#$@%#$%!

Ngiler SH3LL 360
: / home / pariaqke /

Information Server
MySQL : OFF Perl : OFF CURL : ON WGET : OFF PKEXEC : OFF

Directive	Local Value
IP Address	66.29.146.71
System	Linux premium232.web-hosting.com 4.18.0-553.45.1.lve.el8.x86_64 #1 SMP Wed Mar 26 12:08:09 UTC 2025 x86_64
User	pariaqke
PHP Version	8.2.31
Software	LiteSpeed
Doc root	Writable

Edit File : scanreport-pariaqke-Apr_15_2026_08h58m.txt \| Size : 16.12 KB
----------- SCAN REPORT ----------- TimeStamp: Wed, 15 Apr 2026 08:58:22 -0400 (/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/pariaqke/scanreport-pariaqke-Apr_15_2026_08h58m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user pariaqke --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual) Scanning /home/pariaqke: '/home/pariaqke/.nc_plugin/hidden' # World writeable directory '/home/pariaqke/caspebridge.com/wp-content/plugins/click-to-chat-for-whatsapp/new/admin/class-ht-ctc-admin-main-page.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/cosmag.org/123.php' # ClamAV detected virus = [TO-31859.WEBSHEL.123_php.MD5-dd0de048524466ae8bbae05f497c52f9.size-62.UNOFFICIAL] '/home/pariaqke/cosmag.org/885355/radio.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/pariaqke/cosmag.org/wp-content/plugins/meta-box/src/Dashboard/Dashboard.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/cosmag.org/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/cosmag.org/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/cosmag.org/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c' # Suspicious file type [application/x-c] '/home/pariaqke/enterprisecoastgh.com/wp-admin' # World writeable directory '/home/pariaqke/festivalsghana.com/.tmb' # World writeable directory '/home/pariaqke/festivalsghana.com/885355/radio.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/pariaqke/festivalsghana.com/wp-content/plugins/give/includes/misc-functions.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/festivalsghana.com/wp-content/plugins/lastudio-element-kit/includes/framework/dashboard/dashboard.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/festivalsghana.com/wp-content/themes/theme' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/css' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/beiruti' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/fira-code' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/fira-sans' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/literata' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/manrope' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/platypi' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/roboto-slab' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/vollkorn' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/ysabeau-office' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/images' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/parts' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/patterns' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/styles' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/styles/blocks' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/styles/colors' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/styles/sections' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/styles/typography' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/themes/theme/templates' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/upgrade' # World writeable directory '/home/pariaqke/festivalsghana.com/wp-content/upgrade-temp-backup' # World writeable directory '/home/pariaqke/frecom.net/wp-content/backups-dup-lite/installer/original_files_8d0bbb5-09013259' # World writeable directory '/home/pariaqke/frecom.net/wp-content/plugins/duplicator/classes/class.constants.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/freroxconsulting.com/885355/radio.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/pariaqke/freroxconsulting.com/wp-content/plugins/seedprod-coming-soon-pro-5/admin/class-seedprod-admin.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/jertsholdings.com/885355/radio.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/pariaqke/jertsholdings.com/wp-content/plugins/seedprod-coming-soon-pro-5/admin/class-seedprod-admin.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/johmay.com/885355/radio.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/pariaqke/johmay.com/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/joleec.com/885355/radio.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/pariaqke/joleec.com/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/joleec.com/wp-content/plugins/coming-soon/admin/class-seedprod-admin.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/joleec.com/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/joleec.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/joleec.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/joleec.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c' # Suspicious file type [application/x-c] '/home/pariaqke/joleec.com/wp-content/plugins/woocommerce-catalog-enquiry/classes/Admin.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/jymultimedia.com/class3.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/jymultimedia.com/885355/radio.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/pariaqke/jymultimedia.com/wp-admin/network/332451/index.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/jymultimedia.com/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/jymultimedia.com/wp-content/plugins/click-to-chat-for-whatsapp/new/admin/class-ht-ctc-admin-main-page.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/jymultimedia.com/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/jymultimedia.com/wp-content/plugins/seedprod-coming-soon-pro-5/admin/class-seedprod-admin.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/jymultimedia.com/wp-content/plugins/wp-smushit/core/external/plugins-cross-sell-page/app/submenus/class-cross-sell.