Yeah I did consider just killing it, I'm going to keep an eye on it for a few da... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		jakelsaunders94 5 days ago \| parent \| context \| favorite \| on: I got hacked: My Hetzner server started mining Mon... Yeah I did consider just killing it, I'm going to keep an eye on it for a few days with a gun to it just in case. I was lucky in that my DB backups were working so all my persistence wax backed up to S3. I think I could stand up another one in an hour. Unfortunately I didn't keep an image no. I almost didn't have the foresight to investigate before yeeting the whole box into the sun!

muppetman 5 days ago [–]

Enable connection tracking (if it's not already) and keep looking at the conntrack entires. That's a good way to spot random things doing naughty stuff.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact