshield/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jan 23 02:33:59 host cxs[65242]: ['/home2/adfraudshield/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jan 23 22:40:29 host cxs[65240]: ['/home2/techrevv/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.6.2] Jan 24 04:58:19 host cxs[65241]: ['/home2/shoutout360/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.2.4 < v3.6.2] Jan 30 20:01:00 host cxs[75699]: ['/home2/letsbuy24x7/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.7.11 < v6.4.2] Jan 30 22:05:07 host cxs[75699]: ['/home2/affonix/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.2.20 < v6.4.2] Jan 31 03:47:29 host cxs[75700]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jan 31 03:47:29 host cxs[75701]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jan 31 03:49:40 host cxs[75701]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jan 31 03:50:25 host cxs[75701]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jan 31 03:50:51 host cxs[75701]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jan 31 04:03:45 host cxs[75699]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jan 31 04:04:19 host cxs[75699]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jan 31 04:04:38 host cxs[75699]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jan 31 04:31:24 host cxs[75701]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jan 31 05:13:40 host cxs[75700]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jan 31 05:14:17 host cxs[75700]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jan 31 05:14:37 host cxs[75700]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jan 31 05:24:40 host cxs[75699]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jan 31 05:25:15 host cxs[75699]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jan 31 05:25:35 host cxs[75699]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jan 31 05:39:17 host cxs[75699]: ['/home2/adfraudshield/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jan 31 05:39:52 host cxs[75699]: ['/home2/adfraudshield/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jan 31 05:40:12 host cxs[75699]: ['/home2/adfraudshield/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jan 31 13:22:11 host cxs[75700]: ['/home2/flaketravel/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.1.5 < v6.4.2] Feb 7 05:17:04 host cxs[148006]: ['/home2/pilotrevu/public_html/wp-content/upgrade-temp-backup/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Feb 7 05:17:04 host cxs[148007]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Feb 8 23:56:50 host cxs[59369]: ['/home2/revupilot/public_html/wp-content/upgrade-temp-backup/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Feb 8 23:56:54 host cxs[59368]: ['/home2/revupilot/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Feb 9 00:06:01 host cxs[59367]: ['/home2/revupilot/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Feb 9 00:56:49 host cxs[59368]: ['/home2/pilotrevu/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Feb 9 01:52:06 host cxs[59369]: ['/home2/revupilot/de.revupilot.com/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Feb 9 02:06:31 host cxs[59369]: ['/home2/revupilot/it.revupilot.com/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Feb 9 02:15:23 host cxs[59368]: ['/home2/revupilot/fr.revupilot.com/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Feb 9 02:29:23 host cxs[59367]: ['/home2/revupilot/es.revupilot.com/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Feb 9 02:43:33 host cxs[59369]: ['/home2/prime786enews/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Feb 9 04:03:01 host cxs[59368]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Feb 9 04:05:24 host cxs[59368]: ['/home2/trendsledger/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Feb 9 04:18:28 host cxs[59368]: ['/home2/shoutout360/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Feb 9 04:34:35 host cxs[59369]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Feb 9 05:08:12 host cxs[59367]: ['/home2/pilotrevu/es.revupilot.net/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Feb 9 05:21:34 host cxs[59367]: ['/home2/pilotrevu/de.revupilot.net/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Feb 9 05:32:10 host cxs[59368]: ['/home2/pilotrevu/it.revupilot.net/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Feb 16 00:56:43 host cxs[8469]: ['/home2/pilotrevu/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Feb 16 04:10:02 host cxs[8469]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Feb 16 04:10:47 host cxs[8469]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Feb 16 04:11:12 host cxs[8469]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 16 04:18:22 host cxs[8469]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Feb 16 04:18:56 host cxs[8469]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Feb 16 04:19:16 host cxs[8469]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 16 04:40:04 host cxs[8470]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Feb 16 04:40:38 host cxs[8470]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Feb 16 04:40:58 host cxs[8470]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 16 04:49:25 host cxs[8469]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Feb 16 04:49:58 host cxs[8469]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Feb 16 04:50:17 host cxs[8469]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 16 05:00:59 host cxs[8470]: ['/home2/adfraudshield/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Feb 16 05:01:31 host cxs[8470]: ['/home2/adfraudshield/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Feb 16 05:01:50 host cxs[8470]: ['/home2/adfraudshield/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 19 16:07:58 host cxs[8469]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Feb 27 05:35:52 host cxs[175698]: ['/home2/pilotrevu/public_html/backup 27-2-2024/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Feb 27 05:37:22 host cxs[175698]: ['/home2/pilotrevu/public_html/backup 27-2-2024/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Feb 27 05:38:07 host cxs[175698]: ['/home2/pilotrevu/public_html/backup 27-2-2024/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Feb 27 05:39:33 host cxs[175698]: ['/home2/pilotrevu/public_html/backup 27-2-2024/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Feb 28 05:58:42 host cxs[175698]: ['/home2/revupilot/public_html/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Feb 28 05:58:47 host cxs[175696]: ['/home2/revupilot/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Feb 29 22:51:40 host cxs[176006]: ['/home2/uttamweld/public_html/wp-content/plugins/happy-elementor-addons/classes/review.php'] - Universal decode regex match = [universal decoder] Feb 29 22:51:42 host cxs[176006]: ['/home2/uttamweld/public_html/wp-content/plugins/happy-elementor-addons/inc/functions.php'] - Universal decode regex match = [universal decoder] Feb 29 22:52:05 host cxs[176006]: ['/home2/uttamweld/public_html/wp-content/plugins/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Feb 29 22:52:10 host cxs[176008]: ['/home2/uttamweld/public_html/wp-content/plugins/testimonial-free/src/Admin/Admin.php'] - Universal decode regex match = [universal decoder] Feb 29 23:20:46 host cxs[176008]: ['/home2/uttamweld/public_html/wp-content/plugins/forminator/addons/pro/hubspot/class-forminator-addon-hubspot-form-hooks.php'] - Universal decode regex match = [universal decoder] Feb 29 23:20:46 host cxs[176008]: ['/home2/uttamweld/public_html/wp-content/plugins/forminator/addons/pro/hubspot/class-forminator-addon-hubspot-quiz-hooks.php'] - Universal decode regex match = [universal decoder] Mar 1 00:03:56 host cxs[176007]: ['/home2/uttamweld/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Mar 1 00:04:52 host cxs[176007]: ['/home2/uttamweld/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Mar 1 00:05:23 host cxs[176007]: ['/home2/uttamweld/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 5 06:27:56 host cxs[176007]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Mar 5 06:31:10 host cxs[176007]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Mar 5 06:31:48 host cxs[176007]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 5 13:35:14 host cxs[176008]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 5 16:04:38 host cxs[176007]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 6 03:59:26 host cxs[176006]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Mar 7 05:14:33 host cxs[176006]: ['/home2/pilotrevu/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Mar 7 05:24:33 host cxs[176006]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Mar 7 06:12:30 host cxs[176006]: ['/home2/aidigitas/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 7 06:19:56 host cxs[176007]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 7 06:20:51 host cxs[176007]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Mar 7 06:22:45 host cxs[176007]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Mar 7 06:24:19 host cxs[176007]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 7 06:33:46 host cxs[176007]: ['/home2/starfiremedia/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 7 06:35:37 host cxs[176006]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Mar 7 06:37:20 host cxs[176006]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Mar 7 06:37:59 host cxs[176006]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 7 06:52:26 host cxs[176008]: ['/home2/prime786enews/public_html/wp-content/plugins/bunyad-amp/src/Admin/OptionsMenu.php'] - Universal decode regex match = [universal decoder] Mar 8 00:43:38 host cxs[121621]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Mar 8 06:42:22 host cxs[121621]: ['/home2/techrevv/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Mar 12 02:41:06 host cxs[121620]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Mar 13 01:51:52 host cxs[121622]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Mar 16 03:53:03 host cxs[201186]: ['/home2/uttamweld/public_html/wp-content/plugins/happy-elementor-addons/classes/review.php'] - Universal decode regex match = [universal decoder] Mar 16 03:53:04 host cxs[201186]: ['/home2/uttamweld/public_html/wp-content/plugins/happy-elementor-addons/inc/functions.php'] - Universal decode regex match = [universal decoder] Mar 27 05:45:01 host cxs[52364]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Mar 27 05:45:50 host cxs[52364]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Mar 27 05:46:18 host cxs[52364]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 28 03:49:26 host cxs[52363]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Mar 28 03:50:18 host cxs[52363]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Mar 28 03:50:47 host cxs[52363]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 28 05:13:56 host cxs[52365]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Mar 28 05:33:25 host cxs[52364]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Mar 28 05:34:01 host cxs[52364]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Mar 28 05:34:23 host cxs[52364]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 28 05:40:35 host cxs[52365]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Mar 28 05:41:13 