MySQL Forums
Forum List  »  MySQL Administrator

downloads.aaa1screensavers.com <- is this a HACK in MySql
Posted by: Marco GG
Date: July 08, 2005 06:06PM

Hello, I'm running mysql-4.1.12a-win32 on windows xp sp2.

I notice when I connect to mysql using localhost (the computer having mysql server) I get a strange Foreign Address connecting to mysql server:

************************************************************
TCP marco-laptop:1799 downloads.aaa1screensavers.com:3306 ESTABLISHED 2136

TCP marco-laptop:3306 downloads.aaa1screensavers.com:1799 ESTABLISHED 3812
************************************************************

On the other hand when I connect through a different computer (not localhost), I get a single or dns name Foreign Address as expected.

I have scan my comp for viruses, spyware, etc. and I have try to see if I could get access to this foreign address with no success.

I'm just curious whether this is normal or not.

If you think this is weird, here are the steps to follow on your own system to see if you have the same problem as I do:

1. Start mysql server => mysqld
2. start netstat -ao 1 => open your shell or cmd and type netstat -ao 1
3. start telnet o localhost 3306 => type telnet o localhost 3306, 3306 is your mysql
server port, or change it if you have changed it.
4. check netstat display and see if you see downloads.aaa1screensavers.com

P.S.

MySql is setup as a secure server and windows xp firewall is activated, no spyware or virus has been found.



Edited 1 time(s). Last edit at 07/09/2005 04:35PM by Marco GG.

Options: ReplyQuote


Subject
Written By
Posted
downloads.aaa1screensavers.com <- is this a HACK in MySql
July 08, 2005 06:06PM


Sorry, you can't reply to this topic. It has been closed.

Content reproduced on this site is the property of the respective copyright holders. It is not reviewed in advance by Oracle and does not necessarily represent the opinion of Oracle or any other party.