Hey hey!
Bon encore un sujet, C'est que Cloudsdale Radio me pose de nouveaux et nombreux probleme en ce moment.
Bref.
j'ai ma DB mysql qui se met en PLS toutes les 5mn... et le soucis c'est que ca entraine une innacessibilité au site.
j'en suis venue a mettre une tech cron qui restart le service toutes les 30 minutes pour que de nuit elle ne reste pas down...
j'ai donc analyser les logs afin de trouver d'ou viens le soucis ce qui est logique.
Voila le resulstat et j'ai QUE ca dans tout les fichier log...
160901 11:32:27 [Warning] IP address '123.249.26.17' could not be resolved: Temporary failure in name resolution
160901 11:32:28 [Warning] IP address '123.249.26.17' could not be resolved: Temporary failure in name resolution
160901 11:32:39 [Warning] IP address '123.249.26.17' could not be resolved: Temporary failure in name resolution
160901 11:32:56 [Warning] IP address '123.249.26.17' could not be resolved: Temporary failure in name resolution
160901 11:33:12 [Warning] IP address '123.249.26.17' could not be resolved: Temporary failure in name resolution
160901 11:33:18 [Warning] IP address '123.249.26.17' could not be resolved: Temporary failure in name resolution
160901 11:33:19 [Warning] IP address '123.249.26.17' could not be resolved: Temporary failure in name resolution
160901 11:33:21 [Warning] IP address '123.249.26.17' could not be resolved: Temporary failure in name resolution
160901 11:33:38 [Warning] IP address '123.249.26.17' could not be resolved: Temporary failure in name resolution
160901 12:38:55 [Warning] IP address '112.124.10.141' could not be resolved: Name or service not known
160901 13:10:50 [Warning] IP address '118.193.171.108' could not be resolved: Name or service not known
160901 17:11:14 [Note] /usr/sbin/mysqld: Normal shutdown
160901 17:11:14 [Note] Event Scheduler: Purging the queue. 0 events
160901 17:11:14 InnoDB: Starting shutdown...
160901 17:11:16 InnoDB: Shutdown completed; log sequence number 31414641
160901 17:11:16 [Note] /usr/sbin/mysqld: Shutdown complete
160901 17:11:16 mysqld_safe mysqld from pid file /var/run/mysqld/mysqld.pid ended
160901 17:11:16 mysqld_safe Starting mysqld daemon with databases from /var/lib/mysql
160901 17:11:16 [Warning] Using unique option prefix key_buffer instead of key_buffer_size is deprecated and will be removed in a future release. Please use the full name instead.
160901 17:11:16 [Note] /usr/sbin/mysqld (mysqld 5.5.50-0+deb8u1) starting as process 17663 ...
160901 17:11:16 [Warning] Using unique option prefix myisam-recover instead of myisam-recover-options is deprecated and will be removed in a future release. Please use the full name instead.
160901 17:11:16 [Note] Plugin 'FEDERATED' is disabled.
160901 17:11:16 InnoDB: The InnoDB memory heap is disabled
160901 17:11:16 InnoDB: Mutexes and rw_locks use GCC atomic builtins
160901 17:11:16 InnoDB: Compressed tables use zlib 1.2.8
160901 17:11:16 InnoDB: Using Linux native AIO
160901 17:11:16 InnoDB: Initializing buffer pool, size = 128.0M
160901 17:11:16 InnoDB: Completed initialization of buffer pool
160901 17:11:16 InnoDB: highest supported file format is Barracuda.
160901 17:11:17 InnoDB: Waiting for the background threads to start
160901 17:11:18 InnoDB: 5.5.50 started; log sequence number 31414641
160901 17:11:18 [Note] Server hostname (bind-address): '0.0.0.0'; port: 3306
160901 17:11:18 [Note] - '0.0.0.0' resolves to '0.0.0.0';
160901 17:11:18 [Note] Server socket created on IP: '0.0.0.0'.
160901 17:11:18 [Note] Event Scheduler: Loaded 0 events
160901 17:11:18 [Note] /usr/sbin/mysqld: ready for connections.