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/oyinkahotel.com/.tmb' # World writeable directory '/home/pariaqke/oyinkahotel.com/885355/radio.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/pariaqke/oyinkahotel.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html' # Suspicious file type [application/x-c] '/home/pariaqke/oyinkahotel.com/wp-content/themes/sohohotel/framework/inc/post-types/post-types/YRyLCa.gif' # Suspicious image file (hidden script file) # Scan Timeout (30 secs) while processing: '/home/pariaqke/oyinkahotel.com/wp-content/uploads/2020/09/.json' # Scan Timeout (30 secs) while processing: '/home/pariaqke/oyinkahotel.com/wp-content/uploads/2020/10/.json' # Scan Timeout (30 secs) while processing: '/home/pariaqke/oyinkahotel.com/wp-content/uploads/2020/11/.json' # Scan Timeout (30 secs) while processing: '/home/pariaqke/oyinkahotel.com/wp-content/uploads/2020/12/.json' # Scan Timeout (30 secs) while processing: '/home/pariaqke/oyinkahotel.com/wp-content/uploads/2021/01/.json' '/home/pariaqke/oyinkahotel.com/wp-content/uploads/complianz/tmp/1759165902/mpdf' # World writeable directory '/home/pariaqke/oyinkahotel.com/wp-content/uploads/complianz/tmp/1759165902/mpdf/ttfontdata' # World writeable directory '/home/pariaqke/rentrena.com/885355/radio.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] # Scan Timeout (30 secs) while processing: '/home/pariaqke/rentrena.com/wp-admin/css/colors/blue/images/tmp/v2/njyks/ueoye/index.php' '/home/pariaqke/rentrena.com/wp-admin/css/colors/ocean/build/content/docs/cache/css/xqrhc/index.php' # Known exploit = [Fingerprint Match (fp)] [Exploit URL Exploit [P2088]] '/home/pariaqke/rentrena.com/wp-admin/js/widgets/cache/backup/media/resources/zre/ejoqi/admin.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/rentrena.com/wp-admin/js/widgets/includes/tmp/docs/img/v2/rpn/aju/admin.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/rentrena.com/wp-content/ai1wm-backups/v3/files/tmp/data/img/hnxci/yqx/admin.php' # Universal decode regex match = [universal decoder] # Scan Timeout (30 secs) while processing: '/home/pariaqke/rentrena.com/wp-content/plugins/directorypress/admin/redux-core/assets/css/vendor.css' '/home/pariaqke/rentrena.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/rentrena.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/rentrena.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c' # Suspicious file type [application/x-c] '/home/pariaqke/rentrena.com/wp-content/themes/classiadspro/includes/assets/css/vendor/elusive-icons/index.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1900]] '/home/pariaqke/rentrena.com/wp-content/themes/classiadspro/includes/thirdparty-integration/bbpress/index.php' # Known exploit = [Fingerprint Match (fp)] [Hacker sig Exploit [P2092]] '/home/pariaqke/rentrena.com/wp-includes/Requests/index.php' # ClamAV detected virus = [TO-32525.WEBSHELL.index.php.MD5-eb2739c9ba1fa3d705eb531154ca4e3f.size-14530.UNOFFICIAL] # Scan Timeout (30 secs) while processing: '/home/pariaqke/rentrena.com/wp-includes/block-patterns/docs/2023/v3/iiud/ubu/admin.php' '/home/pariaqke/rentrena.com/wp-includes/blocks/group/index.php' # Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1792]] '/home/pariaqke/rentrena.com/wp-includes/blocks/video/index.php' # ClamAV detected virus = [TO-31306.WEBSHELL.host11_postoo.MD5-b0450e05ec56e4c557d3282dcf34d57d.size-104718.UNOFFICIAL] '/home/pariaqke/rmconsultgh.com/wp-content/plugins/seedprod-coming-soon-pro-5/admin/class-seedprod-admin.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/roaflbg.org/885355/radio.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/pariaqke/roaflbg.org/wp-content/plugins/give/includes/misc-functions.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/roaflbg.org/wp-content/plugins/seedprod-coming-soon-pro-5/admin/class-seedprod-admin.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/roaflbg.org/wp-content/plugins/surerank/inc/admin/dashboard.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/roaflbg.org/wp-content/plugins/surerank/inc/functions/helper.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/roaflbg.org/wp-content/plugins/wp-live-chat-support/admin/class-wplc-plugin-settings.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/roaflbg.org/wp-content/themes/astra/admin/includes/class-astra-menu.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/sibeautyhub.com/wp-content/plugins/google-listings-and-ads/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/sibeautyhub.com/wp-content/plugins/google-listings-and-ads/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/sibeautyhub.com/wp-content/plugins/mailpoet/lib/Config/Menu.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/sibeautyhub.com/wp-content/plugins/seedprod-coming-soon-pro-5/admin/class-seedprod-admin.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/sibeautyhub.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/sibeautyhub.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/sibeautyhub.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c' # Suspicious file type [application/x-c] '/home/pariaqke/uniqducks.com/885355/radio.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/pariaqke/uniqducks.com/wp-content/plugins/seedprod-coming-soon-pro-5/admin/class-seedprod-admin.php' # Universal decode regex match = [universal decoder] '/home/pariaqke/wenchihealthcenter.org/885355/radio.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/pariaqke/wenchihealthcenter.org/wp-content/plugins/coming-soon/admin/class-seedprod-admin.php' # Universal decode regex match = [universal decoder] ----------- SCAN SUMMARY ----------- Scanned directories: 40049 Scanned files: 246028 Ignored items: 1234 Suspicious matches: 112 Viruses found: 3 Fingerprint matches: 16 Data scanned: 5751.33 MB Scan peak memory: 441312 kB Scan time/item: 0.051 sec Scan time: 14545.820 sec Back

