Bitcoin Forum

Hello, pelase can anybody help me?

Ideally with ssh knowledge.. Official support comes to me that he does not know what I'm talking about..

1. I have a public IP address assigned to my miners (they are in external "warehouse" of IT company), so that I can remotely manage them but after a while the logon stops functioning.. Maybe few days working well.. Even did not help HW reset, shutdown, power on, etc.. The login page is loaded but after clicking on login nothing is happening but miners obviously minning when I check them on the pool page, BUT - point 2

2. when mining on nicehash my miners always at 20:00 - 23:30 all fall, then try to start.. what it is ???? of course I can not change the pool when I can not log in, cant update firmware (i have A9 b29+_20180911_095547, new is A9 b29+_20181009_094439) .. z9 mini works without any problems how to login (also remotely) also mining..

Can anybody help me with ssh? I need restart them, update firmware and understand what's going on :-(...

well, complex situation!

do each Asic miner have its own PUBLIC ip-address ? ? ?
Because if so then anyone can log in to your A9 as root via SSH.


1.
SSH into A9:
user: root
password: blacksheepwall


in
/var/www/webif/api/Controller/MinerController.php

you will find among other code snippets find this:
/*
     * Reset to factory reset deleting all the content of /config and then reboot the miner
     */
    public function factoryResetAction() {
        global $config;
        header('Content-Type: application/json');
        // shell_exec('sleep 4; rm -rf '.$config["configDirectory"].'/*;/bin/systemctl reboot >/dev/null 2>/dev/null &');
        shell_exec('sleep 4;cd '.$config["configDirectory"].';ls | grep -v "author.au" | grep -v "cg.conf" | xargs rm -rf;/bin/systemctl reboot >/dev/null 2>/dev/null &');
        echo json_encode(array("success"=>true));
    }


Perhaps someone else here will translate this into something you can run from SSH to make a factory reset:

2.
Don't mine on nicehash if you get that timeout !!!


3.
Can you not login as guest ?
user: guest
password: guest

Then perhaps its possible to run code snippet by opening up "page inspection" or something in web browser?

Just an idea !

Good luck!

Thank you for reply.

Yes, each miner have own ip. Anyone can log in with ssh, if know ip, but what he get? Everytime I can control if they work for me, etc.. It's not server with personal informations, etc.. But you have right.. When will miners stable, I remake it.

Thanks for login and psw, I will try it.

I can't do anything now (can't change pool - can't login to miners).

Guest same like admin - freez after click login without any error message..

Can you try it for me? I don't understand ssh too much. But I think, that pass was incorrect, but maybe I do something wrong.. IP is public, so we don't need TeamViewer for now.

Please PM me, thanks.

I'm not right guy for tinkering with linux.

For SSH you have Putty.exe.
https://www.chiark.greenend.org.uk/~sgtatham/putty/

You can also use WinSCP.exe for login in and browsing.
https://winscp.net/eng/download.php

Do you have one A9 and that one is problematic or do you have more then one and only a single on is problematic or all of them with same problem ?

Can't you even login with SSH ?

Can you login with WinSCP ?

If you can login with SSH then try this command for restart (restarts cgminer by restarting A9 from within SSH session):
systemctl restart cgminer
Press "Enter"-button

I think if you give command:
systemctl reboot
Press "Enter"-button
(I think you will get A9 to do full reboot as if you where starting the A9 from power off.)

If you can SSH in (if you can login with winscp then you browse and dubbelclick on the file):
cd /config
Press "Enter"-button
cat web-users.json   (will show what is in file witout edit capability)
Press "Enter"-button

(to check that you HAVE and ONLY HAVE user: admin with a hashvalue and user: guest with hashvalue so that nobody added another user or removed any of the 2 standard users for web-interface login.)

If you can't login with SSH then I don't know how anyone can help ?!?

If you wan't someone to help from distance with logiging in I'm not the right one to tinker with linux system.
I'm sorry but I know my limits.

