[SAC] High load "geotools" job on osgeo6: cryptonight at work

Sandro Santilli strk at kbt.io
Mon Sep 17 01:43:48 PDT 2018


On Sun, Sep 16, 2018 at 04:32:10PM +0200, Markus Neteler wrote:

> Clearly, "geotools" was connected that time, for 3 seconds:
> 
> root at osgeo6:~# last
> ...
> root     pts/0        .............    Thu Sep 13 13:33 - 13:34  (00:00)
> jmckenna pts/0        .............    Tue Sep 11 05:37 - 20:25  (14:48)
> jmckenna pts/0        .............    Mon Sep 10 11:15 - 13:27  (02:11)
> geotools pts/0        104.239.230.121  Mon Sep 10 11:09 - 11:12  (00:03)
> root     pts/0        ...............  Mon Sep 10 11:07 - 11:08  (00:00)
> 
> 
> I suggest that we put stronger measures this time:
> Can we now agree that a password reset may be a good idea? Or, ssh key only.

Please go ahead with a a password reset, but maybe don't send the
password by mail (the password reset script should print the temporary
password to stdout for you to send securely to a trusted party).

--strk;


More information about the Sac mailing list