Edit File : scanreport-pariaqke-Apr_15_2026_08h58m.txt | Size : 16.12 KB

----------- SCAN REPORT -----------
TimeStamp: Wed, 15 Apr 2026 08:58:22 -0400
(/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/pariaqke/scanreport-pariaqke-Apr_15_2026_08h58m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user pariaqke --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)

Scanning /home/pariaqke:

'/home/pariaqke/.nc_plugin/hidden'
# World writeable directory

'/home/pariaqke/caspebridge.com/wp-content/plugins/click-to-chat-for-whatsapp/new/admin/class-ht-ctc-admin-main-page.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/cosmag.org/123.php'
# ClamAV detected virus = [TO-31859.WEBSHEL.123_php.MD5-dd0de048524466ae8bbae05f497c52f9.size-62.UNOFFICIAL]

'/home/pariaqke/cosmag.org/885355/radio.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/pariaqke/cosmag.org/wp-content/plugins/meta-box/src/Dashboard/Dashboard.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/cosmag.org/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/cosmag.org/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/cosmag.org/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]

'/home/pariaqke/enterprisecoastgh.com/wp-admin'
# World writeable directory

'/home/pariaqke/festivalsghana.com/.tmb'
# World writeable directory

'/home/pariaqke/festivalsghana.com/885355/radio.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/pariaqke/festivalsghana.com/wp-content/plugins/give/includes/misc-functions.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/festivalsghana.com/wp-content/plugins/lastudio-element-kit/includes/framework/dashboard/dashboard.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/css'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/beiruti'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/fira-code'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/fira-sans'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/literata'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/manrope'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/platypi'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/roboto-slab'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/vollkorn'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/fonts/ysabeau-office'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/assets/images'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/parts'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/patterns'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/styles'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/styles/blocks'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/styles/colors'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/styles/sections'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/styles/typography'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/themes/theme/templates'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/upgrade'
# World writeable directory