If you manage to SSH into A9 then you can change pool like this:

cd /config
Press "Enter"-button
vim cgminer.conf  ('vim' = editor)  (You should google keyboard commands for vim-editor)
Press "Enter"-button
i    ('i' = insert mode) (NOW u can change in that file) (BE CAREFUL)

(when done do this)
Press "Esc"-button
:wq!
Press "Enter"-button
(You will get warning that read only or something.)
Press "Enter"-button anyway


(verify that your change has taken effect)
cat cgminer.conf
Press "Enter"-button

When you check the file it should be something like this:
{
    "pools": [
        {
            "url": "stratum+tcp://50.225.198.65:3336",
            "user": "imine2",
            "pass": "n=a9zmaster111"
        },
        {
            "url": "stratum+tcp://eu1-zcash.flypool.org:3333",
            "user": "t1d35jvkzKcWybpCqojZmgDZkcFC7iBwe8w.111",
            "pass": ""
        },
        {
            "url": "stratum+tcp://45.79.223.173:17023",
            "user": "imine2.a9zmaster111",
            "pass": "x"
        }
    ],
    "api-listen": true,
    "api-port": "4028",
    "api-allow": "R:0/0,W:127.0.0.1",
    "A1Fanspd": "30",
    "A1Fanmode": "0",
    "T1adjust": "3",
    "T1performance": true
}


And for changes to take effect:
systemctl restart cgminer  (restart A9 from within SSH session)
Press "Enter"-button

First ip is prohashing.com and last is MPH and 111 is for home network IP 10.0.1.111.

I usually ping regulary to see if there are more then one IP to find out which one has lowest latency and then use IP-address direct so I have as low latency as possible.

Here are some guys who probably can help with securing IP, I hope.
https://bitcointalk.org/index.php?topic=4432819.msg43367860#msg43367860

If you make the whole filesystem Read/Write by using this command:
mount / -o rw,remount

then don't forget when finished to make it Read only again like this:
mount / -o ro,remount

This way you can PREconfigure this file:
/etc/cgminer.conf.default

and setup the pools to your own worker and pool so that if you make a factory restore of the machine it will start mining for you at once.

Good luck!

Thank you so much, I will try it, and learn.. I will post my results..

I have 5x A9 zmaster and all have same problem.. Z9 mini is ok..

Look at graph..

https://image.ibb.co/cgAttp/Screenshot-20181013-170701.jpg
https://image.ibb.co/f4vCKU/IMG-20181013-172104.jpg

I have to say that it was stable on the slush pool, but it is 80% profitable. But now there is the problem that - I will not do anything about it, so first try to log in, then try different options.

Are the z9 mini's and A9's all connected to same network switch, bridge, router, firewall or whatever solution there is ?

Because the speed of A9's perhaps there are more DNS questions or something that clogg up some memory cache in the switch, bridge, router, firewall or whatever solution. Perhaps you could also have at the asic-miners location a local PC, rasberry pi or whatever to vpn into and administer the A9's "locally" via a router/switch and with no Public IP's or something ?

You could also try prohashing.com because they don't fill up the logs of the A9's as fast so they don't reboot because "memory full" issue.

Just some thoughts! ! !

Ok, I will try everything.

Anyway I can't log to them locally too, without internet, directly on same router.. All in same room on same router.. I will post my solution, If I repair it.

By the way:

have you tried a program like awesome miner
http://www.awesomeminer.com/

2 machines can you have with the free license !!!

to see if you can see them and or get som response from them!

If they don't have internet I think they will reboot after a while so perhaps not easy find problem if they don't find internet ! ! !

Have you tried to install a new web-browser on your computer and login with that one and reset of router/orwhatever at home so it's not a local problem at "home" or tried a new computer which never logged into the A9's before ?

