does this root directory look familiar

[doperobot]

hope im in the right forum


I just gained access through ssh and this is root....saw pools and wondered if this is a miner?

sorry, im learning

 

[doperobot]

i uploaded agent.php learning shells and whatnot

 

[Dread Pirate Roberts]

judging by randomly generated usernames this system was hacked many times already lol so it could contain any possible kinds of malware not only miners.

 

[doperobot]

judging by randomly generated usernames this system was hacked many times already lol so it could contain any possible kinds of malware not only miners.

really? you think? supposedly clean

am i right that chart is the file struture on the partitions?

 

[Dread Pirate Roberts]

really? you think? supposedly clean

am i right that chart is the file struture on the partitions?

"yohkupqqigly" or "xoxb4lwm7unh" are not very common usernames, however they could be real.
check what is inside .sh and .txt files, also check all .*history files like .bash_history