Server is mined

In the past day or two, I found that there was a problem with my server VPS network. At first, I didn’t think that it might be caused by Cloud flare. Later, I found that it was basically inaccessible. The mine program is hibernating). At first glance, there is nothing abnormal about the program. It is basically the kernel program and the program running by itself. Later, there is a problem. After careful research, I found that the load was extremely high for a period of time, and the IO was also abnormal. The crypto mining program is running as a kernel program, and there is no way to kill -9. Network search.

The general solution version is to reinstall in case of trouble. In fact, there should be other methods, but it may be more complicated, and it may not be completely eliminated. Fortunately, the programs and mitigations used by the server itself are not very complicated, so the system is reinstalled.

In addition, if possible, it is recommended to take a snapshot and back it up, which can save a lot of trouble later.