host cxs[52365]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Mar 28 05:41:34 host cxs[52365]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Apr 2 01:01:02 host cxs[133604]: ['/home2/pilotrevu/fr.revupilot.net/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Apr 2 01:04:04 host cxs[133604]: ['/home2/pilotrevu/br.revupilot.net/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Apr 2 01:12:18 host cxs[133604]: ['/home2/pilotrevu/nl.revupilot.net/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Apr 2 01:16:47 host cxs[133605]: ['/home2/pilotrevu/pl.revupilot.net/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] Apr 4 08:05:28 host cxs[185089]: ['/home2/aidigitas/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 4 08:16:35 host cxs[185088]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 4 08:34:18 host cxs[185088]: ['/home2/starfiremedia/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 5 03:43:57 host cxs[185089]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Apr 5 07:11:46 host cxs[185089]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Apr 8 03:05:29 host cxs[185089]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 8 03:09:41 host cxs[185089]: ['/home2/pilotrevu/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Apr 9 08:34:52 host cxs[185089]: ['/home2/hostingreviews4u/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Apr 9 08:38:19 host cxs[185088]: ['/home2/hostingreviews4u/public_html/wp-content/themes/soledad_1/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Apr 9 08:39:10 host cxs[185088]: ['/home2/hostingreviews4u/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Apr 9 09:10:30 host cxs[185090]: ['/home2/hostingreviews4u/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Apr 9 19:28:50 host cxs[185088]: ['/home2/flaketravel/public_html/wp-content/upgrade/wordpress-6.1.6-partial-5/wordpress/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.1.6 < v6.5] Apr 9 19:28:52 host cxs[185088]: ['/home2/flaketravel/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.1.6 < v6.5] Apr 16 17:00:49 host cxs[152794]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Apr 18 01:52:43 host cxs[152794]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Apr 18 01:53:36 host cxs[152794]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Apr 18 01:54:05 host cxs[152794]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Apr 18 02:02:41 host cxs[152794]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Apr 18 02:03:17 host cxs[152794]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Apr 18 02:03:37 host cxs[152794]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Apr 18 02:17:19 host cxs[152795]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Apr 18 02:19:02 host cxs[152795]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Apr 18 02:19:33 host cxs[152795]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Apr 19 03:32:23 host cxs[51147]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Apr 22 01:29:53 host cxs[123345]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Apr 22 02:21:25 host cxs[123344]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Apr 22 02:22:12 host cxs[123344]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Apr 22 02:22:39 host cxs[123344]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Apr 25 02:13:20 host cxs[123346]: ['/home2/pilotrevu/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] May 6 03:15:33 host cxs[167123]: ['/home2/pilotrevu/de.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 6 03:30:13 host cxs[167124]: ['/home2/pilotrevu/it.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 6 04:57:15 host cxs[167122]: ['/home2/pilotrevu/nl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 6 05:07:15 host cxs[167122]: ['/home2/pilotrevu/pl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 6 05:32:35 host cxs[167123]: ['/home2/prime786enews/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 6 05:49:47 host cxs[167122]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] May 6 05:52:56 host cxs[167123]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] May 6 05:54:59 host cxs[167123]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] May 6 05:56:35 host cxs[167123]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] May 6 06:09:04 host cxs[167124]: ['/home2/trendsledger/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 6 06:14:59 host cxs[167123]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] May 6 06:15:37 host cxs[167123]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] May 6 06:15:58 host cxs[167123]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] May 6 06:17:38 host cxs[167122]: ['/home2/shoutout360/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 6 06:25:01 host cxs[167122]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] May 6 06:27:45 host cxs[167123]: ['/home2/techrevv/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 7 05:15:32 host cxs[167122]: ['/home2/hostingreviews4u/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] May 7 05:17:15 host cxs[167123]: ['/home2/hostingreviews4u/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.2] May 7 07:49:54 host cxs[167123]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] May 7 07:50:43 host cxs[167123]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] May 7 07:51:09 host cxs[167123]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] May 7 07:54:02 host cxs[167123]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] May 7 07:54:36 host cxs[167123]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] May 7 07:54:56 host cxs[167123]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] May 8 02:15:31 host cxs[167123]: ['/home2/pilotrevu/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] May 24 07:55:29 host cxs[131648]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] May 24 07:56:23 host cxs[131648]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] May 24 07:56:54 host cxs[131648]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] May 24 08:41:57 host cxs[131648]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] May 24 08:42:29 host cxs[131648]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] May 24 08:42:47 host cxs[131648]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] May 24 08:43:27 host cxs[131648]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] May 28 01:45:15 host cxs[61210]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] May 28 02:02:52 host cxs[61209]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] May 28 02:05:59 host cxs[61209]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] May 28 02:06:32 host cxs[61209]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] May 28 02:09:22 host cxs[61208]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] May 28 02:09:57 host cxs[61208]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] May 28 02:10:15 host cxs[61208]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] May 29 14:30:29 host cxs[61209]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] May 29 17:13:45 host cxs[61208]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Jun 6 02:59:26 host cxs[230593]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 6 03:00:15 host cxs[230593]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jun 6 03:00:45 host cxs[230593]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jun 6 07:13:19 host cxs[230593]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 6 07:14:16 host cxs[230593]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jun 6 07:14:46 host cxs[230593]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jun 10 17:04:16 host cxs[230593]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 10 17:05:15 host cxs[230593]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jun 10 17:05:46 host cxs[230593]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jun 10 17:12:56 host cxs[230592]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 10 17:13:28 host cxs[230592]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jun 10 17:13:47 host cxs[230592]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jun 10 17:53:57 host cxs[230592]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 10 17:54:30 host cxs[230592]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jun 10 17:54:49 host cxs[230592]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jun 10 19:12:36 host cxs[230591]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 10 19:13:07 host cxs[230591]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jun 10 19:13:25 host cxs[230591]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jun 17 00:20:58 host cxs[29644]: ['/home2/pilotrevu/public_html/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 17 00:21:10 host cxs[29643]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 17 01:09:35 host cxs[29644]: ['/home2/prime786enews/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 17 01:14:41 host cxs[29642]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jun 17 01:14:57 host cxs[29644]: ['/home2/trendsledger/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 17 01:20:30 host cxs[29642]: ['/home2/shoutout360/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 17 01:27:53 host cxs[29643]: ['/home2/techrevv/public_html/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 17 01:27:59 host cxs[29644]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jun 17 01:28:11 host cxs[29642]: ['/home2/techrevv/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 17 01:46:03 host cxs[29642]: ['/home2/aidigitas/public_html/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 17 01:46:12 host cxs[29643]: ['/home2/aidigitas/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 17 01:53:50 host cxs[29642]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 17 02:47:52 host cxs[29642]: ['/home2/pilotrevu/de.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 17 02:49:30 host cxs[29644]: ['/home2/pilotrevu/it.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 17 02:57:12 host cxs[29644]: ['/home2/pilotrevu/fr.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 17 03:21:14 host cxs[29642]: ['/home2/pilotrevu/br.