[求助] 日志发现可疑内容，导致服务器会在这个时间内无法打开网站

w263756314

/var/log/cron内容

1. Apr  1 22:00:01 localhost CROND[8312]: (root) CMD (/usr/lib64/sa/sa1 -S DISK 1 1)
   
2. Apr  1 22:01:01 localhost CROND[8317]: (root) CMD (run-parts /etc/cron.hourly)
   
3. Apr  1 22:01:01 localhost run-parts(/etc/cron.hourly)[8317]: starting 0anacron
   
4. Apr  1 22:01:01 localhost anacron[8328]: Anacron started on 2012-04-01
   
5. Apr  1 22:01:01 localhost anacron[8328]: Normal exit (0 jobs run)
   
6. Apr  1 22:01:01 localhost run-parts(/etc/cron.hourly)[8330]: finished 0anacron
   
7. Apr  1 22:10:01 localhost CROND[8346]: (root) CMD (/usr/lib64/sa/sa1 -S DISK 1 1)
   
8. Apr  1 22:20:01 localhost CROND[8365]: (root) CMD (/usr/lib64/sa/sa1 -S DISK 1 1)
   
9. Apr  1 22:30:01 localhost CROND[8384]: (root) CMD (/usr/lib64/sa/sa1 -S DISK 1 1)
   
10. Apr  1 22:40:01 localhost CROND[8404]: (root) CMD (/usr/lib64/sa/sa1 -S DISK 1 1)
    
11. Apr  1 22:50:01 localhost CROND[8423]: (root) CMD (/usr/lib64/sa/sa1 -S DISK 1 1)
    
12. Apr  1 23:00:01 localhost CROND[8452]: (root) CMD (/usr/lib64/sa/sa1 -S DISK 1 1)
    
13. Apr  1 23:01:01 localhost CROND[8473]: (root) CMD (run-parts /etc/cron.hourly)
    
14. Apr  1 23:01:01 localhost run-parts(/etc/cron.hourly)[8473]: starting 0anacron
    
15. Apr  1 23:01:01 localhost anacron[8483]: Anacron started on 2012-04-01
    
16. Apr  1 23:01:01 localhost anacron[8483]: Normal exit (0 jobs run)
    
17. Apr  1 23:01:01 localhost run-parts(/etc/cron.hourly)[8485]: finished 0anacron
    
18. Apr  1 23:10:01 localhost CROND[8536]: (root) CMD (/usr/lib64/sa/sa1 -S DISK 1 1)
    
19. Apr  1 23:20:01 localhost CROND[8555]: (root) CMD (/usr/lib64/sa/sa1 -S DISK 1 1)
    
20. Apr  1 23:30:01 localhost CROND[8574]: (root) CMD (/usr/lib64/sa/sa1 -S DISK 1 1)
    
21. Apr  1 23:40:01 localhost CROND[8593]: (root) CMD (/usr/lib64/sa/sa1 -S DISK 1 1)
    
22. Apr  1 23:50:01 localhost CROND[8612]: (root) CMD (/usr/lib64/sa/sa1 -S DISK 1 1)
    
23. Apr  1 23:53:01 localhost CROND[8620]: (root) CMD (/usr/lib64/sa/sa2 -A)
    
24. Apr  2 00:00:01 localhost CROND[8642]: (root) CMD (/usr/lib64/sa/sa1 -S DISK 1 1)
    
25. Apr  2 00:01:01 localhost CROND[8647]: (root) CMD (run-parts /etc/cron.hourly)
    
26. Apr  2 00:01:01 localhost run-parts(/etc/cron.hourly)[8647]: starting 0anacron
    
27. Apr  2 00:01:01 localhost anacron[8658]: Anacron started on 2012-04-02
    
28. Apr  2 00:01:01 localhost run-parts(/etc/cron.hourly)[8660]: finished 0anacron
    
29. Apr  2 00:01:01 localhost anacron[8658]: Jobs will be executed sequentially
    
30. Apr  2 00:01:01 localhost anacron[8658]: Normal exit (0 jobs run)

复制代码

/var/log/secure的内容：

1. Apr  1 23:00:39 localhost sudo:    wdcpu : problem with defaults entries ; TTY=unknown ; PWD=/www/wdlinux/wdcp/sys ; COMMAND=/www/wdlinux/wdphp/bin/php
   
