- Server operating system version
- Ubuntu 20.04.5 LTS
- Plesk version and microupdate number
- 18.0.50
on Ubuntu 20.04 i have installed Docker with Mysql 5.7.34 , in Plesk is in the firewall all ip blocked in the rule for MySQL-Server, only acesss from my IP Range from my internet provider
in the database is in the configuration only acess local connections.
but in the docker log is see this :
...
2023-03-10T14:22:51.352150Z 22875 [Note] Access denied for user 'hd'@'89.248.163.132' (using password: YES)
2023-03-10T14:22:52.696050Z 22876 [Note] Access denied for user 'view'@'45.93.201.74' (using password: YES)
2023-03-10T14:22:55.045903Z 22879 [Note] Access denied for user 'root'@'45.93.201.74' (using password: YES)
2023-03-10T14:23:01.928298Z 22886 [Note] Access denied for user 'xy'@'89.248.163.132' (using password: YES)
2023-03-10T14:23:15.645962Z 22891 [Note] Access denied for user 'readonly'@'45.93.201.74' (using password: YES)
2023-03-10T14:23:18.738455Z 22892 [Note] Access denied for user 'root'@'45.93.201.74' (using password: YES)
2023-03-10T14:23:39.033721Z 22903 [Note] Access denied for user 'Hoscodb_Masterpro_208TonDucThangHN'@'45.93.201.74' (using password: YES)
...
and in the Firewall i have blocked this IPs , without success !
How can i Block this hacker attacks ?
in the database is in the configuration only acess local connections.
but in the docker log is see this :
...
2023-03-10T14:22:51.352150Z 22875 [Note] Access denied for user 'hd'@'89.248.163.132' (using password: YES)
2023-03-10T14:22:52.696050Z 22876 [Note] Access denied for user 'view'@'45.93.201.74' (using password: YES)
2023-03-10T14:22:55.045903Z 22879 [Note] Access denied for user 'root'@'45.93.201.74' (using password: YES)
2023-03-10T14:23:01.928298Z 22886 [Note] Access denied for user 'xy'@'89.248.163.132' (using password: YES)
2023-03-10T14:23:15.645962Z 22891 [Note] Access denied for user 'readonly'@'45.93.201.74' (using password: YES)
2023-03-10T14:23:18.738455Z 22892 [Note] Access denied for user 'root'@'45.93.201.74' (using password: YES)
2023-03-10T14:23:39.033721Z 22903 [Note] Access denied for user 'Hoscodb_Masterpro_208TonDucThangHN'@'45.93.201.74' (using password: YES)
...
and in the Firewall i have blocked this IPs , without success !
How can i Block this hacker attacks ?