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 17 03:26:02 host cxs[29643]: ['/home2/pilotrevu/nl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 17 03:38:21 host cxs[29643]: ['/home2/pilotrevu/pl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 19 00:23:59 host cxs[48132]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 19 00:24:48 host cxs[48132]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jun 19 00:25:18 host cxs[48132]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jun 19 00:41:02 host cxs[48131]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 19 00:41:30 host cxs[48131]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jun 19 00:41:46 host cxs[48131]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jun 19 01:48:18 host cxs[48133]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 19 01:49:57 host cxs[48133]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jun 19 01:50:33 host cxs[48133]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jun 20 06:30:46 host cxs[48132]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 20 06:31:42 host cxs[48132]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jun 20 06:32:13 host cxs[48132]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jun 21 00:20:21 host cxs[48133]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jun 21 00:22:34 host cxs[48132]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 21 00:23:02 host cxs[48132]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jun 21 00:23:21 host cxs[48132]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jun 21 00:25:04 host cxs[48132]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 21 00:25:35 host cxs[48132]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jun 21 00:25:54 host cxs[48132]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jun 21 00:27:43 host cxs[48131]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jun 21 00:47:29 host cxs[48131]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 21 00:48:01 host cxs[48131]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jun 21 00:48:20 host cxs[48131]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jun 21 00:53:34 host cxs[48133]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 21 00:54:04 host cxs[48133]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jun 21 00:54:22 host cxs[48133]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jun 24 20:57:58 host cxs[48132]: ['/home2/letsbuy24x7/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.7.12 < v6.5.4] Jun 24 22:13:49 host cxs[48132]: ['/home2/flaketravel/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.1.7 < v6.5.4] Jun 24 23:10:29 host cxs[48131]: ['/home2/affonix/public_html/wp-content/upgrade/wordpress-5.2.21-partial-20-j01osz/wordpress/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.2.21 < v6.5.4] Jun 24 23:10:30 host cxs[48133]: ['/home2/affonix/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.2.21 < v6.5.4] Jun 24 23:11:38 host cxs[48131]: ['/home2/affonix/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.2.21 < v6.5.4] Jun 24 23:12:57 host cxs[48133]: ['/home2/affonix/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.2.21 < v6.5.4] Jun 24 23:14:30 host cxs[48131]: ['/home2/affonix/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.2.21 < v6.5.4] Jun 24 23:18:31 host cxs[48133]: ['/home2/affonix/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.2.21 < v6.5.4] Jun 24 23:20:12 host cxs[48131]: ['/home2/affonix/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.2.21 < v6.5.4] Jun 26 00:05:25 host cxs[157175]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Jun 26 08:03:45 host cxs[157175]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 26 08:04:42 host cxs[157175]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jun 26 08:05:15 host cxs[157175]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jul 2 05:03:14 host cxs[154647]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Jul 3 05:18:14 host cxs[154645]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jul 3 05:19:09 host cxs[154645]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jul 3 05:19:42 host cxs[154645]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jul 3 05:45:36 host cxs[154645]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jul 3 05:46:05 host cxs[154645]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jul 3 05:46:23 host cxs[154645]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jul 4 00:06:17 host cxs[144843]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Jul 8 06:48:41 host cxs[144842]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jul 8 07:04:15 host cxs[144843]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jul 8 07:30:49 host cxs[144842]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jul 8 07:31:50 host cxs[144842]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jul 8 07:32:26 host cxs[144842]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jul 8 14:38:26 host cxs[144844]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Jul 8 17:00:05 host cxs[144843]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Jul 17 00:24:36 host cxs[723]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jul 17 00:25:33 host cxs[723]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jul 17 00:26:05 host cxs[723]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jul 24 06:12:09 host cxs[14615]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jul 24 06:52:14 host cxs[14616]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jul 24 06:52:48 host cxs[14616]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jul 24 06:53:10 host cxs[14616]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jul 24 07:08:45 host cxs[14616]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jul 29 14:43:18 host cxs[14617]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Jul 29 17:31:23 host cxs[14615]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Aug 2 02:25:45 host cxs[11756]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Aug 2 02:27:32 host cxs[11756]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Aug 2 02:28:08 host cxs[11756]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Aug 2 02:28:32 host cxs[11756]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Aug 2 02:34:11 host cxs[11756]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Aug 2 02:34:40 host cxs[11756]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Aug 2 02:34:58 host cxs[11756]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Aug 2 02:38:50 host cxs[11757]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Aug 2 02:52:56 host cxs[11757]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Aug 2 02:53:23 host cxs[11757]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Aug 2 02:53:39 host cxs[11757]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Aug 2 02:57:21 host cxs[11756]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Aug 2 02:57:56 host cxs[11756]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Aug 2 02:58:16 host cxs[11756]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Aug 12 23:45:02 host cxs[202191]: ['/home2/pilotrevu/public_html/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Aug 12 23:45:02 host cxs[202193]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Aug 12 23:45:15 host cxs[202193]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Aug 12 23:55:49 host cxs[202193]: ['/home2/pilotrevu/es.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Aug 13 00:08:16 host cxs[202192]: ['/home2/pilotrevu/de.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Aug 13 00:18:45 host cxs[202193]: ['/home2/pilotrevu/it.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Aug 13 00:29:43 host cxs[202192]: ['/home2/pilotrevu/fr.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Aug 13 00:39:51 host cxs[202191]: ['/home2/pilotrevu/br.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Aug 13 00:48:23 host cxs[202192]: ['/home2/pilotrevu/nl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Aug 13 00:54:19 host cxs[202193]: ['/home2/pilotrevu/pl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Aug 13 01:04:45 host cxs[202192]: ['/home2/prime786enews/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Aug 13 01:33:16 host cxs[202191]: ['/home2/trendsledger/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Aug 13 01:43:34 host cxs[202192]: ['/home2/shoutout360/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Aug 19 04:25:50 host cxs[212643]: ['/home2/gocouponsgo/public_html/storage/app/modules.php'] - Known exploit = [Fingerprint Match (fp)] [Hacker Sig Exploit [P1538]] Aug 19 04:25:50 host cxs[212642]: ['/home2/gocouponsgo/public_html/libraries/vendor/paragonie/lib/index.php'] - Known exploit = [Fingerprint Match (md5)] [PHP Exploit] Aug 19 04:25:50 host cxs[212642]: ['/home2/gocouponsgo/public_html/plugins/editors/tinymce/field/index.php'] - Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] Aug 19 04:25:53 host cxs[212642]: ['/home2/gocouponsgo/public_html/modules/mod_footer/tmpl/index.php'] - Known exploit = [Fingerprint Match (md5)] [PHP Exploit] Aug 19 04:25:54 host cxs[212643]: ['/home2/gocouponsgo/public_html/vendor1/bin/akismet.php'] - Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] Aug 19 04:26:14 host cxs[212641]: ['/home2/gocouponsgo/public_html/blog.gocouponsgo.com/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.7.2 < v3.21.5] Aug 19 04:26:30 host cxs[212641]: ['/home2/gocouponsgo/public_html/blog.gocouponsgo.com/wp-content/plugins/themegrill-demo-importer/themegrill-demo-importer.php'] - Script version check [OLD] [ThemeGrill Demo Importer v1.8.3 < v1.9.5] Aug 19 04:27:38 host cxs[212641]: ['/home2/gocouponsgo/public_html/vendor/bin/akismet.php'] - Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] Aug 19 04:27:40 host cxs[212643]: ['/home2/gocouponsgo/public_html/vendor1/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Aug 19 04:27:44 host cxs[212643]: ['/home2/gocouponsgo/public_html/vendor1/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Aug 19 04:29:22 host cxs[212641]: ['/home2/gocouponsgo/public_html/vendor/symfony/console/Resources/bin/hiddeninput.exe'] - MS Windows Binary/Executable [application/x-winexec] Aug 19 04:29:24 host cxs[212641]: ['/home2/gocouponsgo/public_html/vendor/symfony/debug/Resources/ext/symfony_debug.c'] - Suspicious file type [application/x-c] Aug 21 14:33:55 host cxs[212642]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Aug 21 16:59:42 host cxs[212642]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Aug 21 16:59:42 host cxs[212643]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Aug 22 00:03:35 host cxs[218517]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Aug 22 00:04:09 host cxs[218516]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Aug 22 00:04:42 host cxs[218516]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Aug 22 00:05:02 host cxs[218516]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Aug 22 00:06:36 host cxs[218516]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Aug 22 00:07:03 host cxs[218516]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Aug 22 00:07:19 host cxs[218516]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Aug 22 00:10:46 host cxs[218516]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Aug 22 00:10:59 host cxs[218517]: ['/home2/techrevv/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Aug 22 00:14:05 host cxs[218518]: ['/home2/aidigitas/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Aug 22 00:25:08 host cxs[218518]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Aug 22 00:25:42 host cxs[218517]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Aug 22 00:26:08 host cxs[218517]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Aug 22 00:26:24 host cxs[218517]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Sep 2 00:40:07 host cxs[230072]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Sep 2 00:42:10 host cxs[230073]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Sep 2 00:42:43 host cxs[230073]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Sep 2 00:43:03 host cxs[230073]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Sep 2 00:49:13 host cxs[230072]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Sep 2 00:49:40 