2. Apr  1 23:00:39 localhost sudo:    wdcpu : TTY=unknown ; PWD=/www/wdlinux/wdcp/sys ; USER=root ; COMMAND=/www/wdlinux/wdphp/bin/php /www/wdlinux/wdcp/task/wdcp_sv.php
   
3. Apr  1 23:00:55 localhost sudo:    wdcpu : problem with defaults entries ; TTY=unknown ; PWD=/www/wdlinux/wdcp/sys ; COMMAND=/www/wdlinux/wdphp/bin/php
   
4. Apr  1 23:00:55 localhost sudo:    wdcpu : TTY=unknown ; PWD=/www/wdlinux/wdcp/sys ; USER=root ; COMMAND=/www/wdlinux/wdphp/bin/php /www/wdlinux/wdcp/task/wdcp_sv.php
   
5. Apr  1 23:01:25 localhost sudo:    wdcpu : problem with defaults entries ; TTY=unknown ; PWD=/www/wdlinux/wdcp/sys ; COMMAND=/www/wdlinux/wdphp/bin/php
   
6. Apr  1 23:01:25 localhost sudo:    wdcpu : TTY=unknown ; PWD=/www/wdlinux/wdcp/sys ; USER=root ; COMMAND=/www/wdlinux/wdphp/bin/php /www/wdlinux/wdcp/task/wdcp_sv.php
   
7. Apr  1 23:01:43 localhost sudo:    wdcpu : problem with defaults entries ; TTY=unknown ; PWD=/www/wdlinux/wdcp/sys ; COMMAND=/www/wdlinux/wdphp/bin/php
   
8. Apr  1 23:01:43 localhost sudo:    wdcpu : TTY=unknown ; PWD=/www/wdlinux/wdcp/sys ; USER=root ; COMMAND=/www/wdlinux/wdphp/bin/php /www/wdlinux/wdcp/task/wdcp_sv.php
   
9. Apr  1 23:02:18 localhost sudo:    wdcpu : problem with defaults entries ; TTY=unknown ; PWD=/www/wdlinux/wdcp/sys ; COMMAND=/www/wdlinux/wdphp/bin/php
   
10. Apr  1 23:02:18 localhost sudo:    wdcpu : TTY=unknown ; PWD=/www/wdlinux/wdcp/sys ; USER=root ; COMMAND=/www/wdlinux/wdphp/bin/php /www/wdlinux/wdcp/task/wdcp_sr.php
    
11. Apr  1 23:02:18 localhost sudo:    wdcpu : problem with defaults entries ; TTY=unknown ; PWD=/www/wdlinux/wdcp/sys ; COMMAND=/www/wdlinux/wdphp/bin/php
    
12. Apr  1 23:02:18 localhost sudo:    wdcpu : TTY=unknown ; PWD=/www/wdlinux/wdcp/sys ; USER=root ; COMMAND=/www/wdlinux/wdphp/bin/php /www/wdlinux/wdcp/task/wdcp_sr.php
    
13. Apr  2 00:03:13 localhost sudo:    wdcpu : problem with defaults entries ; TTY=unknown ; PWD=/www/wdlinux/wdcp/sys ; COMMAND=/www/wdlinux/wdphp/bin/php
    
14. Apr  2 00:03:13 localhost sudo:    wdcpu : TTY=unknown ; PWD=/www/wdlinux/wdcp/sys ; USER=root ; COMMAND=/www/wdlinux/wdphp/bin/php /www/wdlinux/wdcp/task/wdcp_sv.php
    
15. Apr  2 00:03:26 localhost sudo:    wdcpu : problem with defaults entries ; TTY=unknown ; PWD=/www/wdlinux/wdcp/sys ; COMMAND=/www/wdlinux/wdphp/bin/php
    
16. Apr  2 00:03:26 localhost sudo:    wdcpu : TTY=unknown ; PWD=/www/wdlinux/wdcp/sys ; USER=root ; COMMAND=/www/wdlinux/wdphp/bin/php /www/wdlinux/wdcp/task/wdcp_sv.php

复制代码

不是太明白这两个日志文件内容，贴出来求助，执行这个调度时，网站会打不开。

admin

不太明白你的意思
哪个时间段，执行什么调度


上面两个是正常的日志，没看出有哪些异常

w263756314

当网站不稳定，打不开的时候，我查了下日志，最新更新的日志文件就是上面说的两个，对应上时间就是上面贴出来的内容了，管理得意思是说间歇性不稳定的情况跟环境无关是吗？

夏筱羽

这种问题很难回答吧!有时缓存文件清除之后也会使服务器附载突然升高