SilentCryptoMiner icon indicating copy to clipboard operation
SilentCryptoMiner copied to clipboard

Xmrig-Proxy

Open masterjek opened this issue 9 months ago • 12 comments

Hello Unam. I often see an entry in Xmrig Proxy - Ip Adress - "Wrong hash 595c7d5ce219c8bd5c96e706886905429f458dc35dad7fdd526fba1af556d18c e49f37873b64ad12a5691d07116c7598f7609bd7443dca2774bb04bbcf150000" And every time it is the same IP, it repeats itself very often and rejects the balls every couple of seconds. As I understand it, this worker has connection problems. I don't use the web panel right now. Only remote configuration. Is there any way to disable or block this IP's access to Xmrig Proxy? Because it still doesn’t work, but it sends out bad balls very quickly and only spoils the statistics.

masterjek avatar Apr 30 '24 18:04 masterjek

You can block the IP address in your firewall, for Linux you can use ufw and for Windows the Windows Firewall.

UnamSanctam avatar Apr 30 '24 23:04 UnamSanctam

You can block the IP address in your firewall, for Linux you can use ufw and for Windows the Windows Firewall.

Exactly Unam you are a genius, how could I forget for this method, thank you very much.

But there is a second question. Where there are few workers, I can see it with my own eyes, there the statistics are moving slowly. But where there are a lot of workers, the statistics go very quickly, is there a way in Xmrig Proxy to enable recording workers with errors in a text file?

masterjek avatar Apr 30 '24 23:04 masterjek

You can print out everything into a text file but not only the errors as far as I know.

UnamSanctam avatar Apr 30 '24 23:04 UnamSanctam

Насколько я знаю, в текстовый файл можно распечатать всё, но не только ошибки.

Is this done using this command? - "access-log-file": null,

masterjek avatar Apr 30 '24 23:04 masterjek

This is the two log options descritpions:

  -l, --log-file=FILE           log all output to a file
  -A  --access-log-file=FILE    log all workers access to a file

UnamSanctam avatar Apr 30 '24 23:04 UnamSanctam

I did everything, added the IP to the blocking, rebooted the server. 3 In the screenshot I underlined that his access is denied. But according to the logs, it continues to connect and send incorrect hashes. proxy 0000 rejected (36/4+0) diff 480045 ip 184.66.24.211 "Wrong hash 2e75bde0ef4eda491a5f151536a4b93203a51aec96a3f7a1144fc8444f648381 86d0728ad67b4638b3b770e1c22380953c2e011c3bd58f97a66bebc876030000" (55 ms)

masterjek avatar May 01 '24 09:05 masterjek

I believe it might have to be at the top, since the other port allows might be overwriting the block.

UnamSanctam avatar May 01 '24 09:05 UnamSanctam

Tell me how to move them up in the list?

masterjek avatar May 01 '24 09:05 masterjek

Remove the current deny rule, then enter something like sudo ufw insert 1 deny from 184.66.24.211 and it should probably add it at the top.

UnamSanctam avatar May 01 '24 09:05 UnamSanctam

Remove the current deny rule, then enter something like sudo ufw insert 1 deny from 184.66.24.211 and it should probably add it at the top.

Yes it worked, it places the rule above the rest. Now I will monitor whether access for this IP is completely blocked. I also want to ask, after adding the rules, do I have to restart the server?

masterjek avatar May 01 '24 09:05 masterjek

Alright great, and no you shouldn't have to restart anything for the rules to apply.

UnamSanctam avatar May 01 '24 10:05 UnamSanctam

Unam, can you tell me how to allow IP in Ubuntu but immediately in the range from and to - 86.21.200.0 - 86.21.207.255

masterjek avatar May 04 '24 20:05 masterjek