[SAC] High load "geotools" job on osgeo6: cryptonight at work

[Jürgen E. Fischer]

Hi Sandro,

On Mon, 17. Sep 2018 at 10:43:48 +0200, Sandro Santilli wrote:
> > root     pts/0        .............    Thu Sep 13 13:33 - 13:34  (00:00)
> > jmckenna pts/0        .............    Tue Sep 11 05:37 - 20:25  (14:48)
> > jmckenna pts/0        .............    Mon Sep 10 11:15 - 13:27  (02:11)
> > geotools pts/0        104.239.230.121  Mon Sep 10 11:09 - 11:12  (00:03)
> > root     pts/0        ...............  Mon Sep 10 11:07 - 11:08  (00:00)
> > 
> > 
> > I suggest that we put stronger measures this time:
> > Can we now agree that a password reset may be a good idea? Or, ssh key only.
> 
> Please go ahead with a a password reset, but maybe don't send the
> password by mail (the password reset script should print the temporary
> password to stdout for you to send securely to a trusted party).

Apparently they did have a key:

Sep 10 11:09:10 osgeo6 sshd[1150]: Accepted publickey for geotools from 104.239.230.121 port 33281 ssh2: RSA cf:34:61:aa:48:e1:f2:20:16:6e:dc:c1:80:e1:8e:fe


Jürgen

-- 
Jürgen E. Fischer           norBIT GmbH             Tel. +49-4931-918175-31
Dipl.-Inf. (FH)             Rheinstraße 13          Fax. +49-4931-918175-50
Software Engineer           D-26506 Norden             http://www.norbit.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 827 bytes
Desc: not available
URL: <http://lists.osgeo.org/pipermail/sac/attachments/20180917/700e2708/attachment.sig>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: Pflichtangaben
URL: <http://lists.osgeo.org/pipermail/sac/attachments/20180917/700e2708/attachment.ksh>