我十号买了腾讯的linux服务器，然后配置了一个测试应用。今晚测试时突然发现账户数据都没了，看了下mongodb的log，发现居然数据库被删除了，还有比特币勒索者留下的信息。坑爹的，威胁不付钱每24小时就删除数据库。查询勒索IP是罗马尼亚的。

这个服务器的mongodb我除了最开始安装时，试用ssh tunnel连接，屏蔽了bindip，没做其他操作。 请问这个局要怎么破？怎么增加服务器的安全性？ 下面是截取的删除那一段的日志。

2017-07-19T21:01:23.635+0800 I NETWORK [thread1] connection accepted from 185.163.109.66:42529 #3 (3 connections now open) 2017-07-19T21:01:56.319+0800 I - [conn3] end connection 185.163.109.66:42529 (3 connections now open) 2017-07-19T21:09:16.468+0800 I NETWORK [thread1] connection accepted from 185.170.42.4:60210 #4 (3 connections now open) 2017-07-19T21:09:18.606+0800 I COMMAND [conn4] dropDatabase admin starting 2017-07-19T21:09:18.658+0800 I COMMAND [conn4] dropDatabase admin finished 2017-07-19T21:09:18.658+0800 I COMMAND [conn4] setting featureCompatibilityVersion to 3.2 2017-07-19T21:09:20.102+0800 I COMMAND [conn4] dropDatabase local starting 2017-07-19T21:09:20.103+0800 I COMMAND [conn4] dropDatabase local finished 2017-07-19T21:09:21.612+0800 I COMMAND [conn4] dropDatabase wecatering starting 2017-07-19T21:09:21.687+0800 I COMMAND [conn4] dropDatabase wecatering finished 2017-07-19T21:09:23.010+0800 I COMMAND [conn4] command DATA_REQUEST.DATA_REQUEST command: insert { insert: “DATA_REQUEST”, documents: [ { email: "[email protected]", btc_wallet: “1KWAdZBAYFPtN38QxLPAzKV3SmzHeGrDLE”, note: "Your DB is in safety and backed up (check logs). To restore send 0.1 BTC and email with your server ip or domain name.

Each 24 hours we erase all data.

", _id: ObjectId(‘596f5a01b9695801b5214314’) } ], ordered: true } ninserted:1 keysInserted:1 numYields:0 reslen:44 locks:{ Global: { acquireCount: { r: 3, w: 3 } }, Database: { acquireCount: { w: 2, W: 1 } }, Collection: { acquireCount: { w: 2 } } } protocol:op_query 122ms 2017-07-19T21:09:23.691+0800 I - [conn4] end connection 185.170.42.4:60210 (3 connections now open)