host cxs[230072]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Sep 2 00:49:56 host cxs[230072]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Sep 2 01:28:43 host cxs[230072]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Sep 2 02:26:59 host cxs[230072]: ['/home2/starfiremedia/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Sep 2 02:27:25 host cxs[230073]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Sep 2 02:27:52 host cxs[230073]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Sep 2 02:28:09 host cxs[230073]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Sep 4 02:16:08 host cxs[230072]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Sep 4 02:16:43 host cxs[230072]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Sep 4 02:17:04 host cxs[230072]: ['/home2/kliktoverkoop/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Sep 23 14:27:23 host cxs[10174]: ['/home2/techrevv/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Sep 23 14:27:25 host cxs[10174]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Sep 23 17:05:01 host cxs[10174]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Sep 24 00:03:20 host cxs[10175]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Sep 24 01:34:51 host cxs[10175]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Sep 24 01:36:15 host cxs[10175]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Sep 24 01:36:49 host cxs[10175]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Sep 24 01:37:11 host cxs[10175]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Sep 24 01:38:35 host cxs[10173]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Sep 24 01:39:02 host cxs[10173]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Sep 24 01:39:19 host cxs[10173]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Sep 24 01:55:13 host cxs[10173]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Sep 24 14:29:00 host cxs[10175]: ['/home2/techrevv/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Sep 24 14:29:01 host cxs[10175]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Sep 24 16:59:45 host cxs[10173]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Oct 23 14:31:36 host cxs[233011]: ['/home2/techrevv/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Oct 23 14:31:38 host cxs[233010]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Oct 23 17:00:26 host cxs[233009]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Oct 31 14:28:54 host cxs[51322]: ['/home2/techrevv/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Oct 31 14:28:54 host cxs[51323]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Oct 31 17:00:40 host cxs[51322]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Oct 31 17:00:42 host cxs[51322]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Nov 13 10:34:07 host cxs[121966]: ['/home2/techrevv/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Nov 13 10:34:16 host cxs[121965]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Nov 13 16:03:15 host cxs[121967]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Nov 13 16:03:17 host cxs[121966]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Nov 18 02:08:02 host cxs[121966]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Nov 18 02:11:14 host cxs[121965]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Nov 18 02:11:49 host cxs[121965]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Nov 18 02:12:11 host cxs[121965]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Nov 18 02:31:17 host cxs[121966]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Nov 18 02:31:44 host cxs[121966]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Nov 18 02:32:02 host cxs[121966]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Nov 18 02:38:32 host cxs[121965]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Nov 19 05:58:50 host cxs[5867]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'] - Universal decode regex match = [universal decoder] Nov 19 05:58:50 host cxs[5867]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'] - Universal decode regex match = [universal decoder] Nov 19 05:59:02 host cxs[5865]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Dec 11 13:26:56 host cxs[5389]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 11 16:09:18 host cxs[5388]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 11 16:09:23 host cxs[5390]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 13 13:36:33 host cxs[5388]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 13 16:01:49 host cxs[5389]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 13 16:01:49 host cxs[5388]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 19 00:48:17 host cxs[76078]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 19 00:49:47 host cxs[76078]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'] - Universal decode regex match = [universal decoder] Dec 19 00:49:47 host cxs[76078]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'] - Universal decode regex match = [universal decoder] Dec 19 00:49:54 host cxs[76077]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Dec 19 01:17:58 host cxs[76079]: ['/home2/pilotrevu/es.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 19 01:28:24 host cxs[76078]: ['/home2/pilotrevu/de.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 19 02:03:15 host cxs[76079]: ['/home2/pilotrevu/it.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 19 02:19:41 host cxs[76078]: ['/home2/pilotrevu/fr.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 19 02:35:54 host cxs[76079]: ['/home2/pilotrevu/br.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 19 03:37:11 host cxs[76078]: ['/home2/pilotrevu/nl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 19 03:47:56 host cxs[76079]: ['/home2/pilotrevu/pl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 23 04:16:20 host cxs[76077]: ['/home2/prime786enews/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 23 04:26:27 host cxs[76077]: ['/home2/shoutout360/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 23 04:28:14 host cxs[76079]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 23 04:28:50 host cxs[76079]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Dec 23 04:29:13 host cxs[76079]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 23 04:39:48 host cxs[76079]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Dec 23 04:40:04 host cxs[76079]: ['/home2/trendsledger/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 23 04:41:09 host cxs[76079]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 23 04:41:37 host cxs[76079]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Dec 23 04:41:56 host cxs[76079]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 23 04:43:50 host cxs[76077]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Dec 23 04:44:19 host cxs[76079]: ['/home2/techrevv/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 23 04:49:59 host cxs[76078]: ['/home2/hostingreviews4u/public_html/wp-content/plugins/tablepress/controllers/controller-admin.php'] - Universal decode regex match = [universal decoder] Jan 6 01:39:34 host cxs[125943]: ['/home2/pilotrevu/es.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 6 01:43:53 host cxs[125945]: ['/home2/pilotrevu/de.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 6 01:47:33 host cxs[125944]: ['/home2/pilotrevu/it.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 6 01:52:09 host cxs[125945]: ['/home2/pilotrevu/fr.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 6 01:56:09 host cxs[125945]: ['/home2/pilotrevu/br.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 6 02:02:52 host cxs[125943]: ['/home2/pilotrevu/nl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 6 02:06:55 host cxs[125945]: ['/home2/pilotrevu/pl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 6 02:11:57 host cxs[125943]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 6 06:08:25 host cxs[125945]: ['/home2/prime786enews/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 6 06:14:53 host cxs[125943]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jan 6 06:15:00 host cxs[125944]: ['/home2/trendsledger/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 6 06:25:03 host cxs[125945]: ['/home2/shoutout360/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 23 02:54:35 host cxs[3991]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/BrandingController.php'] - Universal decode regex match = [universal decoder] Jan 23 02:54:36 host cxs[3991]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jan 23 02:54:40 host cxs[3991]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Jan 23 02:55:01 host cxs[3991]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jan 23 03:00:17 host cxs[3991]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jan 23 03:02:28 host cxs[3993]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/BrandingController.php'] - Universal decode regex match = [universal decoder] Jan 23 03:02:29 host cxs[3993]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Jan 23 03:02:32 host cxs[3993]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Jan 23 03:02:54 host cxs[3993]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 18 13:26:50 host cxs[42016]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Feb 18 16:25:12 host cxs[42017]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 6 04:59:15 host cxs[112487]: ['/home2/uttamweld/public_html/wp-content/plugins/loginizer/loginizer.php'] - Script version check [OLD] [Loginizer v1.8.3 < v1.9.6] Mar 11 14:28:49 host cxs[112487]: ['/home2/techrevv/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 11 14:28:52 host cxs[112489]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 11 17:00:09 host cxs[112488]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 17 23:36:56 host cxs[227683]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'] - Universal decode regex match = [universal decoder] Mar 17 23:36:56 host cxs[227683]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'] - Universal decode regex match = [universal decoder] Mar 17 23:37:20 host cxs[227681]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Mar 19 00:06:10 host cxs[209188]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Mar 19 00:06:49 host cxs[209188]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Mar 19 00:06:52 host cxs[209188]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Mar 19 00:07:15 host cxs[209188]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 19 00:31:59 host cxs[209188]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Mar 19 00:33:58 host cxs[209187]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Mar 19 00:34:27 host cxs[209187]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Mar 19 00:34:29 host cxs[209187]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Mar 19 00:34:47 host cxs[209187]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 19 00:39:34 host cxs[209187]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Mar 19 00:39:44 host cxs[209187]: ['/home2/techrevv/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 19 00:46:26 host cxs[209188]: ['/home2/hostingreviews4u/public_html/wp-content/plugins/tablepress/controllers/controller-admin.php'] - Universal decode regex match = [universal decoder] Mar 