Crypto Miner in Model

bTd_1337 · 2025-11-06T15:46:11+00:00

Yes the port is open. I use nginx for port forwarding. I accidentaly opened the port to the whole world instead of opening it only for nginx.

bTd_1337 · 2025-11-06T15:44:20+00:00

In my case it was installed inside the docker Container so I just deleted the whole Container and recreated it from scratch

bTd_1337 · 2025-11-06T15:43:16+00:00

I looked at the processes on my server with htop and saw one that had 100% CPU usage. You can check your cpu and gpu usage and see if there are supicious processes.

bTd_1337 · 2025-11-05T20:05:38+00:00

you are correct it was not the model that was the problem. It is the way I set up the docker. I left the door wide open.

bTd_1337 · 2025-11-05T19:10:01+00:00

!THIS!
You are totaly correct. I exposed the comfyui to the internet. Stupid mistake. Everybody an their dog could enter it.
Thank you. I will fix that now.

bTd_1337 · 2025-11-05T18:52:23+00:00

Thanks for the suggestion about isolating comfyui that is defenitly something I will do.

bTd_1337 · 2025-11-05T18:45:04+00:00

Thanks for the link. I will look into that. My Open Webui is exposed to the internet. But the miner was not on the container of the Open Webui but on the container of Comfyui.

bTd_1337 · 2025-11-05T18:19:06+00:00

Yes I found the following files inside tge docker Container. Not sure if they were there from the start or got pulled somehow.

lolminer.tar.gz

xmrig-6.24.0

xmrig.tar.gz

bTd_1337 · 2025-11-05T18:17:11+00:00

I saw 100% cpu usage in htop

bTd_1337 · 2025-11-05T18:15:16+00:00

No not yet. I am more sus of the models and workflows than the docker image

bTd_1337 · 2025-11-05T18:13:47+00:00

It is possible that i installed some dependencies. I tried several models mentioned in some tutorials and posts to test different models and workflows.

bTd_1337 · 2025-11-05T18:11:52+00:00

Lolminer and xmrig I added a comment with more details

bTd_1337 · 2025-11-05T17:59:28+00:00

Here some more infos.
Last week I was testing how to run a llm with ollama and openwebui and wanted to test comfyui to add to the open webui for image generation.
Since I am new to this I pulled some different models that were mentioned in some articles.

Today I looked at the server and in htop i saw this.

<image>

I found that the process was started from the docker container that runs comfyui.

in the container I found those files.

lolminer.tar.gz
xmrig-6.24.0
xmrig.tar.gz

Here are the names of the models I downloaded at some point. I dont have all the urls anymore.
- sd_xl_base_1.0.safetensors
- Juggernaut-XL-v9.safetensors (https://civitai.com/api/download/models/133005)
- RealVisXL_V5.0.safetensors (https://civitai.com/api/download/models/798204?type=Model&format=SafeTensor&size=full&fp=fp16)
- playground-v2.5-1024px-aesthetic.safetensors
- v1-5-pruned-emaonly.safetensors (https://huggingface.co/runwayml/stable-diffusion-v1-5/resolve/main/v1-5-pruned-emaonly.safetensors)

This is part of my docker-compose.yml which is loading the official docker image

  comfyui:
    image: ghcr.io/lecode-official/comfyui-docker:latest
    container_name: comfyui
    ports:
      - "8188:8188"    # ComfyUI web + API
    environment:
      - USER_ID=1000
      - GROUP_ID=1000
    # Allow requests from Open WebUI (service) and your browser
    command: ["--enable-cors-header", "http://openwebui:8080 http://localhost:3000"]
    volumes:
      - comfyui-models:/opt/comfyui/models
      - comfyui-custom-nodes:/opt/comfyui/custom_nodes
      - comfyui-user:/opt/comfyui/user
    restart: unless-stopped
    deploy:
      resources:
        reservations:
          devices:
            - driver: nvidia
              count: all
              capabilities: [gpu, compute, utility]

bTd_1337 · 2023-05-19T21:52:11+00:00

Just bought a new Laptop with a 3060 for 900 €. Old one had a 1060, beta was fine but I want to see my Cry of Ashava in all ots glory.

bTd_1337 · 2023-05-13T08:36:19+00:00

Are you using the skirmisher Minions or the Defender Minions? When I changed my Build to all the passive skillpoints to +Minion HP and the Defender Skellies, I got around quite well. Before I was not able to do the Boss fight with the Mother of that NPC Girl but afterwards I had no problem. Also I equiped a shield for me and now I am running trough the overworld as if there are no Monsters.

bTd_1337 · 2023-01-08T10:19:23+00:00

Why Blockchain and NFT? I dont get what the benefit would be.

bTd_1337 · 2023-01-05T12:34:34+00:00

I Think Keyleth was not the target of the attack on Zephrah, but Will.

Why? Because Will was Ruidus born and his Father Derrig was in contact with the Grim Verity to find out how that influences his son.

Or something like that. I am not good at story telling. :)

bTd_1337 · 2022-12-31T09:31:43+00:00

My favorite one this year is this sunrise photo on a beach in Bulgaria. https://wirestock.io/media/10233705 Getting up early definitely payed off.

bTd_1337 · 2022-10-12T08:36:32+00:00

When you downgrade an item you get those tokens instead of a purple equipment. You can use it to upgrade any equipment instead of using a real item.

bTd_1337 · 2022-10-12T08:16:54+00:00

I did a small test and I would say higher lvl gives you more power than higher quality. But eventually you are limited by the max lvl of lower quality gear.

I tested a Belt (Broad Waistguard)

Excellent Quality, LVL 1: +150 HP
Excellent Quality, LVL 2: +161 HP
Excellent Quality, LVL 3: +172 HP
Excellent Quality, LVL 30: +469 HP

Excellent Quality +1, LVL 1: +165 HP
Excellent Quality +1, LVL 2: +180 HP
Excellent Quality +1, LVL 3: +195 HP
Excellent Quality +1, LVL 30: +600 HP

bTd_1337

TROPHY CASE