我正在努力解决频繁出现的 syslog 文件过大的问题。仅在 24 小时内就创建了 740G 的文件,并且记录了大量地址。
甚至相似的域名和ip地址也重复出现。
syslog、syslog.1、syslog.2.gz、syslog.3.gz、syslog.4.gz、syslog.5.gz、syslog.6.gz、syslog.7.gz 创建了8个文件,大小均为1.5T。
这些巨大的文件已经占满了根挂载,并且不断产生以下错误。
bash: cannot create temp file for here-document: No space left on device
我正在分享日志内容。
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s haumea.vds.sh]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s 45.12.6.88]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s haumea.vds.sh]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 221.165.214.185
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 106.246.244.122
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s haumea.vds.sh]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 106.246.244.122
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s haumea.vds.sh]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s haumea.vds.sh]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s haumea.vds.sh]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s 176.111.173.12]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s video.nowfc.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s haumea.vds.sh]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s 176.111.173.12]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s 106.246.244.122
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s haumea.vds.sh
我怀疑这与黑客攻击有关。
专家怎么看?
我知道即使删除这些文件系统也不会出现问题,但我想知道删除之后仍然继续生成巨大的日志文件的原因。
我正在使用 Ubuntu 版本 18.04。
我不想再创建这些巨大的日志文件。如果是黑客攻击或其他问题造成的,请提供解决方法。
谢谢。
答案1
您可能正在遭受攻击。您是否有某种防火墙?
您最好通过 SSH 隧道使用 VNC。
有关的