25 14:27:59 host cxs[76739]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 25 17:02:07 host cxs[76738]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 25 17:02:07 host cxs[76737]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 27 14:36:45 host cxs[138648]: ['/home2/techrevv/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 27 14:36:45 host cxs[138647]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 27 17:15:48 host cxs[138648]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 27 17:15:48 host cxs[138649]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Apr 14 01:20:28 host cxs[74060]: ['/home2/hostingreviews4u/public_html/wp-content/plugins/tablepress/controllers/controller-admin.php'] - Universal decode regex match = [universal decoder] May 5 14:27:16 host cxs[176617]: ['/home2/techrevv/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] May 5 14:27:16 host cxs[176618]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] May 5 17:01:11 host cxs[176619]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] May 5 17:01:13 host cxs[176617]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] May 6 16:59:52 host cxs[176617]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] May 7 02:29:09 host cxs[176619]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] May 8 00:10:00 host cxs[176617]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 8 00:12:07 host cxs[176617]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'] - Universal decode regex match = [universal decoder] May 8 00:12:07 host cxs[176617]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'] - Universal decode regex match = [universal decoder] May 8 00:12:28 host cxs[176619]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] May 14 14:27:24 host cxs[99910]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] May 14 17:04:08 host cxs[99912]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Jun 17 14:27:37 host cxs[17516]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Jun 17 17:09:15 host cxs[17517]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Jun 17 17:09:17 host cxs[17517]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Jun 26 14:28:16 host cxs[24271]: ['/home2/techrevv/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Jun 26 14:28:21 host cxs[24272]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Jun 26 16:59:31 host cxs[24271]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Jun 26 16:59:31 host cxs[24272]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Jul 25 00:03:40 host cxs[95206]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jul 25 00:04:22 host cxs[95204]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'] - Universal decode regex match = [universal decoder] Jul 25 00:04:22 host cxs[95204]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'] - Universal decode regex match = [universal decoder] Jul 25 00:04:28 host cxs[95205]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Jul 25 00:12:38 host cxs[95206]: ['/home2/pilotrevu/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Aug 5 17:42:47 host cxs[108320]: ['/home2/starfiremedia/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.6.3 < v6.8.2] Aug 5 20:57:34 host cxs[108322]: ['/home2/letsbuy24x7/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.7.13 < v6.8.2] Aug 5 22:13:53 host cxs[108320]: ['/home2/flaketravel/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.1.8 < v6.8.2] Aug 5 23:50:19 host cxs[108321]: ['/home2/affonix/afri.affonix.com/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.7.3 < v6.8.2] Aug 7 14:31:43 host cxs[209794]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Aug 7 17:05:24 host cxs[209794]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Aug 7 17:05:32 host cxs[209793]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Aug 25 12:54:01 host cxs[243750]: ['/home2/slickdealsnews/public_html/test123Cp.php'] - Known exploit = [Fingerprint Match (md5)] [PHP COOKIE Exploit] Aug 27 05:35:34 host cxs[243751]: ['/home2/slickdealsnews/public_html/assets/frontassets/fonts/index.php'] - Known exploit = [Fingerprint Match (fp)] [PHP OBF Exploit [P2256]] Aug 27 05:35:34 host cxs[243749]: ['/home2/slickdealsnews/public_html/assets/frontassets/fonts/sbb'] - (compressed file: sb [depth: 1]) Universal decode regex match = [universal decoder] Aug 27 05:36:19 host cxs[243749]: ['/home2/slickdealsnews/public_html/assets/images/comment/index.php'] - Known exploit = [Fingerprint Match (fp)] [PHP OBF Exploit [P2256]] Aug 27 05:37:01 host cxs[243749]: ['/home2/slickdealsnews/public_html/application/views/category/index.php'] - Known exploit = [Fingerprint Match (fp)] [PHP OBF Exploit [P2256]] Aug 27 05:37:27 host cxs[243749]: ['/home2/slickdealsnews/public_html/application/language/english/index.php'] - Known exploit = [Fingerprint Match (fp)] [PHP OBF Exploit [P2256]] Aug 27 05:37:43 host cxs[243750]: ['/home2/slickdealsnews/public_html/application/libraries/PaytmKit/index.php'] - Known exploit = [Fingerprint Match (fp)] [PHP OBF Exploit [P2256]] Sep 10 14:29:35 host cxs[119864]: ['/home2/techrevv/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Sep 10 14:29:35 host cxs[119862]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Sep 10 17:14:10 host cxs[119862]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Sep 10 17:14:14 host cxs[119862]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Sep 30 20:00:40 host cxs[261167]: ['/home2/starfiremedia/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.6.4 < v6.8.2] Sep 30 20:57:29 host cxs[261167]: ['/home2/letsbuy24x7/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v5.7.14 < v6.8.2] Sep 30 22:14:39 host cxs[261168]: ['/home2/flaketravel/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.1.9 < v6.8.2] Oct 15 14:33:35 host cxs[243883]: ['/home2/techrevv/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Oct 15 14:33:40 host cxs[243884]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Oct 15 17:04:29 host cxs[243883]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Oct 15 17:04:29 host cxs[243884]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Oct 17 06:48:24 host cxs[123489]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v9.7.1 < v9.8.2] Oct 17 06:48:25 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/bbpress/bbpress.php'] - Script version check [OLD] [bbPress v2.6.12 < v2.6.13] Oct 17 06:48:43 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/cookie-notice/cookie-notice.php'] - Script version check [OLD] [Cookie Notice & Compliance for GDPR / CCPA v2.5.5 < v2.5.6] Oct 17 06:48:44 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Oct 17 06:48:53 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.28.0 < v3.28.4] Oct 17 06:49:56 host cxs[123488]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Oct 17 06:50:07 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/gtranslate/gtranslate.php'] - Script version check [OLD] [GTranslate v3.0.7 < v3.0.8] Oct 17 06:50:10 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/leadin/leadin.php'] - Script version check [OLD] [HubSpot All-In-One Marketing - Forms, Popups, Live Chat v11.2.0 < v11.3.6] Oct 17 06:50:14 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.10.2 < v4.10.3] Oct 17 06:50:25 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.15] Oct 17 06:51:06 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v9.7.1 < v9.8.2] Oct 17 06:51:39 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Oct 17 06:52:14 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Oct 17 06:52:18 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Oct 17 06:52:41 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Oct 17 06:52:50 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/wordfence/wordfence.php'] - Script version check [OLD] [Wordfence Security v8.0.3 < v8.0.5] Oct 17 06:53:19 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/wordpress-seo/wp-seo.php'] - Script version check [OLD] [Yoast SEO v24.7 < v24.9] Oct 17 06:55:54 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Oct 17 06:56:20 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Oct 17 06:56:22 host cxs[123490]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Oct 17 07:22:35 host cxs[123488]: ['/home2/shoutout360net/public_html/wp-content/themes/twentytwentyfour/patterns/hidden-404.php'] - Known exploit = [Fingerprint Match (fp)] [PHP RFI Exploit [P2060]] Oct 18 08:04:51 host cxs[123489]: ['/home2/shoutout360net/public_html/wp-content/plugins/bbpress/bbpress.php'] - Script version check [OLD] [bbPress v2.6.12 < v2.6.13] Oct 18 08:05:05 host cxs[123489]: ['/home2/shoutout360net/public_html/wp-content/plugins/cookie-notice/cookie-notice.php'] - Script version check [OLD] [Cookie Notice & Compliance for GDPR / CCPA v2.5.5 < v2.5.6] Oct 18 08:05:06 host cxs[123489]: ['/home2/shoutout360net/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Oct 18 08:05:14 host cxs[123489]: ['/home2/shoutout360net/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.28.0 < v3.28.4] Oct 18 08:06:12 host cxs[123489]: ['/home2/shoutout360net/public_html/wp-content/plugins/gtranslate/gtranslate.php'] - Script version check [OLD] [GTranslate v3.0.7 < v3.0.8] Oct 18 08:06:14 host cxs[123489]: ['/home2/shoutout360net/public_html/wp-content/plugins/leadin/leadin.php'] - Script version check [OLD] [HubSpot All-In-One Marketing - Forms, Popups, Live Chat v11.2.0 < v11.3.6] Oct 18 08:06:17 host cxs[123489]: ['/home2/shoutout360net/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.10.2 < v4.10.3] Oct 18 08:06:28 host cxs[123489]: ['/home2/shoutout360net/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.15] Oct 18 08:07:00 host cxs[123489]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v9.7.1 < v9.8.2] Oct 18 08:07:31 host cxs[123489]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Oct 18 08:08:08 host cxs[123489]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Oct 18 08:08:11 host cxs[123489]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Oct 18 08:08:32 host cxs[123489]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Oct 18 08:08:39 host cxs[123489]: ['/home2/shoutout360net/public_html/wp-content/plugins/wordfence/wordfence.php'] - Script version check [OLD] [Wordfence Security v8.0.3 < v8.0.5] Oct 18 08:09:05 host cxs[123489]: ['/home2/shoutout360net/public_html/wp-content/plugins/wordpress-seo/wp-seo.php'] - Script version check [OLD] [Yoast SEO v24.7 < v24.9] Nov 17 13:27:33 host cxs[184438]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Nov 17 16:05:18 host cxs[184438]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 9 04:37:57 host cxs[207787]: ['/home2/bigticket/public_html/wp-content/plugins/bbpress/bbpress.php'] - Script version check [OLD] [bbPress v2.6.12 < v2.6.13] Dec 9 04:38:51 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/bbpress/bbpress.php'] - Script version check [OLD] [bbPress v2.6.12 < v2.6.13] Dec 9 04:39:04 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/cookie-notice/cookie-notice.php'] - Script version check [OLD] [Cookie Notice & Compliance for GDPR / CCPA v2.5.5 < v2.5.6] Dec 9 04:39:06 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Dec 9 04:39:13 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.28.0 < v3.28.4] Dec 9 