Re: MySQL impossible suspicious connections

[Peter Brawley]

> how it's possible this without internet access? Is binded locally...

Your server's on the internet, malicious attackers try to attack what they can find.

For each user in the mysql.user table, MySQL needs to do a reverse lookup on each IP address trying to connect to it, then does a forward lookup on the returned domain to see if it matches the connecting address. This can be turned off if my.cbf/ini specifis skip_name_resolve.

Setting the bind address just tells MySQL to decline all non-local requests.