Page 1 of 1

Access denied for user

Posted: Sun Sep 13, 2020 5:06 am
by http
обнаружил в логе такие записи

Code: Select all

2020-09-13T02:23:50.066142Z 15463 [Note] Access denied for user 'user1'@'localhost' (using password: YES)
2020-09-13T02:34:29.703257Z 15822 [Note] Access denied for user 'user2'@'localhost' (using password: YES)
2020-09-13T02:45:50.040779Z 16227 [Note] Access denied for user 'user3'@'localhost' (using password: YES)
2020-09-13T02:45:50.092565Z 16228 [Note] Access denied for user 'window'@'localhost' (using password: YES)
2020-09-13T02:52:44.102439Z 16464 [Note] Access denied for user 'window'@'localhost' (using password: YES)
2020-09-09T02:59:16.750892Z 387333 [Note] Access denied for user 'admin'@'34.89.9.91' (using password: YES)
2020-09-09T02:59:16.832183Z 387334 [Warning] IP address '34.89.9.91' has been resolved to the host name '91.9.89.34.bc.googleusercontent.com', which resembles IPv4-address itself.
2020-09-09T02:59:16.976989Z 387334 [Note] Access denied for user 'root'@'34.89.9.91' (using password: YES)
2020-09-09T02:59:17.058969Z 387335 [Warning] IP address '34.89.9.91' has been resolved to the host name '91.9.89.34.bc.googleusercontent.com', which resembles IPv4-address itself.
2020-09-09T02:59:17.205937Z 387335 [Note] Access denied for user 'asteriskuser'@'34.89.9.91' (using password: YES)
2020-09-09T02:59:17.288980Z 387336 [Warning] IP address '34.89.9.91' has been resolved to the host name '91.9.89.34.bc.googleusercontent.com', which resembles IPv4-address itself.

судя по логам пытаются подобрать пароль
user1 user2 user3 это имена юзеров, которых я создал в панели, как узнали имена аккаунтов?
тем более что в базе нету юзера user1 как такового
обычно создается юзер с префиксом user1_имя

Re: Access denied for user

Posted: Sun Sep 13, 2020 7:41 am
by grayfolk
Независимо от этой проблемы, что делаю первым делом после установки Весты - закрываю в файерволе порты бд, им нечего смотреть наружу.

Re: Access denied for user

Posted: Sun Sep 13, 2020 9:13 am
by http
почему в панели висит открытый порт у базы? и разрешены удаленные подключения по умолчанию?