Best of luck!

you might also find some good info here, just found ut trying to google:
hardware factory reset innosilicon
(didn't find solution yet!)

https://bitcointalk.org/index.php?topic=2549898.0

I tried more pcs, miners have internet - web login page load, this working (from everywhere), but after click on login it freezes.. Awesome miner i tried with gpu mining not asic.. I will try.

Lol connect with Awesome miner works... So i need learn ssh for update/factory reset, because login still not working...

It have 72 temp.. its ok? But hashrate is great 61/ 56avg

with putty: Access denied after enter psw on port 22.. tried also admin/my psw, admin/admin, guest/guest, root/blacksheepwall or innot1t2 or t1t2t3a5, all denied

and now is 20:00 and awesome miner status disconnected.. so i must wait to 23:30 for mining, BUT ping for IP of miner works...

when miner down, he sometimes connect to f2pool on that adress t1VN9EjK1hWLBmcQuA6hGzhaVohFrnVihDk (its not my...) but with very low speed..

perhaps this can help a little:
https://support.awesomeminer.com/support/solutions/articles/35000085916-awesome-miner-http-api

and google this:
rpc protocol awesome miner


as I understand awesome miner use rpc protocol.

you should remove picture because I can see IPadress.
And so can everyone else!!!


just removed pic from your "quote" in my post !!!

yes, sry, please edit quote..

edit. I do not have a paid version, I like to pay someone to fix the problem, but I do not want to buy it if I do not know it will help.

seem like you are number 31304 who sends work to that t1VN9EjK1hWLBmcQuA6hGzhaVohFrnVihDk

because in the pic his adress was:
t1VN9EjK1hWLBmcQuA6hGzhaVohFrnVihDk.31304

tried google:
t1VN9EjK1hWLBmcQuA6hGzhaVohFrnVihDk

gave this:
https://zcash.plutomonkey.com/address/t1VN9EjK1hWLBmcQuA6hGzhaVohFrnVihDk

and
https://explorer.zec.zeltrez.io/address/t1VN9EjK1hWLBmcQuA6hGzhaVohFrnVihDk


so do you have same ZEC address on the other A9's ?

and what worker number do they have ?

can you block
f2pool.com   ? ? ?

have you checked with Innosilicon or wherever you bought them HOW TO make a
HARWARE FACTORY RESTORE ? ? ?

I beleive this might be relevant for understanding API calls of A9's

https://halongmining.com/api/


and this:

https://readthedocs.org/projects/dragon-rest/downloads/pdf/latest/




https://www.reddit.com/r/decred/comments/8i7kfi/does_the_decredmaster_d9_run_off_dragonmint/
"Yes, it is confirmed. The Innosilicon D9 and the Dragonmint B29 are the exact same machine. The Innosilicon S11 and the Dragonmint B52 are also the same machine. I installed the S11 firmware on my B52 recently. It runs a bit warmer, but the poolside hashrate is noticeably higher and more stable."

hmm speed inceases, that adress isnt my... seems like i have been hacked, but for 3.5h/day???

second miner have different adress (have 2) f2pool too... next worker have number 22469 on both adresses

factory hw reset should be by press IP button for 8 sec (search on internet).. so i will try as soon as I can

this is too complicated for me, my english is basic and IT knowledge too..

check with Innosilicon for firmware to flash onto SD-card and howto restore factory settings !

BUT...

Could it be that someone hijacked the calls from web browser.
perhaps it's in the router or something with redirection or so?

when you get login page.
if you rightclick and choose "view source" it should look like this:

<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/manifest.json"><link rel="shortcut icon" href="/favicon.ico"><link rel="stylesheet" href="css/bootstrap.min.css"><link rel="stylesheet" href="css/fontawesome-all.min.css"><link rel="stylesheet" href="google_fonts/font.css"><title>AsicMiner</title><link href="/static/css/main.1a23456b.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div><script src="js/jquery.min.js"></script><script src="js/bootstrap.min.js"></script><script></script><script type="text/javascript" src="/static/js/main.a12bcde3.js"></script></body></html>



PS. I have changed the numbers and letters in these two files:
main.1a23456b.css

and
main.a12bcde3.js


BUT other then numbers and letters in those 2 filenames you SHOULD get exactly the same as above and nothing else at login page!