04:40:15 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/gtranslate/gtranslate.php'] - Script version check [OLD] [GTranslate v3.0.7 < v3.0.8] Dec 9 04:40:18 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/leadin/leadin.php'] - Script version check [OLD] [HubSpot All-In-One Marketing - Forms, Popups, Live Chat v11.2.0 < v11.3.6] Dec 9 04:40:21 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/mailchimp-for-wp/mailchimp-for-wp.php'] - Script version check [OLD] [MC4WP: Mailchimp for WordPress v4.10.2 < v4.10.3] Dec 9 04:40:30 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.15] Dec 9 04:41:05 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v9.7.1 < v9.8.2] Dec 9 04:41:39 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 9 04:42:19 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Dec 9 04:42:23 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Dec 9 04:42:47 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 9 04:42:55 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/wordfence/wordfence.php'] - Script version check [OLD] [Wordfence Security v8.0.3 < v8.0.5] Dec 9 04:43:22 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/wordpress-seo/wp-seo.php'] - Script version check [OLD] [Yoast SEO v24.7 < v24.9] Dec 9 04:45:53 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/gtranslate/gtranslate.php'] - Script version check [OLD] [GTranslate v3.0.7 < v3.0.8] Dec 9 04:46:03 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v9.7.1 < v9.8.2] Dec 9 04:46:17 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 9 04:46:44 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Dec 9 04:46:47 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Dec 9 04:47:03 host cxs[207786]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 9 13:27:13 host cxs[207787]: ['/home2/techrevv/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 9 13:27:13 host cxs[207786]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 9 16:01:04 host cxs[207787]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 18 13:27:05 host cxs[128914]: ['/home2/techrevv/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 18 13:27:07 host cxs[128914]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 18 16:04:14 host cxs[128912]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 18 16:04:19 host cxs[128913]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Dec 22 16:07:28 host cxs[128302]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v9.7.2 < v9.8.2] Dec 22 16:08:00 host cxs[128302]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 22 16:08:38 host cxs[128302]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Dec 22 16:08:42 host cxs[128302]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Dec 22 16:09:04 host cxs[128302]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 22 16:18:10 host cxs[128301]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v9.7.2 < v9.8.2] Dec 22 16:18:24 host cxs[128301]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 22 16:18:50 host cxs[128301]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Dec 22 16:18:52 host cxs[128301]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Dec 22 16:19:08 host cxs[128301]: ['/home2/shoutout360/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 22 16:25:14 host cxs[128302]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v9.7.2 < v9.8.2] Dec 22 16:25:28 host cxs[128302]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 22 16:25:55 host cxs[128302]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Dec 22 16:25:57 host cxs[128302]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Dec 22 16:26:13 host cxs[128302]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 22 16:33:02 host cxs[128301]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v9.2.4 < v9.8.2] Dec 22 16:33:29 host cxs[128301]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 22 16:34:00 host cxs[128301]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Dec 22 16:34:19 host cxs[128301]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 22 17:28:10 host cxs[128300]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v9.7.2 < v9.8.2] Dec 22 17:28:24 host cxs[128300]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 22 17:28:51 host cxs[128300]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Dec 22 17:28:54 host cxs[128300]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Dec 22 17:29:10 host cxs[128300]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Dec 22 17:29:28 host cxs[128300]: ['/home2/bigticket/public_html/wp-content/upgrade-temp-backup/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Dec 22 17:29:55 host cxs[128300]: ['/home2/bigticket/public_html/wp-content/upgrade-temp-backup/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Dec 22 17:29:57 host cxs[128300]: ['/home2/bigticket/public_html/wp-content/upgrade-temp-backup/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Dec 22 17:30:14 host cxs[128300]: ['/home2/bigticket/public_html/wp-content/upgrade-temp-backup/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jan 6 13:27:07 host cxs[25489]: ['/home2/techrevv/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Jan 6 13:27:07 host cxs[25490]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Jan 6 16:01:19 host cxs[25490]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Jan 6 16:01:19 host cxs[25488]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Jan 16 02:29:38 host cxs[182043]: ['/home2/slickdealsnews/public_html/.well-known/acme-challenge/index.php'] - Universal decode regex match = [universal decoder] Jan 16 02:29:53 host cxs[182043]: ['/home2/slickdealsnews/public_html/application/controllers/index.php'] - Universal decode regex match = [universal decoder] Jan 16 02:30:14 host cxs[182043]: ['/home2/slickdealsnews/public_html/assets/css/index.php'] - Universal decode regex match = [universal decoder] Jan 16 02:30:38 host cxs[182042]: ['/home2/slickdealsnews/public_html/assets/frontassets/images/index.php'] - Universal decode regex match = [universal decoder] Jan 16 02:31:20 host cxs[182044]: ['/home2/slickdealsnews/public_html/assets/freshgreen/js/index.php'] - Universal decode regex match = [universal decoder] Jan 16 02:31:38 host cxs[182043]: ['/home2/slickdealsnews/public_html/BX/fdwss/index.php'] - Universal decode regex match = [universal decoder] Jan 16 02:31:56 host cxs[182042]: ['/home2/slickdealsnews/public_html/application/controllers/sitemap'] - (compressed file: xml [depth: 1]) Universal decode regex match = [universal decoder] Jan 16 02:31:56 host cxs[182042]: ['/home2/slickdealsnews/public_html/application/controllers/sitemap'] - (compressed file: xml [depth: 1]) (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P2035]] Jan 16 02:34:11 host cxs[182044]: ['/home2/slickdealsnews/public_html/cache/index.php'] - Universal decode regex match = [universal decoder] Jan 19 23:30:23 host cxs[26778]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 19 23:36:59 host cxs[26778]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'] - Universal decode regex match = [universal decoder] Jan 19 23:36:59 host cxs[26778]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'] - Universal decode regex match = [universal decoder] Jan 19 23:37:04 host cxs[26777]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Jan 20 01:30:38 host cxs[26779]: ['/home2/techrevv/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 20 01:30:57 host cxs[26779]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jan 23 00:21:38 host cxs[26777]: ['/home2/bigticket/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 23 00:26:13 host cxs[26779]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jan 23 00:27:12 host cxs[26779]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Jan 23 00:27:50 host cxs[26779]: ['/home2/bigticket/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jan 28 23:27:23 host cxs[77420]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'] - Universal decode regex match = [universal decoder] Jan 28 23:27:23 host cxs[77420]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'] - Universal decode regex match = [universal decoder] Jan 28 23:33:58 host cxs[77420]: ['/home2/shoutout360net/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jan 28 23:35:47 host cxs[77419]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jan 28 23:36:43 host cxs[77419]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Jan 28 23:37:17 host cxs[77419]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Feb 5 13:27:00 host cxs[139728]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Feb 5 16:04:58 host cxs[139727]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Feb 5 16:05:00 host cxs[139728]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Feb 10 13:27:41 host cxs[139727]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Feb 10 16:04:41 host cxs[139728]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Feb 10 16:04:44 host cxs[139726]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Feb 23 23:42:57 host cxs[29961]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Feb 23 23:44:40 host cxs[29961]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'] - Universal decode regex match = [universal decoder] Feb 23 23:44:40 host cxs[29961]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'] - Universal decode regex match = [universal decoder] Feb 23 23:44:48 host cxs[29959]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Feb 23 23:50:47 host cxs[29959]: ['/home2/shoutout360net/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Feb 23 23:52:44 host cxs[29959]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Feb 23 23:53:39 host cxs[29959]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Feb 23 23:54:16 host cxs[29959]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 2 16:08:50 host cxs[24668]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v9.7.3 < v9.8.2] Mar 2 16:09:29 host cxs[24668]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Mar 2 16:10:18 host cxs[24668]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Mar 2 16:10:22 host cxs[24668]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Mar 2 16:10:51 host cxs[24668]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 2 16:17:29 host cxs[24670]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Mar 2 16:18:31 host cxs[24670]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Mar 2 16:20:57 host cxs[24670]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 2 16:38:12 host cxs[24669]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/woocommerce.php'] - Script version check [OLD] [WooCommerce v9.2.5 < v9.8.2] Mar 2 16:38:46 host cxs[24669]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Mar 2 16:39:24 host cxs[24669]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'] - Universal decode regex match = [universal decoder] Mar 2 16:39:46 host cxs[24669]: ['/home2/starfiremedia/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Mar 3 13:27:56 host cxs[24669]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 3 16:01:56 host cxs[24668]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 3 16:01:57 host cxs[24669]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 6 02:31:03 host cxs[117854]: ['/home2/dealsng/public_html/wp-content/plugins/amp/src/Admin/OptionsMenu.php'] - Universal decode regex match = [universal decoder] Mar 6 02:32:22 host cxs[117854]: ['/home2/dealsng/public_html/wp-content/plugins/content-egg/application/admin/PluginAdmin.php'] - Universal decode regex match = [universal decoder] Mar 6 02:32:36 host cxs[117854]: ['/home2/dealsng/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 6 02:32:42 host cxs[117854]: ['/home2/dealsng/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.26.3 < v3.28.4] Mar 6 02:36:02 host cxs[117854]: ['/home2/dealsng/public_html/wp-content/plugins/polldaddy/polldaddy.php'] - Universal decode regex match = [universal decoder] Mar 6 02:36:04 host cxs[117854]: ['/home2/dealsng/public_html/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links v3.2.5 < v3.6.15] Mar 6 02:36:28 host cxs[117854]: ['/home2/dealsng/public_html/wp-content/plugins/smart-slider-3/Nextend/SmartSlider3/Storage.php'] - Universal decode regex match = [universal decoder] Mar 9 00:16:39 host cxs[117853]: ['/home2/dealsng/public_html/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 9 00:16:41 host cxs[117855]: ['/home2/dealsng/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 9 00:48:17 host cxs[117854]: ['/home2/dealsng/public_html/wp-content/plugins/elementor/elementor.php'] - Script version check [OLD] [Elementor v3.26.3 < v3.28.4] Mar 11 05:27:13 host cxs[106192]: ['/home2/starfiremedia/public_html/wp-includes/version.php'] - Script version check [OLD] [Wordpress v6.6.5 < v6.8.2] Mar 11 23:44:53 host cxs[106191]: ['/home2/pilotrevu/br.