PATH:
home
/
sparklp6
find ~/public_html -type f -iname "*.php" ! -iname "importbuddy.php" ! -iname "_repairbuddy.php" ! -iname "class-smtp.php" ! -iname "Excel5.php" ! -iname "OLERead.php" ! -iname "script.php"| xargs -i egrep -Hli '\@\$GLOBALS.*continue|GLOBALS.*x61|FbU73jxn|edE0lF|IGlmICgg|"1.sh"|GLOBALS.*ieetj84|rBOxlFeDa|rWmpisiBWQ|na20571|eval.*q272748|GET.*ineedthispage|x77.x69.x76|rWmyiJg3T|hacked\ by|eNqdWPtv|vd56b6998|filesman|Googleman|YYKJKaSZ.*\$_POST.*ppeRDsIfDuUi|5ebfbb39|c99shell|bar\/index|client.*x05.x01|POST.*do.*brut|img.*empty.*referrer|AtOPvMzpDq|5UpbRhpW|Qb08tTv2|ko0l|eval.stripslashes.array_pop\(\$_POST|www.*_POST.*yt.*ad.e|QGluaV9|doctoregpg|AnonGhost|AJVkA2M4om|an9dcW1i|PCT4BA6OD|aXNfdXBsb|zZ3HjuNg|E7DsuED2|DarkCrewFriends|zaprosname|HZBL02N|edoced|ZXZhbChiY|7X17f9rG|JGNtZD1i|7b35f9pV0|x7f.x45.x4c|ZXZhbChzd|snatveyz|x65.x76.x61|\@\$_COOKIE.*\$_COOKIE.*\$_COOKIE.*\$_COOKIE|testa.*veio|ezenmedia|19ca14e7ea63|php\ \ \ \ \ \ \ \ .*\$|shakeboomb|js.jquery.min.php|chr.*chr.*chr.*\..*\..*eval' "{}" #1772739080 grep 35.174.145.124 /var/log/exim_mainlog | tail #1772739184 grep 35.174.145.124 /var/log/exim_mainlog #1772739269 sudo grep 35.174.145.124 /var/log/exim_mainlog | tail #1772739326 su -
[-] .ftpquota
[edit]
[-] .htaccess.phpupgrader.initial
[edit]
[+]
.gnupg
[+]
.caldav
[+]
.fontconfig
[+]
.ssh
[-] malware.txt
[edit]
[+]
.cphorde
[-] .kshrc
[edit]
[+]
.wp-toolkit
[+]
ssl
[-] .bashrc
[edit]
[-] .htaccess
[edit]
[+]
.cpanel
[+]
wordpress-backups
[-] scanreport.txt.1696616250
[edit]
[+]
.subaccounts
[+]
cache
[+]
.cpan
[+]
public_html
[-] .bash_profile
[edit]
[+]
.pki
[+]
mail
[-] .lastlogin
[edit]
[+]
.cpanel-datastore
[+]
.htpasswds
[-] .imunify_patch_id
[edit]
[+]
.wp-cli
[+]
.trash
[+]
access-logs
[+]
tmp
[-] .wp-toolkit-identifier
[edit]
[-] .gemrc
[edit]
[-] .htaccess.phpupgrader.edf8c707
[edit]
[-] webalizer.conf
[edit]
[-] .myimunify_id
[edit]
[+]
perl5
[-] 1.php
[edit]
[-] .zshrc
[edit]
[+]
.sqmailattach
[+]
etc
[+]
.spamassassin
[-] .bash_history
[edit]
[-] .contactemail
[edit]
[-] .cpanel-logs
[edit]
[+]
.softaculous
[-] .permslog
[edit]
[+]
.autorespond
[-] .emacs
[edit]
[-] .dns
[edit]
[+]
.koality
[+]
.razor
[+]
logs
[+]
.sqmaildata
[+]
sparklerfilter.org
[+]
.security
[-] scanreport.txt
[edit]
[+]
www
[+]
public_ftp
[-] .htaccess.phpupgrader.8eed3c0f
[edit]
[+]
oil-max.com
[+]
..
[-] .bash_logout
[edit]