<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/manifest.json"><link rel="shortcut icon" href="/favicon.ico"><link rel="stylesheet" href="css/bootstrap.min.css"><link rel="stylesheet" href="css/fontawesome-all.min.css"><link rel="stylesheet" href="google_fonts/font.css"><title>AsicMiner</title><link href="/static/css/main.7f78466b.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div><script src="js/jquery.min.js"></script><script src="js/bootstrap.min.js"></script><script></script><script type="text/javascript" src="/static/js/main.a82afcc3.js"></script></body></html>

IDENTICAL ! ! !

Even the two files I changed had exactly same name!!!

What it means?

Here are some guys who seems to know howto communicate with the A9

https://bitcointalk.org/index.php?topic=4432819.msg44021424#msg44021424



Could you NOT login via SSH ?
via Winscp ?

What does it say ?

If you use IP report I think you only reset IP to :
https://bitdadmining.com/how-to-find-asic-miner-ip-address
"Innosilicon Miner:
The defaut of all Innosilicon miner IP address is: 192.168.1.254
Make sure the IP address of your router is 192.168.1.1. if not, you need to change the IP address of your router to 192.168.1.1
Make sure there are no other devices confict with the miner IP: 192.168.1.254.
You can change the IP address after login to control panel (defaut password to change pool, wallet or IP: 12345678)"

(PS. Don't think default password correct in instructions. think password: admin for user: admin)

Means that code on the page OK and doesn't explain why it freeze after you press "Login" !

with your consent I will try with WinSCP on port 22 on that ip-address that you had in the picture ?
do you give your consent ?

yes, try it please, for questions above I answer tommorow, iam on phone now.. Both say me access denied.. Can you pm me ur Skype for faster communication?

OK!
will report findings!

don't have skype or anything like that!
i'm quite Oldschool  and  I live in Europe :)

Ok, iam from Europe too  ;)

It doesn't accept password: blacksheepwall for user: root on port 22
Seems like somehow the password been changed ! ? !

When I try web browser and try login as user: guest with password: guest it "freeze up" and doesn't go further.

Portscan over Internet against your IP with Netscanner64.exe from https://www.mitec.cz/netscan.html :
Port 1 to 65535 both TCP and UDP gives :
21 TCP (FTP)
22 TCP (SSH)
80 TCP (HTTP)
554 TCP (RTSP)
4028 TCP (DTServer)
7070 TCP (ARCP)
8001 TCP (VCOM Tunnel)

I did NOT find this :5355 TCP (LLMNR)


Portscan, local against a working A9 in my home network with Netscanner64.exe from https://www.mitec.cz/netscan.html
Port 1 to 65535 both TCP and UDP gives :
22 TCP (SSH)
80 TCP (HTTP)
4028 TCP (DTServer)
5355 TCP (LLMNR)
8001 TCP (VCOM Tunnel)


The result I beleive shows that someone hijacked your 5 A9's.

I guess it's somekind of "devfee" the hijacker takes from you between 20.00-23.30

You should absolutly contact Innosilicon and demand a solution which is quick and easy for you without any costs.
Instructions plus SD-card with firmware-image to make factory restore.

Instructions howto change password for user root ! ! !

The information in this thread should be enough information for them together with the hijackers ZEC-address !
ZEC-address: t1VN9EjK1hWLBmcQuA6hGzhaVohFrnVihDk and your machine probably nr 31304

Since your machine nr 31304 you could also ask about what classaction lawsuit aginst Innosilicon could cost them if they object !?

I hope this will help you to get a fast solution.

Please update about solution :)

Ok, I send them this discussion too. Is Sunday, nobody talk with me, I must wait.

Do you think Hw factory reset will not help? I do not know if I have an SD card slot - the hole is, but probably empty. When I go there, I'll look at it.

A9 in my home network has SD card slot.

If anything should work it should be Hw factory reset.
And especially with a SD card.

There is no SD card in the slot already so I presume the slot is placed there to be able to make "Factory restore from firmware image on SD card".

Perhaps they can send you NEW controllerboard units for the five A9's and you send the old one's back as a Warranty repair.

Ask them!

If anyone in this forum reads this and have a better answer PLEASE give it here ! ! !

So I got physically there. HW factory reset via IP button fortunately works - the hole on sd card comes to me that it is empty. After reset stock login works, so I upgraded fw and tried to log in through root ssh and it works too.. public ip I changed to local, rather than changing the root password. I'll see in the 20:00 what happen.. I hope there was no hidden hack or something...

BTW Innosilicon - the worst support in the world, nothing and nobody helped me, only the bullshit about the engineers looking at it, etc.. the response crazy, the answers out of the way and very simple, solved the shit!!! through the teamviewer they only tried what I wrote 1000X to them that they could not, did not come up with any solution, they did not mind me, they were reluctant to provide information how to upload fw from sd card, etc etc...

Great to hear that problem solved !

I think you should contact the moderator and ask if it's possible with a warning thread for this "hostage" "kidnapping" of asics.

there you can describe the problems and HOWTO hardware restore to factory settings together with warning of the problem when using Public IP-address.

Now after you gotten problem fixed then perhaps you can do a portscan against them.
Scan one every day so with rotation scheme you will get each scanned every 5th day.
Then you will get indication of problem if ports open up that should be closed.

Best of luck ! ! !

Ou talk with me english please  ;D ;D ;D, its too complicated for me..

HW factory reset we can find in inno manual - Press IP button for +- 8 sec..

So will see how long will asics stable - i waiting for 20:00  ;D ;D

If problem after 20:00 do portscan.
If problem after 20:00 but ok login then do factory restore from web interface and see if problem solved !?

If hijacked I believe it would show on a portscan if same hijacker.

Fingers crossed !

You have miners facing the internet, OF COURSE YOU GOT HACKED. Thats about the dumbest possible thing you can do. Miners run precompiled tiny versionf of linux that are never updated or patched. Any vunerability in the code will be there forever. The fact that you put these onto public internet IPs blows my mind. There is literally not a worse choice you could have made than this. I would never trust those miners again without replacing the controllers themselves now that they are infected.

For first, thank you for help!

Second, ofc everyone is smart now.

Third, chill out, it's not your miners.. It isn't something like personal folder, photos.. Somebody hacked me, and what? Now it's everything OK, miners work for me, IP hidden.

You are so right!
Everything on the Internet is hacked Public IP or not!

I don't think it's a coincidense that there are so many bugs all the time or that there are so many critical endpoints on the Internet that are hacked so easily and running systems that never get updated and therefore guarantees that those in power have their backdoors.

I would call it conspiracy FACTS because if it wasn't a conspiracy all code and hardware would be mathamatically proven and inplemented as such a long time ago ! ! !

Most often it's the Five Eyes, Mossad, Russia, The nameless China Intelligence Agency thanks to all implanted backdoors in all "Made in China" hardware thanks to Deep State and the Globalists who run the world and moved all production to Asia.

Then you have every company, government, organisations and almost EVERYONE WW who willingly share their data to third parties for money/power/influence/beeing naive/or whatever and everyone else are hacked and have their data stolen.

But I guess you never been a newbie ?
I guess you never made any mistakes ?

If you think for one moment that your systems NOT are compromised in a way that thoose in power actually could get or already have all the information they need from you / want about you; then I would say you are naive !

And by the way, thanks for all the help you gave him, NOT !

Nothing personal, but perhaps you should be more helpful and less of what you shown here ;)

Great that everything works and only things needed was a hardware reset + having IP's hidden to fix it.

Fingers crossed that it will stay like that !

About how long did you have the A9's running with public IP before they got hacked ?