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 19 02:40:19 host cxs[14508]: ['/home2/pilotrevu/br.revupilot.net/wp-content/plugins/pretty-link/pretty-link.php'] - Script version check [OLD] [Pretty Links Super Affiliate Edition v3.4.2 < v3.6.15] Mar 19 02:52:07 host cxs[14508]: ['/home2/pilotrevu/nl.revupilot.net/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 19 02:52:07 host cxs[14507]: ['/home2/pilotrevu/nl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 19 03:00:24 host cxs[14507]: ['/home2/pilotrevu/es.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 19 03:06:02 host cxs[14507]: ['/home2/pilotrevu/it.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 19 03:12:30 host cxs[14509]: ['/home2/pilotrevu/de.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 19 03:25:52 host cxs[14507]: ['/home2/pilotrevu/fr.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 19 03:29:47 host cxs[14507]: ['/home2/pilotrevu/pl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 20 01:32:22 host cxs[14509]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 20 01:34:45 host cxs[14509]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'] - Universal decode regex match = [universal decoder] Mar 20 01:34:45 host cxs[14509]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'] - Universal decode regex match = [universal decoder] Mar 25 14:27:00 host cxs[20284]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 25 17:00:46 host cxs[20282]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 25 17:00:46 host cxs[20284]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 27 07:26:21 host cxs[20284]: ['/home2/pilotrevu/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Mar 27 07:29:55 host cxs[20282]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 27 07:31:29 host cxs[20282]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Mar 27 07:31:48 host cxs[20284]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'] - Universal decode regex match = [universal decoder] Mar 27 07:31:48 host cxs[20284]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'] - Universal decode regex match = [universal decoder] Mar 27 09:35:56 host cxs[20282]: ['/home2/dealsng/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 29 09:36:56 host cxs[20284]: ['/home2/dealsng/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 29 23:41:47 host cxs[20284]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 29 23:46:28 host cxs[20284]: ['/home2/pilotrevu/pl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Mar 31 14:27:33 host cxs[39695]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Mar 31 17:02:40 host cxs[39694]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Apr 2 05:19:00 host cxs[104817]: ['/home2/shoutout360net/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 2 05:23:59 host cxs[104816]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Apr 2 05:26:10 host cxs[104816]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Apr 2 05:26:48 host cxs[104816]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Apr 2 06:30:16 host cxs[104816]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Apr 2 06:32:47 host cxs[104816]: ['/home2/techrevv/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 10 06:22:58 host cxs[31484]: ['/home2/prime786enews/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 10 06:43:32 host cxs[31484]: ['/home2/trendsledger/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 15 05:31:55 host cxs[245216]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Apr 15 05:33:59 host cxs[245216]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Apr 15 05:34:32 host cxs[245216]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Apr 16 09:36:18 host cxs[245216]: ['/home2/dealsng/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 17 00:47:15 host cxs[245216]: ['/home2/shoutout360net/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 17 00:52:57 host cxs[245218]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 17 00:55:08 host cxs[245218]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'] - Universal decode regex match = [universal decoder] Apr 17 00:55:09 host cxs[245218]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'] - Universal decode regex match = [universal decoder] Apr 17 00:57:32 host cxs[245216]: ['/home2/pilotrevu/public_html/wp-content/themes/soledad/inc/dashboard/lib/meta-box/inc/about/about.php'] - Universal decode regex match = [universal decoder] Apr 17 01:40:50 host cxs[245218]: ['/home2/techrevv/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 17 01:52:53 host cxs[245219]: ['/home2/pilotrevu/es.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 17 01:58:45 host cxs[245218]: ['/home2/pilotrevu/de.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 17 02:26:04 host cxs[245216]: ['/home2/pilotrevu/it.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 17 02:36:00 host cxs[245218]: ['/home2/pilotrevu/fr.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 17 04:41:58 host cxs[245219]: ['/home2/pilotrevu/br.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 17 05:13:02 host cxs[245216]: ['/home2/pilotrevu/nl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 17 05:26:00 host cxs[245218]: ['/home2/pilotrevu/pl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 17 06:17:16 host cxs[245218]: ['/home2/prime786enews/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 17 06:44:25 host cxs[245219]: ['/home2/trendsledger/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 17 06:46:35 host cxs[245218]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Apr 17 06:49:09 host cxs[245218]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Apr 17 06:49:45 host cxs[245218]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Apr 17 21:36:18 host cxs[245218]: ['/home2/dealsng/public_html/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 17 21:36:19 host cxs[245216]: ['/home2/dealsng/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 20 06:17:12 host cxs[245218]: ['/home2/shoutout360net/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 22 01:18:31 host cxs[139829]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Apr 22 01:18:39 host cxs[139830]: ['/home2/trendsledger/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 22 01:21:03 host cxs[139830]: ['/home2/prime786enews/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 22 04:23:45 host cxs[139830]: ['/home2/pilotrevu/es.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 22 04:37:04 host cxs[139829]: ['/home2/pilotrevu/de.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 22 04:48:40 host cxs[139830]: ['/home2/pilotrevu/it.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 22 05:04:42 host cxs[139830]: ['/home2/pilotrevu/fr.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 22 05:13:17 host cxs[139830]: ['/home2/pilotrevu/nl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 22 05:23:04 host cxs[139831]: ['/home2/pilotrevu/pl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 22 05:25:41 host cxs[139831]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 22 05:25:41 host cxs[139830]: ['/home2/pilotrevu/public_html/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 22 05:27:38 host cxs[139829]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'] - Universal decode regex match = [universal decoder] Apr 22 05:27:38 host cxs[139829]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'] - Universal decode regex match = [universal decoder] Apr 22 05:27:40 host cxs[139830]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Apr 22 14:27:51 host cxs[139831]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Apr 22 17:03:27 host cxs[139829]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Apr 22 17:03:30 host cxs[139830]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] Apr 24 01:18:14 host cxs[139831]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Apr 24 01:18:34 host cxs[139829]: ['/home2/techrevv/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Apr 24 09:36:01 host cxs[139830]: ['/home2/dealsng/public_html/wp-content/plugins/content-egg/application/admin/PluginAdmin.php'] - Universal decode regex match = [universal decoder] May 4 04:44:27 host cxs[157703]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] May 7 01:09:10 host cxs[157702]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'] - Universal decode regex match = [universal decoder] May 7 01:09:10 host cxs[157702]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'] - Universal decode regex match = [universal decoder] May 7 09:37:40 host cxs[157703]: ['/home2/dealsng/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 7 09:37:40 host cxs[157702]: ['/home2/dealsng/public_html/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 9 09:35:55 host cxs[133368]: ['/home2/dealsng/public_html/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 9 09:35:55 host cxs[133369]: ['/home2/dealsng/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 11 06:22:56 host cxs[133368]: ['/home2/shoutout360net/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 12 01:51:54 host cxs[133369]: ['/home2/pilotrevu/es.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 12 01:58:17 host cxs[133368]: ['/home2/pilotrevu/de.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 12 02:12:12 host cxs[133370]: ['/home2/pilotrevu/it.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 12 02:19:45 host cxs[133368]: ['/home2/pilotrevu/fr.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 12 02:28:32 host cxs[133369]: ['/home2/pilotrevu/br.