Enabling MySQL port attack logging

meTaLiCroSS · **Author**

A few minutes ago I checked my server because some users told about it was getting freezed. Looking at the console I watched how mysql was throwing "cannot connect to Local mysqlserver". So I just guess someone was attacking my mysql server. I blocked remote mysql conections (configuring my.cnf) and problem just ended.

Now, my question is, how I can check when bots try to flood my mysql port? I don't think that they try to enter to mysql using wrong root passwords, those are just simply port attacks

Kia · 06-15-2015 , 15:18 Re: Enabling MySQL port attack logging

What OS are you using?

meTaLiCroSS · 06-15-2015 , 18:47 Re: Enabling MySQL port attack logging

Quote:

Originally Posted by Kia

What OS are you using?

Linux, Debian

Kia · 06-16-2015 , 01:56 Re: Enabling MySQL port attack logging

Try

PHP Code:


			
netstat -n | grep :3306

Replace 3306 with your SQL port if it differs.