[GRLUG] htop issue

[Grand Rapids Linux Users Group]

Also the <random string> is actually the crypto wallet address.

On Wed, Jan 11, 2023 at 5:22 PM Grand Rapids Linux Users Group <
grlug at grlug.org> wrote:

> Looks like crypto mining scripts running on your machine.
>
>
> On Wed, Jan 11, 2023 at 5:21 PM Grand Rapids Linux Users Group <
> grlug at grlug.org> wrote:
>
>>
>> Trying to catch problems on a web server, .. installed htop and saw
>> hundreds of processes like:
>>
>> ./htop -a yescryptR16 -o 198.50.168.213:6333 -u <random string> -p x
>> -cpu-..
>>
>> Nothing in ps ax looked weird, all recognizable. No htop files other than
>> the package. Ancient Ubuntu machine, ..
>>
>> Why would htop be reporting in this manner?
>>
>>         TIA!
>> --
>> grlug mailing list
>> grlug at grlug.org
>> https://shinobu.grlug.org/mailman/listinfo/grlug
>>
> --
> grlug mailing list
> grlug at grlug.org
> https://shinobu.grlug.org/mailman/listinfo/grlug
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://shinobu.grlug.org/pipermail/grlug/attachments/20230111/5de2afa3/attachment.htm>