Version: '5.5.50-0+deb8u1' socket: '/var/run/mysqld/mysqld.sock' port: 3306 (Debian)
160901 20:28:04 [Warning] IP address '168.216.133.226' could not be resolved: Name or service not known
160901 21:11:36 [Warning] IP address '41.193.53.178' could not be resolved: Name or service not known
160902 4:49:14 [Warning] IP address '222.186.58.208' could not be resolved: Name or service not known
160831 7:03:16 [Warning] IP address '222.186.58.48' could not be resolved: Name or service not known
160831 9:44:18 [Warning] IP address '45.34.191.137' could not be resolved: Name or service not known
160831 19:42:30 [Warning] IP address '222.186.58.208' could not be resolved: Name or service not known
160831 22:36:21 [Warning] IP address '222.186.34.223' could not be resolved: Name or service not known
160830 18:15:51 mysqld_safe Starting mysqld daemon with databases from /var/lib/mysql
160830 18:15:51 [Warning] Using unique option prefix key_buffer instead of key_buffer_size is deprecated and will be removed in a future release. Please use the full name instead.
160830 18:15:51 [Note] /usr/sbin/mysqld (mysqld 5.5.50-0+deb8u1) starting as process 22415 ...
160830 18:15:51 [Warning] Using unique option prefix myisam-recover instead of myisam-recover-options is deprecated and will be removed in a future release. Please use the full name instead.
160830 18:15:51 [Note] Plugin 'FEDERATED' is disabled.
160830 18:15:51 InnoDB: The InnoDB memory heap is disabled
160830 18:15:51 InnoDB: Mutexes and rw_locks use GCC atomic builtins
160830 18:15:51 InnoDB: Compressed tables use zlib 1.2.8
160830 18:15:51 InnoDB: Using Linux native AIO
160830 18:15:51 InnoDB: Initializing buffer pool, size = 128.0M
160830 18:15:51 InnoDB: Completed initialization of buffer pool
160830 18:15:51 InnoDB: highest supported file format is Barracuda.
160830 18:15:52 InnoDB: Waiting for the background threads to start
160830 18:15:53 InnoDB: 5.5.50 started; log sequence number 24534313
160830 18:15:53 [Note] Server hostname (bind-address): '127.0.0.1'; port: 3306
160830 18:15:53 [Note] - '127.0.0.1' resolves to '127.0.0.1';
160830 18:15:53 [Note] Server socket created on IP: '127.0.0.1'.
160830 18:15:53 [Note] Event Scheduler: Loaded 0 events
160830 18:15:53 [Note] /usr/sbin/mysqld: ready for connections.
Version: '5.5.50-0+deb8u1' socket: '/var/run/mysqld/mysqld.sock' port: 3306 (Debian)
160830 18:20:53 [Note] /usr/sbin/mysqld: Normal shutdown
160830 18:20:53 [Note] Event Scheduler: Purging the queue. 0 events
160830 18:20:53 InnoDB: Starting shutdown...
160830 18:20:55 InnoDB: Shutdown completed; log sequence number 28258123
160830 18:20:55 [Note] /usr/sbin/mysqld: Shutdown complete
160830 18:20:55 mysqld_safe mysqld from pid file /var/run/mysqld/mysqld.pid ended
160830 18:20:55 mysqld_safe Starting mysqld daemon with databases from /var/lib/mysql
160830 18:20:55 [Warning] Using unique option prefix key_buffer instead of key_buffer_size is deprecated and will be removed in a future release. Please use the full name instead.
160830 18:20:55 [Note] /usr/sbin/mysqld (mysqld 5.5.50-0+deb8u1) starting as process 23085 ...
160830 18:20:55 [Warning] Using unique option prefix myisam-recover instead of myisam-recover-options is deprecated and will be removed in a future release. Please use the full name instead.
160830 18:20:55 [Note] Plugin 'FEDERATED' is disabled.
