Shulou(Shulou.com)06/01 Report--

In the past, what Jinshan, QQ,360 war, I rationally think that it is just the means of competition between businesses, there is really no need to pay attention to, we are all big companies, but aimed at different users, although I personally transferred to Jinshan from 360after the war, but I always think that 360is not too bad.

As an operation and maintenance staff, I can say that I am only a rookie, and I am very lazy. As far as the company is concerned, programmers are not very good, and someone else is not to blame for the problems with the program. But the WEBSCAN function of 360was really powerful at the beginning. The whole station to help you check loopholes, really helped me a lot of help, save me a page to try SQL injection to programmers, try to upload loopholes, at first really swept a lot of page loopholes out, bragging sent to programmers URL to let them correct one by one. As always, do a scan of the whole station once a month or two, which saves both trouble and worry.

Recently, the company's database server is often full of error logs on disk, resulting in downmachine, a log file of 200G, and two files full of my 500g hard drive. For a while, there is no problem, because the log file is too large to analyze, vi opens 200G a file, the server dies directly, and the failure occurs irregularly, which makes it a headache. This afternoon began to find abnormal log files, usually a day's log is about 90m, today's real-time log has 10G, the problem finally appeared, 10G file vi open just wait a little longer, but also can be analyzed, the results after reading the log, I am dumbfounded, the picture above, there is a picture like!

From the first millisecond of this second

Second millisecond, look down.

Finally, until the 999th millisecond of this second, the error message remained the same, word for word.

According to the log analysis, 1000 SQL error requests occurred in this second, no doubt generated by the same page. When I get here, I'd like to ask you to send 1000 requests to the same page in the same second. Is this called a security check? From my cognitive point of view, it's called DDOS, stress test, right?

Send this post to condemn 360 yuan!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.