慢查询日志最近每天都有扫描行数超10万的查询，是被攻击了吗？

最近几天每天上午10点多都有类似的慢查询日志，扫描行数超10万。

查询语句都是类似的getmore。 这是被攻击了吗？如果是被攻击，应该怎么应对？

我在 表权限 read 字段加了 auth.uid != null，但仍然出现类似的慢查询。

{
"op": "getmore",
"ns": "db_xxxxxx.collect_name",
"command": {
"getMore": {
"$numberLong": "401378584xxxxxxxxx"
},
"collection": "collect_name",
"lsid": {
"id": {
"$binary": "4Ufi371bTK6xxxxxx",
"$type": "04"
}
},
"$clusterTime": {
"clusterTime": {
"$timestamp": {
"t": 1705372632,
"i": 67
}
},
"signature": {
"hash": {
"$binary": "5oNqZ3pA8xrxxxxxxx",
"$type": "00"
},
"keyId": {
"$numberLong": "72826033566xxxxxx"
}
}
},
"$db": "db_xxxxxx",
"$readPreference": {
"mode": "primaryPreferred"
}
},
"originatingCommand": {
"find": "collect_name",
"filter": {},
"lsid": {
"id": {
"$binary": "4Ufi371bTK6xxxxxx",
"$type": "04"
}
},
"$clusterTime": {
"clusterTime": {
"$timestamp": {
"t": 1705372631,
"i": 60
}
},
"signature": {
"hash": {
"$binary": "92mdLaRO2dot3Ixxxxxxx",
"$type": "00"
},
"keyId": {
"$numberLong": "728260335663xxxxxx"
}
}
},
"$db": "db_xxxxxx",
"$readPreference": {
"mode": "secondary"
}
},
"cursorid": {
"$numberLong": "401378584xxxxxxxxx"
},
"keysExamined": 0,
"keysExaminedBySizeInBytes": 0,
"docsExamined": 118099,
"docsExaminedBySizeInBytes": 15943365,
"numYield": 922,
"nreturned": 118099,
"locks": {
"ParallelBatchWriterMode": {
"acquireCount": {
"r": {
"$numberLong": "1"
}
}
},
"ReplicationStateTransition": {
"acquireCount": {
"w": {
"$numberLong": "924"
}
}
},
"Global": {
"acquireCount": {
"r": {
"$numberLong": "924"
}
}
},
"Database": {
"acquireCount": {
"r": {
"$numberLong": "923"
}
}
},
"Collection": {
"acquireCount": {
"r": {
"$numberLong": "923"
}
}
},
"Mutex": {
"acquireCount": {
"r": {
"$numberLong": "1"
}
}
}
},
"flowControl": {},
"storage": {
"data": {
"bytesRead": {
"$numberLong": "16906355"
},
"timeReadingMicros": {
"$numberLong": "33449"
}
}
},
"responseLength": 16777319,
"protocol": "op_msg",
"millis": 112,
"planSummary": "COLLSCAN",
"replRole": {
"stateStr": "SECONDARY",
"_id": 2
}
}