由于未知原因,大量系统日志不断被创建

由于未知原因,大量系统日志不断被创建

我正在努力解决频繁出现的 syslog 文件过大的问题。仅在 24 小时内就创建了 740G 的文件,并且记录了大量地址。

甚至相似的域名和ip地址也重复出现。

syslog、syslog.1、syslog.2.gz、syslog.3.gz、syslog.4.gz、syslog.5.gz、syslog.6.gz、syslog.7.gz 创建了8个文件,大小均为1.5T。

这些巨大的文件已经占满了根挂载,并且不断产生以下错误。

bash: cannot create temp file for here-document: No space left on device

我正在分享日志内容。

Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s      haumea.vds.sh]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s      45.12.6.88]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s      haumea.vds.sh]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      221.165.214.185
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      106.246.244.122
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb691.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s      haumea.vds.sh]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      106.246.244.122
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s      haumea.vds.sh]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s      haumea.vds.sh]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s      haumea.vds.sh]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s      176.111.173.12]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      video.nowfc.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s      haumea.vds.sh]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      45.12.6.88
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mitziejamelymb69.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      176.111.173.12
Oct 28 00:41:45 bio507-3 vino-server[4958]: message repeated 2 times: [ 28/10/2021 00h 41m 45s      176.111.173.12]
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      106.246.244.122
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      haumea.vds.sh
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      mandimichaelibws961.example.com
Oct 28 00:41:45 bio507-3 vino-server[4958]: 28/10/2021 00h 41m 45s      haumea.vds.sh

我怀疑这与黑客攻击有关。

专家怎么看?

我知道即使删除这些文件系统也不会出现问题,但我想知道删除之后仍然继续生成巨大的日志文件的原因。

我正在使用 Ubuntu 版本 18.04。

我不想再创建这些巨大的日志文件。如果是黑客攻击或其他问题造成的,请提供解决方法。

谢谢。

答案1

相关内容