'/home/pariaqke/festivalsghana.com/wp-content/upgrade-temp-backup'
# World writeable directory

'/home/pariaqke/frecom.net/wp-content/backups-dup-lite/installer/original_files_8d0bbb5-09013259'
# World writeable directory

'/home/pariaqke/frecom.net/wp-content/plugins/duplicator/classes/class.constants.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/freroxconsulting.com/885355/radio.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/pariaqke/freroxconsulting.com/wp-content/plugins/seedprod-coming-soon-pro-5/admin/class-seedprod-admin.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/jertsholdings.com/885355/radio.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/pariaqke/jertsholdings.com/wp-content/plugins/seedprod-coming-soon-pro-5/admin/class-seedprod-admin.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/johmay.com/885355/radio.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/pariaqke/johmay.com/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/joleec.com/885355/radio.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/pariaqke/joleec.com/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/joleec.com/wp-content/plugins/coming-soon/admin/class-seedprod-admin.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/joleec.com/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/joleec.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/joleec.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/joleec.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]

'/home/pariaqke/joleec.com/wp-content/plugins/woocommerce-catalog-enquiry/classes/Admin.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/jymultimedia.com/class3.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/jymultimedia.com/885355/radio.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/pariaqke/jymultimedia.com/wp-admin/network/332451/index.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/jymultimedia.com/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/jymultimedia.com/wp-content/plugins/click-to-chat-for-whatsapp/new/admin/class-ht-ctc-admin-main-page.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/jymultimedia.com/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/jymultimedia.com/wp-content/plugins/seedprod-coming-soon-pro-5/admin/class-seedprod-admin.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/jymultimedia.com/wp-content/plugins/wp-smushit/core/external/plugins-cross-sell-page/app/submenus/class-cross-sell.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/oyinkahotel.com/.tmb'
# World writeable directory

'/home/pariaqke/oyinkahotel.com/885355/radio.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/pariaqke/oyinkahotel.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]

'/home/pariaqke/oyinkahotel.com/wp-content/themes/sohohotel/framework/inc/post-types/post-types/YRyLCa.gif'
# Suspicious image file (hidden script file)
# Scan Timeout (30 secs) while processing:
'/home/pariaqke/oyinkahotel.com/wp-content/uploads/2020/09/.json'
# Scan Timeout (30 secs) while processing:
'/home/pariaqke/oyinkahotel.com/wp-content/uploads/2020/10/.json'
# Scan Timeout (30 secs) while processing:
'/home/pariaqke/oyinkahotel.com/wp-content/uploads/2020/11/.json'
# Scan Timeout (30 secs) while processing:
'/home/pariaqke/oyinkahotel.com/wp-content/uploads/2020/12/.json'
# Scan Timeout (30 secs) while processing:
'/home/pariaqke/oyinkahotel.com/wp-content/uploads/2021/01/.json'

'/home/pariaqke/oyinkahotel.com/wp-content/uploads/complianz/tmp/1759165902/mpdf'
# World writeable directory

'/home/pariaqke/oyinkahotel.com/wp-content/uploads/complianz/tmp/1759165902/mpdf/ttfontdata'
# World writeable directory

'/home/pariaqke/rentrena.com/885355/radio.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]
# Scan Timeout (30 secs) while processing:
'/home/pariaqke/rentrena.com/wp-admin/css/colors/blue/images/tmp/v2/njyks/ueoye/index.php'

'/home/pariaqke/rentrena.com/wp-admin/css/colors/ocean/build/content/docs/cache/css/xqrhc/index.php'
# Known exploit = [Fingerprint Match (fp)] [Exploit URL Exploit [P2088]]

