| Server IP : 43.129.54.214 / Your IP : 216.73.217.113 Web Server : nginx/1.24.0 System : Linux VM-4-108-ubuntu 6.8.0-134-generic #134-Ubuntu SMP PREEMPT_DYNAMIC Fri Jun 26 18:43:11 UTC 2026 x86_64 User : root ( 0) PHP Version : 8.3.6 Disable Function : exec,passthru,shell_exec,system,proc_open,popen,pcntl_exec MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /proc/self/root/tmp/ |
Upload File : |
[2026-07-31 23:24:48 WIB] SUSPICIOUS CRON ENTRY: /etc/cron.d/vps-readonly-monitor:3:*/15 * * * * root /usr/bin/python3 /opt/vps-readonly-monitor/monitor.py --collect >/dev/null 2>&1 /etc/cron.d/vps-readonly-monitor:4:17 */6 * * * root /usr/bin/python3 /opt/vps-readonly-monitor/monitor.py --scan >/dev/null 2>&1 /etc/cron.d/vps-readonly-monitor:5:0 7 * * * root /usr/bin/python3 /opt/vps-readonly-monitor/report.py --send >/dev/null 2>&1 /etc/cron.daily/maldet:42: # prune any quarantine/session/tmp data older than 7 days /etc/cron.daily/maldet:93: $inspath/maldet -b -r /home/?/web/?/public_html/,/home/?/web/?/public_shtml/,/home/?/tmp/,/home/?/web/?/private/ $scan_days >> /dev/null 2>&1 /var/spool/cron/crontabs/root:2:# (/tmp/crontab.usindS/crontab installed on Thu Jul 9 18:35:56 2026) [2026-07-31 23:24:48 WIB] KNOWN WEBSHELL IOC FOUND: /var/www/cahaya-migrasi/ardajayadiesel.com/wp-admin/css/colors/ectoplasm/ectoplas/wp-config-sample.php /var/www/domainesiaCEK/jualhtmurah.com/wp-includes/SimplePie/lib/NW/sim/site-compat.php