为什么heroku日志显示具有切换端口的数据库登录尝试? (黑客?)

时间:2019-04-12 17:23:38

标签: django postgresql heroku

今天,我们的网站大面积瘫痪。查看日志,我们看到了许多数据库活动,这些活动是通过不同的端口建立的。这是黑客活动吗?他们拥有生产数据库用户名的事实是否意味着凭据已被泄露?我们的团队是安全/基础架构的新手,因此,如果这是黑客活动,则可以采取任何进一步的建议,我们将不胜感激。

2019-04-12T17:10:38.046660+00:00 app[web.2]: 2019-04-12 17:10:38.046 49 LOG C-0x7f1ee5975cb0: db1/ProdDBUsername@127.0.0.1:42384 closing because: client close request (age=59) 2019-04-12T17:10:38.046775+00:00 app[web.2]: 2019-04-12 17:10:38.046 49 LOG C-0x193efc0: db1/ProdDBUsername@127.0.0.1:42386 closing because: client close request (age=59) 2019-04-12T17:10:38.046844+00:00 app[web.2]: 2019-04-12 17:10:38.046 49 LOG C-0x1937e70: db1/ProdDBUsername@127.0.0.1:42390 closing because: client close request (age=59) 2019-04-12T17:10:38.047933+00:00 app[web.2]: 2019-04-12 17:10:38.047 49 LOG C-0x1954a48: db1/ProdDBUsername@127.0.0.1:42448 closing because: client close request (age=55) 2019-04-12T17:10:38.048101+00:00 app[web.2]: 2019-04-12 17:10:38.048 49 LOG C-0x193e070: db1/ProdDBUsername@127.0.0.1:42452 closing because: client close request (age=54) 2019-04-12T17:10:38.048216+00:00 app[web.2]: 2019-04-12 17:10:38.048 49 LOG C-0x7f1ee5973e10: db1/ProdDBUsername@127.0.0.1:42456 closing because: client close request (age=54) 2019-04-12T17:10:38.048284+00:00 app[web.2]: 2019-04-12 17:10:38.048 49 LOG C-0x1953660: db1/ProdDBUsername@127.0.0.1:42462 closing because: client close request (age=54) 2019-04-12T17:10:38.048553+00:00 app[web.2]: 2019-04-12 17:10:38.048 49 LOG C-0x7f1ee5972280: db1/ProdDBUsername@127.0.0.1:42484 closing because: client close request (age=52) 2019-04-12T17:10:38.048678+00:00 app[web.2]: 2019-04-12 17:10:38.048 49 LOG C-0x193c1d0: db1/ProdDBUsername@127.0.0.1:42486 closing because: client close request (age=52) 2019-04-12T17:10:38.048797+00:00 app[web.2]: 2019-04-12 17:10:38.048 49 LOG C-0x195f750: db1/ProdDBUsername@127.0.0.1:42490 closing because: client close request (age=52) 2019-04-12T17:10:38.048908+00:00 app[web.2]: 2019-04-12 17:10:38.048 49 LOG C-0x195bea8: db1/ProdDBUsername@127.0.0.1:42492 closing because: client close request (age=52) 2019-04-12T17:10:38.049927+00:00 app[web.2]: 2019-04-12 17:10:38.049 49 LOG C-0x1959b70: db1/ProdDBUsername@127.0.0.1:42460 closing because: client close request (age=54) 2019-04-12T17:10:38.050028+00:00 app[web.2]: 2019-04-12 17:10:38.049 49 LOG C-0x195cf80: db1/ProdDBUsername@127.0.0.1:42458 closing because: client close request (age=54) 2019-04-12T17:10:38.050107+00:00 app[web.2]: 2019-04-12 17:10:38.050 49 LOG C-0x195d8b0: db1/ProdDBUsername@127.0.0.1:42494 closing because: client close request (age=52) 2019-04-12T17:10:38.050264+00:00 app[web.2]: 2019-04-12 17:10:38.050 49 LOG C-0x19599e8: db1/ProdDBUsername@127.0.0.1:42496 closing because: client close request (age=52) 2019-04-12T17:10:38.050391+00:00 app[web.2]: 2019-04-12 17:10:38.050 49 LOG C-0x7f1ee5977530: db1/ProdDBUsername@127.0.0.1:42498 closing because: client close request (age=52) 2019-04-12T17:10:38.050459+00:00 app[web.2]: 2019-04-12 17:10:38.050 49 LOG C-0x1905688: db1/ProdDBUsername@127.0.0.1:42500 closing because: client close request (age=52) 2019-04-12T17:10:38.050572+00:00 app[web.2]: 2019-04-12 17:10:38.050 49 LOG C-0x18c6330: db1/ProdDBUsername@127.0.0.1:42502 closing because: client close request (age=52) 2019-04-12T17:10:38.050651+00:00 app[web.2]: 2019-04-12 17:10:38.050 49 LOG C-0x193dd60: db1/ProdDBUsername@127.0.0.1:42504 closing because: client close request (age=52) 2019-04-12T17:10:38.050821+00:00 app[web.2]: 2019-04-12 17:10:38.050 49 LOG C-0x1938618: db1/ProdDBUsername@127.0.0.1:42600 closing because: client close request (age=50) 2019-04-12T17:10:38.051103+00:00 app[web.2]: 2019-04-12 17:10:38.051 49 LOG C-0x7f1ee59731d0: db1/ProdDBUsername@127.0.0.1:42890 closing because: client close request (age=34) 2019-04-12T17:10:38.053299+00:00 app[web.2]: 2019-04-12 17:10:38.053 49 LOG C-0x1957218: db1/ProdDBUsername@127.0.0.1:42950 closing because: client close request (age=30) 2019-04-12T17:10:38.053502+00:00 app[web.2]: 2019-04-12 17:10:38.053 49 LOG C-0x18c4618: db1/ProdDBUsername@127.0.0.1:43040 closing because: client close request (age=17) 2019-04-12T17:10:38.053625+00:00 app[web.2]: 2019-04-12 17:10:38.053 49 LOG C-0x1960828: db1/ProdDBUsername@127.0.0.1:43038 closing because: client close request (age=17) 2019-04-12T17:10:38.053792+00:00 app[web.2]: 2019-04-12 17:10:38.053 49 LOG C-0x19387a0: db1/ProdDBUsername@127.0.0.1:43162 closing because: client close request (age=2)

0 个答案:

没有答案