160830 18:20:55 InnoDB: The InnoDB memory heap is disabled
160830 18:20:55 InnoDB: Mutexes and rw_locks use GCC atomic builtins
160830 18:20:55 InnoDB: Compressed tables use zlib 1.2.8
160830 18:20:55 InnoDB: Using Linux native AIO
160830 18:20:56 InnoDB: Initializing buffer pool, size = 128.0M
160830 18:20:56 InnoDB: Completed initialization of buffer pool
160830 18:20:56 InnoDB: highest supported file format is Barracuda.
160830 18:20:56 InnoDB: Waiting for the background threads to start
160830 18:20:57 InnoDB: 5.5.50 started; log sequence number 28258123
160830 18:20:57 [Note] Server hostname (bind-address): '0.0.0.0'; port: 3306
160830 18:20:57 [Note] - '0.0.0.0' resolves to '0.0.0.0';
160830 18:20:57 [Note] Server socket created on IP: '0.0.0.0'.
160830 18:20:57 [Note] Event Scheduler: Loaded 0 events
160830 18:20:57 [Note] /usr/sbin/mysqld: ready for connections.
Version: '5.5.50-0+deb8u1' socket: '/var/run/mysqld/mysqld.sock' port: 3306 (Debian)
160830 18:39:03 [Warning] IP address '150.129.81.87' could not be resolved: Name or service not known
160830 20:59:51 [Warning] IP address '222.187.220.221' could not be resolved: Name or service not known
160830 23:20:16 [Warning] IP address '45.119.125.87' could not be resolved: Name or service not known
160831 0:10:40 [Warning] IP address '222.186.56.166' could not be resolved: Name or service not known
160831 0:41:31 [Warning] IP address '183.131.83.6' could not be resolved: Name or service not known
Je me suis amuser a passer les IPs de chaque fichier au nwtools...
IP region
121.40.185.77: CN | Nb de vue dans les log: 1
182.23.145.14: SG | Nb de vue dans les log: 1
114.112.157.4: CN | Nb de vue dans les log: 1
45.127.98.31: EU | Nb de vue dans les log: 1
121.40.137.98: CN | Nb de vue dans les log: 1
103.59.45.152: XX | Nb de vue dans les log: 1
124.173.113.45: CN | Nb de vue dans les log: 1
123.249.26.17: CN | Nb de vue dans les log: 9
112.124.10.141: CN | Nb de vue dans les log: 1
118.193.171.108:CN | Nb de vue dans les log: 1
222.186.58.48: CN | Nb de vue dans les log: 1
45.34.191.137: EU | Nb de vue dans les log: 1
222.186.58.208: CN | Nb de vue dans les log: 3
222.186.34.223: CN | Nb de vue dans les log: 2
168.216.133.226:US | Nb de vue dans les log: 1
41.193.53.178: ZA | Nb de vue dans les log: 1
222.186.58.48: CN | Nb de vue dans les log: 1
45.34.191.137: EU | Nb de vue dans les log: 1
150.129.81.87: HK | Nb de vue dans les log: 1
222.187.220.221:CN | Nb de vue dans les log: 1
45.119.125.87: EU | Nb de vue dans les log: 1
222.186.56.166: CN | Nb de vue dans les log: 1
183.131.83.6: CN | Nb de vue dans les log: 1
103.248.220.159:XX | Nb de vue dans les log: 1
139.196.28.237: CN | Nb de vue dans les log: 1
115.29.197.215: CN | Nb de vue dans les log: 1
----------------------------------------------
Nb IP CN: 16
Nb IP EU: 5
Nb IP HK: 1
Nb IP ZA: 1
Nb IP XX: 2
---------------------------------------------
XX = from Other (XX) in region Unclassified
ZA = from South Africa (ZA) in region Southern Africa
par ce que oui j'ai betement penser a une attaque u_u (bref j'etait juste reveillez me jugez pas.)
j'ai trouver un topic qui expliquer que c'etait le moment pour Mysql d'arreter d'essayer d'utiliser les DNS et donc de modifier deux parametres.
dans /etc/mysql/my.cnf
[mysqld]
skip-host-cache
skip-name-resolve
mais rien n'y fait...
Une idée?
