The server is used for mining machines
to prevent viruses from entering the computer
bitcoin mining machine is a kind of computer used to earn bitcoin. This kind of computer generally has professional mining chips and works in the way of burning graphics card, which consumes a lot of power. It is one of the ways to get bitcoin that users download software from personal computer and then run specific algorithm to get corresponding bitcoin after communicating with remote server
mining is actually a competition of performance and equipment, and a competition of computing power among miners. Miners with more computing power are more likely to dig bitcoin. With the increase of computing power in the whole network, it is more and more difficult to dig bits with traditional devices (CPU, GPU). People have developed chips specially used for mining. Chip is the core part of mining machine. The process of chip operation will proce a lot of heat, in order to cool down, bitcoin miner is generally equipped with heat sink and fan
bitcoin is a kind of virtual currency. Bitcoin mining system is the process of carrying out mathematical operation for bitcoin network through computer hardware. Miners who provide services can get a reward, because the network reward is calculated according to the tasks completed by miners, so the competition for mining is very fierce
bitcoin mining started with low-cost hardware such as CPU or GPU, but with the popularity of bitcoin, the mining process has changed greatly. Nowadays, the mining activities are transferred to the field programmable gate array, and the hash speed can be achieved through optimization. The mining efficiency of this mode is very high
of course
but choose the currency that can be mined by CPU
1. CPU mining itself is less, and the more famous ones are XmR, HSR, etc.
2. The cost of renting server should be taken into account
mining is basically impossible, he used
a new customer recently consulted with sine security company, saying that his server often fails to open the website of the card, and the remote connection to the server is extremely slow. Sometimes the Ping value reaches 300-500, and he often switches. After listening to the customer's words,
will generally judge that he has been attacked by CC + DDoS mixed traffic, It's strange to say that there is no traffic attack on the computer room. It's not a traffic attack, but it also causes the server card and website to fail to open. What kind of attack is this? In order to solve the problem of
client server card, we immediately arranged a security engineer to carry out security detection and deployment on his Linux server
{rrrrrrr}
Mining Trojan horse is also designed. If the mining process is forced to stop by customers, it will automatically start to continue mining to achieve uninterrupted mining.
careful inspection shows that it is through setting the hourly task plan, remotely downloading shell mining Trojan horse, and then executing, Check whether the current process exists or not. If not, start the Trojan horse to mine
a detailed security inspection was carried out on the client's Linux server. It was found that fortunately, there was no encrypted server data, and the worm was infected with the disease
virus. If the data was encrypted, the loss would be great. The client was a platform, and the client's data was very important. After finding out the mining Trojan horse,
do customers need to know how the server is attacked? Was the Trojan horse uploaded? It can prevent the attack
in the later stage
through the security detection and analysis of our security engineers, we found that the server uses Apache Tomcat environment, the open architecture of the platform is JSP + Oracle database, and Apache Tomcat uses the version of 2016, which leads to the serious remote command execution vulnerability of Apache, Through this vulnerability, the intruder can directly invade the server and get the administrator permission of the server,
sine security engineer immediately repairs the Apache vulnerability and clears the Trojan horse. So far, the problem has been solved, the client server
runs stably, and the network station opens normally strong>
see when it was installed, who contacted the server, and log.
Absolutely
세 51032; 49345;