Dataspace

H

hansvdput

Verified User
Joined
Jun 29, 2015
Messages
42
Does anyone know how this space could be full?


Filesystem Size Used Avail Use% Mounted on
/dev/mapper/vg_webserver03-lv_root
50G 47G 16M 100% /
tmpfs 1.9G 24K 1.9G 1% /dev/shm
/dev/sda1 477M 69M 384M 16% /boot
/dev/mapper/vg_webserver03-lv_home
45G 7.8G 35G 19% /home


How can i clean it?
 
Hello,

Run this to see where disk space is used:

Code: 
df -h --max-depth=1 / -x

as root in a console.

It's most likely /var/log/
 
You were right.

It was using about 40GB?

How can i make sure this doesn't happen?

I don't need/want these logs ?


It looked like the server was doing allright untill i ran Admin Backup/Transfer
I Select ALL Users, 'NOW' 'ALL DATA' and send it to a FTP server elsewhere.
The total amount of diskspace used by the websites is +-10GB.
But when i run this backup the /var/log is gonna use up 40GB of space and the backup fails cause there is no space left.

While i use a FTP account so it doesnt backup locally
 
Last edited:
In general mount /var/log/ as a separate partition.

If you need another solution specify which exactly logs used 40gb?
 
Well,
I fixed it but without doing a backup its wrong again.
So the backup isnt the problem!

This is it:

36G /home/var/log/httpd/domains

i had to replace /var/log to /home/var/log because it was getting too full.
I thought it would resolve my problem by moving it but the problem is still there unfortunarly.

Could anyone please tell me how i can make sure these log files aren't made ?

Thanks in advance !
 
I think im getting closer and closer to the cause.

So i got this:


1.1G /home/speedservi
1.2G /home/bmdzuid/domains/bmdzuid.nl/public_html/wp-content
1.3G /home/bmdzuid
1.3G /home/bmdzuid/domains
1.3G /home/bmdzuid/domains/bmdzuid.nl
1.3G /home/bmdzuid/domains/bmdzuid.nl/public_html
1.4G /home/qupra/domains/qupra.nl/logs
1.8G /home/qupra
1.8G /home/qupra/domains
1.8G /home/qupra/domains/qupra.nl
2.5G /usr
6.1G /home
9G /

Then i start backup for all domains one by one and nothing strange happens untill i backup especially this one site. www.speedservice.nl

Then i get this:

1.1G /home/speedservi
1.2G /home/bmdzuid/domains/bmdzuid.nl/public_html/wp-content
1.3G /home/bmdzuid
1.3G /home/bmdzuid/domains
1.3G /home/bmdzuid/domains/bmdzuid.nl
1.3G /home/bmdzuid/domains/bmdzuid.nl/public_html
1.4G /home/qupra/domains/qupra.nl/logs
1.8G /home/qupra
1.8G /home/qupra/domains
1.8G /home/qupra/domains/qupra.nl
2.5G /usr
5.8G /var/log/httpd
5.8G /var/log/httpd/domains
5.9G /var/log
6.1G /home
6.4G /var
16G /


So when the domain www.speedservice.nl is going to be used. The server created insane log files.

This site is just a plain and simple WordPress site. Me myself manage the site aswell and there are no plugins that i don't use at other sites that cause this.



Can logging files be disabled ??
 
[Tue Nov 17 23:43:39.531030 2015] [:error] [pid 9844] [client 203.124.120.65:63851] script '/home/speedservi/domains/speedservice.nl/public_html/wp-content/themes/diff80.php' not found or unable to stat
[Tue Nov 17 23:45:44.191292 2015] [:error] [pid 10032] [client 72.167.190.170:55719] script '/home/speedservi/domains/speedservice.nl/public_html/wp-content/themes/diff80.php' not found or unable to stat
[Tue Nov 17 23:47:50.161654 2015] [:error] [pid 10109] [client 184.168.66.81:60422] script '/home/speedservi/domains/speedservice.nl/public_html/wp-content/themes/diff80.php' not found or unable to stat
[Tue Nov 17 23:49:55.573680 2015] [:error] [pid 10151] [client 69.89.25.163:55443] script '/home/speedservi/domains/speedservice.nl/public_html/wp-content/themes/diff80.php' not found or unable to stat
[Tue Nov 17 23:52:00.941652 2015] [:error] [pid 10034] [client 72.167.232.196:44919] script '/home/speedservi/domains/speedservice.nl/public_html/wp-content/themes/diff80.php' not found or unable to stat
[Tue Nov 17 23:54:03.532652 2015] [:error] [pid 10111] [client 162.209.103.166:36450] script '/home/speedservi/domains/speedservice.nl/public_html/wp-content/themes/diff80.php' not found or unable to stat
[Tue Nov 17 23:56:09.922240 2015] [:error] [pid 10487] [client 184.95.45.161:40535] script '/home/speedservi/domains/speedservice.nl/public_html/wp-content/themes/diff80.php' not found or unable to stat

I found this in one of the logfiles.

I just deleted this diff80.php because directadmin warned me that it was a script that already sended over 500 e-mails.

Can it be that this caused the problem?
 
diff80.php is most likely a malware. And you might have other malware. You might need to check your server for malware and ban with firewall the IPs which requested the script diff80.php.

And temporary could you disable logs in apache for the virtual host.
 
You must log in or register to reply here.
Back
Top