V2EX = way to explore
V2EX 是一个关于分享和探索的地方
现在注册
已注册用户请  登录
walker001
V2EX  ›  站长

mongo 数据库被黑了,各位 V 友怎么做网站安全防护的?

  •  1
     
  •   walker001 · 2019-11-05 11:27:02 +08:00 · 4326 次点击
    这是一个创建于 1879 天前的主题,其中的信息可能已经有所发展或是发生改变。

    db.HOW_TO_RESTORE.find();

    { "_id" : ObjectId("5d95544778e531762eb557c2"), "1" : "localbitcoins.com", "2" : "payments.changelly.com", "3" : "wirex.com", "4" : "coinmama.com", "5" : "paxful.com", "__" : "", "google" : "or google it - buy bitcoins via credit card" }

    { "id" : ObjectId("5d95544778e531762eb557c1"), "What_happend" : "Your DB was saved and archived, you have 7 days to restore it.", "" : "", "How_to_restore" : "Send 0.1 Bitcoin to address bellow", "pay_to_btc_address" : "164UY4sPw9GzdqGdwR4fKnM7S7yVM29uy2", "send_mail" : "email to [email protected] with payment transaction id, your base name and ip address of your mongodb server.", "email_to" : "[email protected]", "get_db_back" : "You will get your db archive back immediately right after we receive an email and check payment.", "TIME" : "you have 7 days to pay, then DB will deleted because of storage costs.", "__" : "", "Where_to_buy_btc" : "List below of exchanges where you can buy BTC" }

    6 条回复    2019-11-05 13:37:02 +08:00
    wangkun025
        1
    wangkun025  
       2019-11-05 11:35:27 +08:00
    大哥,你好像付款了
    向现实低头
    walker001
        2
    walker001  
    OP
       2019-11-05 11:38:34 +08:00
    @wangkun025 哈哈哈,我那小破站都没几个人访问,数据不多
    qq316107934
        3
    qq316107934  
       2019-11-05 11:39:05 +08:00
    别付款,一般都是直接删库的,说有备份都是假的。
    qq316107934
        4
    qq316107934  
       2019-11-05 11:39:49 +08:00   ❤️ 1
    mongo 端口不要暴露到外部,定期跑任务 dump 备份然后加密压缩下就行了。
    wangkun025
        5
    wangkun025  
       2019-11-05 11:54:05 +08:00
    @walker001 那个比特币的收款地址,已经收到钱了
    renmu
        6
    renmu  
       2019-11-05 13:37:02 +08:00 via Android
    你是不是开放到外网之后数据库没有加密码,MongoDB 默认没有密码,我之前也被黑了一个
    关于   ·   帮助文档   ·   博客   ·   API   ·   FAQ   ·   实用小工具   ·   2733 人在线   最高记录 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 24ms · UTC 12:27 · PVG 20:27 · LAX 04:27 · JFK 07:27
    Developed with CodeLauncher
    ♥ Do have faith in what you're doing.