mysql中的数据库突然没了,里面出现了一个wns数据库TorecoveryourlostDatabaseandavoidleakingit:Sendus0.1Bitcoin

近日服务器收到攻击，数据库被清空并插入了一个表，内容如下：

To recover your lost Database and avoid leaking it: Send us 0.1 Bitcoin (BTC) to our Bitcoin address 1J6jLduCXbPyxt5EMTs7iHwdafANy4ThJc and contact us by Email with your Server IP or Domain name and a Proof of Payment. If you are unsure if we have your data, contact us and we will send you a proof. Your Database is downloaded and backed up on our servers. Backups that we have right now: xxx,xxx,xxx . If we dont receive your payment in the next 10 Days, we will make your database public or use them otherwise.

大致的意思呢就是,你的数据库被黑了,现在需要你登录一个网站支付折合人民币为800元,即可解锁.

如果你现在还不是一个顶级大佬的话,不要想着数据恢复了,80%不可能的,因为作者已经找了n多的方法试过,都没成功,问了问淘宝,找回数据需要几百块钱,问了腾讯云官方,说:这不怪他们.算了认栽吧反正也是自己的小数据库,没什么东西,
但是我们该如何预防这种事情呢?

**造成的原因:**是因为mysql账号密码被暴力破解和允许远程访问，
简单的说可能你的用户名和密码都是root和root,并且端口号也是3306,这样破解不是轻而易举吗?

为了防止这样的操作,我们进行如下配置

use mysql;
select user,host from user;

update user set host='localhost' where user = 'root';

delete from user where user != 'root';

delete from db where user != 'root';

flush privileges;

netstat -tunlp |grep 3305

update user set host = '你的ip' where user = 'root';

flush privileges;

systemctl restart mysql