����JFIF��x�x����'403WebShell
403Webshell
Server IP : 78.140.185.180  /  Your IP : 216.73.216.170
Web Server : LiteSpeed
System : Linux cpanel13.v.fozzy.com 4.18.0-513.11.1.lve.el8.x86_64 #1 SMP Thu Jan 18 16:21:02 UTC 2024 x86_64
User : builderbox ( 1072)
PHP Version : 7.3.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /proc/self/root/proc/self/root/proc/1630575/root/usr/lib64/nagios/plugins/extra/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /proc/self/root/proc/self/root/proc/1630575/root/usr/lib64/nagios/plugins/extra/check_mining
#!/bin/bash

WARN=0
MATCH_PROCS='cryptonight|/xmcc$|xmrig|cnrig|annizod|milemined'

### check mining for VPS

if [ -f '/usr/sbin/vzlist' ]
then
    CTIDs=$(sudo vzlist -H -octid)


    for ctid in $CTIDs;
    do
        if echo $WHITE_LIST | grep -q $ctid
        then
            continue
        fi

        if sudo vzps -E $ctid all | egrep $MATCH_PROCS >/dev/null;
        then
            IP=$(sudo vzlist $ctid -H -oip | awk '{print $1}')
            MATCH=$(sudo vzps -E $ctid -Ao"command" | egrep "$MATCH_PROCS" 2>/dev/null | head -1 )
            WARN=2;
            RETURN+="CT $ctid with ip $IP, found possible mining: "$MATCH";\n"
        fi
    done

### check mining for SHARED

else
    MATCH=$(sudo ps aux | egrep "$MATCH_PROCS" | grep -v grep)
    if [ ! -z "$MATCH" ]
    then
        echo "Found possible mining:"
        # use command directly to print MATCH with \n
        sudo ps aux | egrep "$MATCH_PROCS" | grep -v grep
        WARN=2
        exit $WARN
    fi
fi

if [ $WARN -ge 1 ];
then
    echo -n -e "$RETURN"
else
    echo "MINING procs not found"
fi
exit $WARN

Youez - 2016 - github.com/yon3zu
LinuXploit