Aquí os dejo un script para revisar servidores web basados en ISPConfig, chequea logs, etc. Script to search for php2shell in your ISPConfig server. https://github.com/louzaonet/php2shell_hunt_ispconfig