我的服务器好像被入侵了，mysql数据及文件无故丢失

lpc

mysql数据中的一个库无故丢失一些表的内容，及与这个表有关的文件（已经上传的文件）。出现频率3-5一次，

目前修改了mysql的root密码，及oodxyancp的密码。刚刚才修改的。其他的没发现异常，数据库中var/*.err这个文件没有异常。

/var/log/message的日志内容

Sep 17 16:18:59 localhost sshd(pam_unix)[5749]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=218.104.139.66  user=oodxyancp
Sep 17 16:19:20 localhost vsftpd(pam_unix)[5760]: check pass; user unknown
Sep 17 16:19:20 localhost vsftpd(pam_unix)[5760]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=218.104.139.66
Sep 17 16:19:23 localhost vsftpd(pam_unix)[5762]: check pass; user unknown
Sep 17 16:19:23 localhost vsftpd(pam_unix)[5762]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=218.104.139.66
Sep 17 16:19:27 localhost vsftpd(pam_unix)[5765]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=218.104.139.66  user=oodxyancp
Sep 17 16:19:41 localhost vsftpd(pam_unix)[5786]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=218.104.139.66  user=oodxyancp
Sep 17 16:20:36 localhost vsftpd(pam_unix)[5828]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=218.104.139.66  user=oodxyancp
Sep 17 16:24:54 localhost sshd(pam_unix)[5959]: session opened for user oodxyancp by (uid=525)
Sep 17 16:36:04 localhost vsftpd(pam_unix)[6354]: check pass; user unknown
Sep 17 16:36:04 localhost vsftpd(pam_unix)[6354]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=58.60.53.150
Sep 17 16:36:07 localhost vsftpd(pam_unix)[6356]: check pass; user unknown
Sep 17 16:36:07 localhost vsftpd(pam_unix)[6356]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=58.60.53.150
Sep 17 16:36:37 localhost vsftpd(pam_unix)[6372]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=58.60.53.150  user=oodxyancp
Sep 17 16:41:30 localhost vsftpd(pam_unix)[6482]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=58.60.53.150  user=oodxyancp
Sep 17 16:43:15 localhost vsftpd(pam_unix)[6566]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=218.104.139.66  user=oodxyancp
Sep 17 16:43:18 localhost vsftpd(pam_unix)[6571]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=218.104.139.66  user=oodxyancp
Sep 17 16:43:36 localhost vsftpd(pam_unix)[6611]: check pass; user unknown
Sep 17 16:43:36 localhost vsftpd(pam_unix)[6611]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=58.60.53.150
Sep 17 16:43:39 localhost vsftpd(pam_unix)[6614]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=58.60.53.150  user=oodxyancp
Sep 17 16:49:01 localhost vsftpd(pam_unix)[6803]: check pass; user unknown
Sep 17 16:49:01 localhost vsftpd(pam_unix)[6803]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=58.60.53.150
Sep 17 16:49:04 localhost vsftpd(pam_unix)[6805]: check pass; user unknown
Sep 17 16:49:04 localhost vsftpd(pam_unix)[6805]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=58.60.53.150
Sep 17 16:49:07 localhost vsftpd(pam_unix)[6807]: check pass; user unknown
Sep 17 16:49:07 localhost vsftpd(pam_unix)[6807]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=58.60.53.150
Sep 17 16:53:32 localhost vsftpd(pam_unix)[6985]: check pass; user unknown
Sep 17 16:53:32 localhost vsftpd(pam_unix)[6985]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=58.60.53.150
Sep 17 16:53:36 localhost vsftpd(pam_unix)[6987]: check pass; user unknown
Sep 17 16:53:36 localhost vsftpd(pam_unix)[6987]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=58.60.53.150

nifi

美国大片看多了吧？

lpc

要不然，数据库里的数据怎么无故丢失阿！！
还有web的pic，与这个库有关

seskissinger

楼主也是网管吧？加上qq，一起研究吧！52775099