I got hacked: My Hetzner server started mining Monero

Re:I got hacked: My Hetzner server started mining Monero by jakelsaunders94 on Wednesday December 17, 2025 @06:43PM (#46307181)

I did see your comment on Firewall, and you're right about the escape. It seems safe enough for now. Between the hacking and accidentally hitting the front page of HN it's been a long day.

I'm going to sit down and rewrite the article and take a further look at the container tomorrow.

[ Parent | on HN ]

Re:I got hacked: My Hetzner server started mining Monero by 3np on Wednesday December 17, 2025 @07:13PM (#46307420)

Hey, thanks for taking the time to share your learnings and engage. I'm sure there are HN readers out there who will be better off for it alongside you!

(And good to hear you're leaving the LLMs out of the writing next time <3)

[ Parent | on HN ]

Re:I got hacked: My Hetzner server started mining Monero by microtonal on Thursday December 18, 2025 @03:13AM (#46310111)

Before rewriting the article, roll out a new server. Seriously. It seems you do not have the skills yet to do a proper audit. It’s better to roll out a pristine server. If that is a lot of work, it is a good moment to learn about declarative system configuration.

At any rate, this happening to you sucks! Hugs from a fellow HN user, I know that things like this can suck up a lot of time and energy. It’s courageous to write about such an incident incident, I think it’s useful to a lot of other people too, kudos!

[ Parent | on HN ]