August 25, 20205 yr Hi, I have a problem with the log it always gets 100%. I tried to download the diagnostics, but even after a long time, nothing downloads. I am sending a photo where the files are added: / var / log / nginx / var / log / syslog
August 25, 20205 yr From the terminal window, enter in diagnostics The zip file will get saved to the flash drive (logs folder). The GUI has a limitation that any operation exceeding 120 seconds will fail.
August 25, 20205 yr Author I have diagnostics after restart unraid. acu-tower-diagnostics-20200825-1308.zip
August 25, 20205 yr Community Expert 37 minutes ago, Acu said: diagnostics after restart unraid. And of course your logs are not full in those since syslog starts over when you reboot.
August 26, 20205 yr Author Once the log starts to fill, the diagnostics cannot be downloaded. What now?
August 26, 20205 yr Community Expert I would suggest waiting a while to give the issue a chance to manifest itself and then try downloading the diagnostics before the log actually gets full.
August 26, 20205 yr Author Now I have 73% in the morning I tried at 43% and also failed to download the diagnostics
August 26, 20205 yr Community Expert It's nginx spamming the log, and I've seen it before, but no idea what causes it or the solution, does it do the same if you boot in safe mode?
August 27, 20205 yr Author So even in safe mode the log is still growing. At the moment I have 70% and started to grow around midnight.
August 27, 20205 yr Community Expert Yep, it's nginx again, but like mentioned I have no idea what causes these, maybe someone else has.
August 27, 20205 yr Community Expert 1 hour ago, Acu said: Does it have anything to do with letsencrypt nginx? If that's something you were using in safe mode it might, so try again with that stopped, but Unraid also uses nginx for the webGUI.
August 28, 20205 yr Community Expert Don't know if this is related: Aug 26 18:50:02 Acu-Tower vsftpd[25980]: connect from 184.105.139.70 (184.105.139.70) Aug 26 19:42:34 Acu-Tower vsftpd[7115]: connect from 170.130.187.58 (170.130.187.58) Aug 26 20:00:51 Acu-Tower vsftpd[23429]: connect from 192.241.227.131 (192.241.227.131) ... Aug 26 22:18:44 Acu-Tower vsftpd[16593]: connect from 104.152.52.34 (104.152.52.34) ... Aug 27 01:51:23 Acu-Tower vsftpd[16342]: connect from 91.241.19.109 (91.241.19.109) https://www.abuseipdb.com/check/184.105.139.70 https://www.abuseipdb.com/check/170.130.187.58 https://www.abuseipdb.com/check/192.241.227.131 https://www.abuseipdb.com/check/104.152.52.34 https://www.abuseipdb.com/check/91.241.19.109 And lots more like that.
August 28, 20205 yr Author 5 hours ago, trurl said: Don't know if this is related: Aug 26 18:50:02 Acu-Tower vsftpd[25980]: connect from 184.105.139.70 (184.105.139.70) Aug 26 19:42:34 Acu-Tower vsftpd[7115]: connect from 170.130.187.58 (170.130.187.58) Aug 26 20:00:51 Acu-Tower vsftpd[23429]: connect from 192.241.227.131 (192.241.227.131) ... Aug 26 22:18:44 Acu-Tower vsftpd[16593]: connect from 104.152.52.34 (104.152.52.34) ... Aug 27 01:51:23 Acu-Tower vsftpd[16342]: connect from 91.241.19.109 (91.241.19.109) https://www.abuseipdb.com/check/184.105.139.70 https://www.abuseipdb.com/check/170.130.187.58 https://www.abuseipdb.com/check/192.241.227.131 https://www.abuseipdb.com/check/104.152.52.34 https://www.abuseipdb.com/check/91.241.19.109 And lots more like that. I only use proftpd sometimes, I can turn it off Am I still sending a photo from open files and nginx which is run three times? Do you think someone is attacking me?
Archived
This topic is now archived and is closed to further replies.