mongo 数据库被黑了，各位 V 友怎么做网站安全防护的？

[walker001]

db.HOW_TO_RESTORE.find();

{ "_id" : ObjectId("5d95544778e531762eb557c2"), "1" : "localbitcoins.com", "2" : "payments.changelly.com", "3" : "wirex.com", "4" : "coinmama.com", "5" : "paxful.com", "__" : "", "google" : "or google it - buy bitcoins via credit card" }

{ "id" : ObjectId("5d95544778e531762eb557c1"), "What_happend" : "Your DB was saved and archived, you have 7 days to restore it.", "" : "", "How_to_restore" : "Send 0.1 Bitcoin to address bellow", "pay_to_btc_address" : "164UY4sPw9GzdqGdwR4fKnM7S7yVM29uy2", "send_mail" : "email to [e-mail] with payment transaction id, your base name and ip address of your mongodb server.", "email_to" : "[e-mail]", "get_db_back" : "You will get your db archive back immediately right after we receive an email and check payment.", "TIME" : "you have 7 days to pay, then DB will deleted because of storage costs.", "__" : "", "Where_to_buy_btc" : "List below of exchanges where you can buy BTC" }

[wangkun025]

大哥，你好像付款了
向现实低头

[walker001]

@wangkun025 哈哈哈，我那小破站都没几个人访问，数据不多

[qq316107934]

别付款，一般都是直接删库的，说有备份都是假的。

[qq316107934]

mongo 端口不要暴露到外部，定期跑任务 dump 备份然后加密压缩下就行了。

[wangkun025]

@walker001 那个比特币的收款地址，已经收到钱了

[renmu]

你是不是开放到外网之后数据库没有加密码，MongoDB 默认没有密码，我之前也被黑了一个