find malicious wget command or tmp violation

cd /usr/local/apache/domlogs


grep wget *


grep lynx *


grep curl *