'/home/pariaqke/rentrena.com/wp-admin/js/widgets/cache/backup/media/resources/zre/ejoqi/admin.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/rentrena.com/wp-admin/js/widgets/includes/tmp/docs/img/v2/rpn/aju/admin.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/rentrena.com/wp-content/ai1wm-backups/v3/files/tmp/data/img/hnxci/yqx/admin.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/pariaqke/rentrena.com/wp-content/plugins/directorypress/admin/redux-core/assets/css/vendor.css'

'/home/pariaqke/rentrena.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/rentrena.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/rentrena.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]

'/home/pariaqke/rentrena.com/wp-content/themes/classiadspro/includes/assets/css/vendor/elusive-icons/index.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1900]]

'/home/pariaqke/rentrena.com/wp-content/themes/classiadspro/includes/thirdparty-integration/bbpress/index.php'
# Known exploit = [Fingerprint Match (fp)] [Hacker sig Exploit [P2092]]

'/home/pariaqke/rentrena.com/wp-includes/Requests/index.php'
# ClamAV detected virus = [TO-32525.WEBSHELL.index.php.MD5-eb2739c9ba1fa3d705eb531154ca4e3f.size-14530.UNOFFICIAL]
# Scan Timeout (30 secs) while processing:
'/home/pariaqke/rentrena.com/wp-includes/block-patterns/docs/2023/v3/iiud/ubu/admin.php'

'/home/pariaqke/rentrena.com/wp-includes/blocks/group/index.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1792]]

'/home/pariaqke/rentrena.com/wp-includes/blocks/video/index.php'
# ClamAV detected virus = [TO-31306.WEBSHELL.host11_postoo.MD5-b0450e05ec56e4c557d3282dcf34d57d.size-104718.UNOFFICIAL]

'/home/pariaqke/rmconsultgh.com/wp-content/plugins/seedprod-coming-soon-pro-5/admin/class-seedprod-admin.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/roaflbg.org/885355/radio.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/pariaqke/roaflbg.org/wp-content/plugins/give/includes/misc-functions.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/roaflbg.org/wp-content/plugins/seedprod-coming-soon-pro-5/admin/class-seedprod-admin.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/roaflbg.org/wp-content/plugins/surerank/inc/admin/dashboard.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/roaflbg.org/wp-content/plugins/surerank/inc/functions/helper.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/roaflbg.org/wp-content/plugins/wp-live-chat-support/admin/class-wplc-plugin-settings.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/roaflbg.org/wp-content/themes/astra/admin/includes/class-astra-menu.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/sibeautyhub.com/wp-content/plugins/google-listings-and-ads/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/sibeautyhub.com/wp-content/plugins/google-listings-and-ads/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/sibeautyhub.com/wp-content/plugins/mailpoet/lib/Config/Menu.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/sibeautyhub.com/wp-content/plugins/seedprod-coming-soon-pro-5/admin/class-seedprod-admin.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/sibeautyhub.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/sibeautyhub.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/sibeautyhub.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]

'/home/pariaqke/uniqducks.com/885355/radio.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/pariaqke/uniqducks.com/wp-content/plugins/seedprod-coming-soon-pro-5/admin/class-seedprod-admin.php'
# Universal decode regex match = [universal decoder]

'/home/pariaqke/wenchihealthcenter.org/885355/radio.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]]

'/home/pariaqke/wenchihealthcenter.org/wp-content/plugins/coming-soon/admin/class-seedprod-admin.php'
# Universal decode regex match = [universal decoder]

----------- SCAN SUMMARY -----------
Scanned directories: 40049
Scanned files: 246028
Ignored items: 1234
Suspicious matches: 112
Viruses found: 3
Fingerprint matches: 16
Data scanned: 5751.33 MB
Scan peak memory: 441312 kB
Scan time/item: 0.051 sec
Scan time: 14545.820 sec

Back