walker001
V2EX  ›  站长

mongo 数据库被黑了,各位 V 友怎么做网站安全防护的?

  •  1
     
  •   walker001 · Nov 5, 2019 · 4897 views
    This topic created in 2389 days ago, the information mentioned may be changed or developed.

    db.HOW_TO_RESTORE.find();

    { "_id" : ObjectId("5d95544778e531762eb557c2"), "1" : "localbitcoins.com", "2" : "payments.changelly.com", "3" : "wirex.com", "4" : "coinmama.com", "5" : "paxful.com", "__" : "", "google" : "or google it - buy bitcoins via credit card" }

    { "id" : ObjectId("5d95544778e531762eb557c1"), "What_happend" : "Your DB was saved and archived, you have 7 days to restore it.", "" : "", "How_to_restore" : "Send 0.1 Bitcoin to address bellow", "pay_to_btc_address" : "164UY4sPw9GzdqGdwR4fKnM7S7yVM29uy2", "send_mail" : "email to [email protected] with payment transaction id, your base name and ip address of your mongodb server.", "email_to" : "[email protected]", "get_db_back" : "You will get your db archive back immediately right after we receive an email and check payment.", "TIME" : "you have 7 days to pay, then DB will deleted because of storage costs.", "__" : "", "Where_to_buy_btc" : "List below of exchanges where you can buy BTC" }

    6 replies    2019-11-05 13:37:02 +08:00
    wangkun025
        1
    wangkun025  
       Nov 5, 2019
    大哥,你好像付款了
    向现实低头
    walker001
        2
    walker001  
    OP
       Nov 5, 2019
    @wangkun025 哈哈哈,我那小破站都没几个人访问,数据不多
    qq316107934
        3
    qq316107934  
       Nov 5, 2019
    别付款,一般都是直接删库的,说有备份都是假的。
    qq316107934
        4
    qq316107934  
       Nov 5, 2019   ❤️ 1
    mongo 端口不要暴露到外部,定期跑任务 dump 备份然后加密压缩下就行了。
    wangkun025
        5
    wangkun025  
       Nov 5, 2019
    @walker001 那个比特币的收款地址,已经收到钱了
    renmu
        6
    renmu  
       Nov 5, 2019 via Android
    你是不是开放到外网之后数据库没有加密码,MongoDB 默认没有密码,我之前也被黑了一个
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Solana   ·   3827 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 33ms · UTC 10:18 · PVG 18:18 · LAX 03:18 · JFK 06:18
    ♥ Do have faith in what you're doing.