我们在AWS Elastic Beanstalk上托管了一个django应用程序,它使用PostgreSQL RDS作为数据库。
从昨天开始,我们发现我们的RDS存储显示完整存储信息。
当我们检查时,日志正在填满并占用大部分空间。
日志显示一些随机查询正在命中数据库并导致错误。
2017-10-30 06:59:59 UTC:172.31.0.218(48038):MyPostgreSQLDB@ebdb:[16817]:STATEMENT: INSERT INTO "auth_user" ("password", "last_login", "is_superuser", "username", "first_name", "last_name", "email", "is_staff", "is_active", "date_joined")
VALUES ('pbkdf2_sha256$30000$L21goli52Bdt$CrFNDOGuwszHC3wkKvoVee1O8ey/V/NdMt9CaG53mCk=', NULL, false, 'dk12345678910111213141516171819202122232425', 'd', 'K', '', false, true, '2017-10-30T06:59:59.550627+00:00'::timestamptz) RETURNING "auth_user"."id"
2017-10-30 07:00:00 UTC:172.31.6.238(47206):MyPostgreSQLDB@ebdb:[22437]:ERROR: value too long for type character varying(150)
2017-10-30 07:00:00 UTC:172.31.6.238(47206):MyPostgreSQLDB@ebdb:[22437]:STATEMENT: INSERT INTO "auth_user" ("password", "last_login", "is_superuser", "username", "first_name", "last_name", "email", "is_staff", "is_active", "date_joined")
VALUES ('pbkdf2_sha256$30000$rtHpPn996XzO$H2RS/H5RYHC12MxjnRIRK1St21VQS8/6Bd/Hnc3H0Jc=', NULL, false, 'deepak kumar k12345678910111213141516171819202122232425262728293031', 'Deepak Kumar ', 'k', '', false, true, '2017-10-30T06:59:58.751020+00:00'::timestamptz) RETURNING "auth_user"."id"
2017-10-30 07:00:00 UTC:172.31.26.180(52740):MyPostgreSQLDB@ebdb:[23882]:ERROR: value too long for type character varying(150)
2017-10-30 07:00:00 UTC:172.31.26.180(52740):MyPostgreSQLDB@ebdb:[23882]:STATEMENT: INSERT INTO "auth_user" ("password", "last_login", "is_superuser", "username", "first_name", "last_name", "email", "is_staff", "is_active", "date_joined")
VALUES ('pbkdf2_sha256$30000$Ve4JkxutDfyC$lB9A+bzEvQSJYamlhXscU/cWfDHtMSHaMU45kKcyxsM=', NULL, false, 'ashokkumar1234567891011121314151617181920212223242526272829303132333435', 'ASHOK', 'Kumar', '', false, true, '2017-10-30T07:00:00.208427+00:00'::timestamptz) RETURNING "auth_user"."id"
2017-10-30 07:00:00 UTC:172.31.26.180(52938):MyPostgreSQLDB@ebdb:[26159]:ERROR: value too long for type character varying(150)
我们无法追踪谁在点击这个随机查询?
我们如何找到罪魁祸首应用程序或谁试图这样做并阻止?
提前致谢。