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 12 02:28:33 host cxs[133368]: ['/home2/pilotrevu/br.revupilot.net/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 12 02:51:29 host cxs[133368]: ['/home2/pilotrevu/nl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 12 03:01:55 host cxs[133370]: ['/home2/pilotrevu/pl.revupilot.net/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 12 03:01:55 host cxs[133369]: ['/home2/pilotrevu/pl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 12 09:36:02 host cxs[133370]: ['/home2/dealsng/public_html/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 12 09:36:02 host cxs[133369]: ['/home2/dealsng/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 13 06:14:34 host cxs[133369]: ['/home2/pilotrevu/es.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 15 02:57:17 host cxs[245102]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 15 03:05:03 host cxs[245104]: ['/home2/shoutout360net/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 15 03:10:15 host cxs[245104]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] May 15 03:10:27 host cxs[245102]: ['/home2/techrevv/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 15 05:02:40 host cxs[245103]: ['/home2/pilotrevu/de.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 15 05:21:00 host cxs[245104]: ['/home2/pilotrevu/it.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 15 05:27:32 host cxs[245103]: ['/home2/pilotrevu/fr.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 15 05:50:26 host cxs[245103]: ['/home2/pilotrevu/br.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 15 06:31:52 host cxs[245104]: ['/home2/pilotrevu/nl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 15 06:39:15 host cxs[245103]: ['/home2/pilotrevu/pl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 20 09:36:08 host cxs[35472]: ['/home2/dealsng/public_html/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 20 09:36:08 host cxs[35470]: ['/home2/dealsng/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 20 14:32:26 host cxs[35470]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] May 20 17:02:59 host cxs[35471]: ['/home2/trendsledger/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] May 20 17:03:01 host cxs[35470]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] May 21 00:26:19 host cxs[35471]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 21 00:28:42 host cxs[35471]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'] - Universal decode regex match = [universal decoder] May 21 00:28:42 host cxs[35471]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'] - Universal decode regex match = [universal decoder] May 21 00:38:41 host cxs[35471]: ['/home2/shoutout360net/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 21 00:52:44 host cxs[35470]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] May 21 00:52:55 host cxs[35471]: ['/home2/techrevv/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 21 01:06:55 host cxs[35472]: ['/home2/pilotrevu/es.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 21 02:57:42 host cxs[35471]: ['/home2/pilotrevu/de.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 21 06:46:31 host cxs[35472]: ['/home2/pilotrevu/it.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 22 00:17:56 host cxs[35472]: ['/home2/pilotrevu/fr.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 22 00:27:35 host cxs[35472]: ['/home2/pilotrevu/br.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 22 00:42:30 host cxs[35472]: ['/home2/pilotrevu/nl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 22 00:50:03 host cxs[35472]: ['/home2/pilotrevu/pl.revupilot.net/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 22 00:50:04 host cxs[35471]: ['/home2/pilotrevu/pl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 22 00:59:11 host cxs[35470]: ['/home2/trendsledger/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] May 22 00:59:20 host cxs[35471]: ['/home2/trendsledger/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 22 01:41:36 host cxs[35470]: ['/home2/prime786enews/public_html/wp-content/upgrade/cookie-notice.3.0.6/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 22 01:42:02 host cxs[35471]: ['/home2/prime786enews/public_html/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 22 01:42:02 host cxs[35472]: ['/home2/prime786enews/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 26 02:34:10 host cxs[18714]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] May 26 09:35:59 host cxs[18714]: ['/home2/dealsng/public_html/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 26 09:35:59 host cxs[18716]: ['/home2/dealsng/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] May 27 02:06:01 host cxs[18716]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] May 27 02:08:37 host cxs[18716]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] May 27 02:09:16 host cxs[18716]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] May 27 14:29:19 host cxs[18716]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] May 27 14:29:19 host cxs[18714]: ['/home2/techrevv/public_html/wp-content/upgrade-temp-backup/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] May 27 17:01:07 host cxs[18714]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] May 29 17:04:28 host cxs[18715]: ['/home2/trendsledger/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] May 30 02:28:21 host cxs[18714]: ['/home2/techrevv/public_html/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'] - Universal decode regex match = [universal decoder] May 30 09:36:05 host cxs[18714]: ['/home2/dealsng/public_html/wp-content/plugins/content-egg/application/admin/PluginAdmin.php'] - Universal decode regex match = [universal decoder] Jun 1 06:31:18 host cxs[231384]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 1 06:32:30 host cxs[231384]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Jun 1 06:34:57 host cxs[231384]: ['/home2/trendsledger/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jun 2 05:14:49 host cxs[589]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'] - Universal decode regex match = [universal decoder] Jun 2 05:14:49 host cxs[589]: ['/home2/pilotrevu/public_html/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'] - Universal decode regex match = [universal decoder] Jun 2 05:53:58 host cxs[588]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'] - Universal decode regex match = [universal decoder] Jun 2 05:55:22 host cxs[588]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'] - Universal decode regex match = [universal decoder] Jun 2 05:56:07 host cxs[588]: ['/home2/shoutout360net/public_html/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'] - Suspicious file type [application/x-c] Jun 3 09:36:59 host cxs[27025]: ['/home2/dealsng/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 4 01:35:29 host cxs[27024]: ['/home2/techrevv/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 5 00:40:27 host cxs[27023]: ['/home2/pilotrevu/es.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 5 00:46:41 host cxs[27023]: ['/home2/pilotrevu/de.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 5 01:08:50 host cxs[27024]: ['/home2/pilotrevu/it.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 5 01:24:05 host cxs[27025]: ['/home2/pilotrevu/fr.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 5 02:16:03 host cxs[27024]: ['/home2/pilotrevu/br.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 5 21:01:20 host cxs[27025]: ['/home2/slickdealsnews/public_html/assets/frontassets/fonts/chankro.so'] - Linux Binary/Executable [application/x-sharedlib] Jun 8 06:47:14 host cxs[27023]: ['/home2/pilotrevu/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 8 06:47:29 host cxs[27024]: ['/home2/pilotrevu/public_html/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php'] - Universal decode regex match = [universal decoder] Jun 9 00:07:29 host cxs[27025]: ['/home2/shoutout360net/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 9 01:52:18 host cxs[27023]: ['/home2/pilotrevu/pl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 9 02:05:11 host cxs[27023]: ['/home2/trendsledger/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 9 02:09:37 host cxs[27025]: ['/home2/prime786enews/public_html/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 9 02:09:37 host cxs[27023]: ['/home2/prime786enews/public_html/wp-content/upgrade-temp-backup/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 16 00:16:54 host cxs[78798]: ['/home2/shoutout360net/public_html/wp-content/plugins/wordpress-seo/src/myyoast-client/infrastructure/oidc/issuer-config.php'] - Universal decode regex match = [universal decoder] Jun 16 00:35:30 host cxs[78796]: ['/home2/techrevv/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'] - Universal decode regex match = [universal decoder] Jun 16 02:20:50 host cxs[78797]: ['/home2/pilotrevu/nl.revupilot.net/wp-content/plugins/cookie-notice/includes/settings.php'] - Universal decode regex match = [universal decoder] Jun 16 06:20:47 host cxs[78796]: ['/home2/slickdealsnews/public_html/cache/index.php.tar'] - (compressed file: home2/slickdealsnews/public_html/cache/index.php [depth: 1]) Universal decode regex match = [universal decoder] Jun 16 06:20:47 host cxs[78797]: ['/home2/slickdealsnews/public_html/cache/index.php.php.tar.gz'] - (compressed file: home2/slickdealsnews/public_html/cache/index.php [depth: 1]) Universal decode regex match = [universal decoder] Jun 16 06:20:50 host cxs[78797]: ['/home2/slickdealsnews/public_html/cache/index.php.tar'] - (compressed file: home2/slickdealsnews/public_html/cache/index.php [depth: 1]) Universal decode regex match = [universal decoder] Jun 16 07:16:24 host cxs[78798]: ['/home2/slickdealsnews/public_html/cache/BX.zip'] - (compressed file: fdwss/index.php [depth: 1]) Universal decode regex match = [universal decoder] Jun 16 07:19:29 host cxs[78796]: ['/home2/slickdealsnews/public_html/cache/BX.tar'] - (compressed file: fdwss/index.php [depth: 1]) Universal decode regex match = [universal decoder] Jun 16 07:19:34 host cxs[78798]: ['/home2/slickdealsnews/public_html/cache/BX.tar.gz'] - (compressed file: fdwss/index.php [depth: 1]) Universal decode regex match = [universal decoder] Jun 16 07:19:49 host cxs[78798]: ['/home2/slickdealsnews/public_html/cache/BX.tar'] - (compressed file: fdwss/index.php [depth: 1]) Universal decode regex match = [universal decoder] Jun 16 07:27:48 host cxs[78796]: ['/home2/slickdealsnews/public_html/cache/.well-known.tar'] - (compressed file: acme-challenge/index.php [depth: 1]) Universal decode regex match = [universal decoder] Jun 16 07:27:48 host cxs[78796]: ['/home2/slickdealsnews/public_html/cache/.well-known.tar.gz'] - (compressed file: acme-challenge/index.php [depth: 1]) Universal decode regex match = [universal decoder] Jun 16 07:27:49 host cxs[78798]: ['/home2/slickdealsnews/public_html/cache/.well-known.tar'] - (compressed file: acme-challenge/index.php [depth: 1]) Universal decode regex match = [universal decoder] Jun 16 07:27:57 host cxs[78798]: ['/home2/slickdealsnews/public_html/cache/.well-known.zip'] - (compressed file: acme-challenge/index.php [depth: 1]) Universal decode regex match = [universal decoder] Jun 16 08:20:11 host cxs[78797]: ['/home2/slickdealsnews/public_html/cache/fdwss.zip'] - (compressed file: index.php [depth: 1]) Universal decode regex match = [universal decoder]