Results 1 to 3 of 3

Thread: syslog fills up with unity-settings-daemon messages

  1. #1
    Join Date
    Dec 2016
    Beans
    3

    syslog fills up with unity-settings-daemon messages

    Since a few days my syslog fills up with messages like the following:
    Code:
      May 15 19:10:18 alan9 unity-settings-daemon[2572]: 15/05/2019 19:10:18      104.248.71.227
      May 15 19:10:18 alan9 unity-settings-daemon[2572]: message repeated 2 times: [ 15/05/2019 19:10:18      104.248.71.227]
      May 15 19:10:18 alan9 unity-settings-daemon[2572]: 15/05/2019 19:10:18      101.230.200.173
      May 15 19:10:18 alan9 unity-settings-daemon[2572]: 15/05/2019 19:10:18      104.248.71.227
      May 15 19:10:18 alan9 unity-settings-daemon[2572]: message repeated 9 times: [ 15/05/2019 19:10:18      104.248.71.227]
    The size of syslog grows to gigabytes

    Looks like 104.248.71.227 tries to connect?
    The main problem site is the 104.248.71.227. I cannot open it in a browser.
    The 101.230.200.173 is less frequent, but that one can be opened in a browser. it says "f*** off".
    I feel threatened, but I cannot stop the flood of messages.
    Any help?
    Last edited by DuckHook; 1 Day Ago at 09:26 PM. Reason: Added [CODE] tags for clarity

  2. #2
    Join Date
    Mar 2010
    Beans
    8,554
    Distro
    Ubuntu Mate

    Re: syslog fills up with unity-settings-daemon messages

    Hi,

    What version of Ubuntu are you currently using?

    What event caused you to check syslog in the first place?

    Are you using SSH or any other remote software, do you have ufw enabled?

    The more information you can think of to help, the better we can advise you.

    Thanks.

  3. #3
    Join Date
    Mar 2011
    Location
    19th Hole
    Beans
    Hidden!
    Distro
    Ubuntu 18.04 Bionic Beaver

    Re: syslog fills up with unity-settings-daemon messages

    In addition to answering Rubi1200's questions (and please first answer all of them—they are important):

    1. Did you install anything from outside the repos around the time that your logs started getting spammed?
    2. Did you visit or were you redirected to any new, strange sites at this time?
    3. Did you receive any odd e-mail or other message at this time that you opened or looked at?
    4. Do you recall any other unusual computing event that coincided with this behaviour?
    5. What uncommon apps do you run? Example: do you mine crypto-currency, etc?

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •