![(Предупреждение) Не удалось определить IP-адрес «XXX.XXX.XX.XXX»: имя или служба неизвестны](https://rvso.com/image/756247/(%D0%9F%D1%80%D0%B5%D0%B4%D1%83%D0%BF%D1%80%D0%B5%D0%B6%D0%B4%D0%B5%D0%BD%D0%B8%D0%B5)%20%D0%9D%D0%B5%20%D1%83%D0%B4%D0%B0%D0%BB%D0%BE%D1%81%D1%8C%20%D0%BE%D0%BF%D1%80%D0%B5%D0%B4%D0%B5%D0%BB%D0%B8%D1%82%D1%8C%20IP-%D0%B0%D0%B4%D1%80%D0%B5%D1%81%20%C2%ABXXX.XXX.XX.XXX%C2%BB%3A%20%D0%B8%D0%BC%D1%8F%20%D0%B8%D0%BB%D0%B8%20%D1%81%D0%BB%D1%83%D0%B6%D0%B1%D0%B0%20%D0%BD%D0%B5%D0%B8%D0%B7%D0%B2%D0%B5%D1%81%D1%82%D0%BD%D1%8B.png)
Использую Mariadb-10.3 на 127.0.0.1:3310. Сайты работают корректно, все хорошо. Но в логах заметил такие соединения:
200812 21:16:31 [Warning] IP address '195.54.167.225' could not be resolved: Name or service not known
200813 1:44:22 [Warning] IP address '177.156.63.4' has been resolved to the host name '177.156.63.4.dynamic.adsl.gvt.net.br', which resembles IPv4-address itself.
200813 3:03:27 [Warning] IP address '51.103.146.73' could not be resolved: Name or service not known
200813 3:24:40 [Warning] IP address '20.52.50.38' could not be resolved: Name or service not known
200813 15:01:29 [Note] Hostname 'worker-13.sfj.censys-scanner.com' does not resolve to '192.35.168.220'.
200813 15:01:29 [Note] Hostname 'worker-13.sfj.censys-scanner.com' has the following IP addresses:
200813 15:01:29 [Note] - 192.35.168.208
200813 18:14:01 [Warning] IP address '170.130.187.30' could not be resolved: Name or service not known
200813 21:14:05 [Warning] IP address '64.227.86.82' could not be resolved: Name or service not known
200813 21:39:55 [Note] Hostname '186-210-095-134.xd-dynamic.algarnetsuper.com.br' does not resolve to '186.210.95.134'.
200813 21:39:55 [Note] Hostname '186-210-095-134.xd-dynamic.algarnetsuper.com.br' has the following IP addresses:
200813 21:39:55 [Note] - 195.85.231.19
200813 23:11:43 [Warning] IP address '92.63.194.76' could not be resolved: Name or service not known
200814 1:17:00 [Warning] IP address '79.152.33.82' has been resolved to the host name '82.red-79-152-33.dynamicip.rima-tde.net', which resembles IPv4-address itself.
200814 13:18:19 [Warning] IP address '118.193.28.58' could not be resolved: Name or service not known
200814 18:47:42 [Note] Hostname '3c2e01.rederatural.com' does not resolve to '104.140.188.10'.
200814 18:47:42 [Note] Hostname '3c2e01.rederatural.com' has the following IP addresses:
200814 18:47:42 [Note] - 212.32.237.101
200814 20:25:51 [Note] Hostname '683b217.rederatural.com' does not resolve to '104.140.188.6'.
200814 20:25:51 [Note] Hostname '683b217.rederatural.com' has the following IP addresses:
200814 20:25:51 [Note] - 212.32.237.90
200814 22:43:46 [Note] Hostname 'zg-0708b-125.stretchoid.com' does not resolve to '192.241.238.224'.
200814 22:43:46 [Note] Hostname 'zg-0708b-125.stretchoid.com' has the following IP addresses:
200814 22:43:46 [Note] - 178.210.89.119
200814 23:08:48 [Note] Hostname 'zg-0708a-49.stretchoid.com' does not resolve to '192.241.212.195'.
200814 23:08:48 [Note] Hostname 'zg-0708a-49.stretchoid.com' has the following IP addresses:
200814 23:08:48 [Note] - 178.210.89.119
200814 23:40:20 [Warning] IP address '80.82.78.85' could not be resolved: Name or service not known
200815 2:01:33 [Warning] IP address '183.136.225.44' could not be resolved: Name or service not known
После этого сервер mysql отключается и мне приходится его перезапускать. Можете сказать, что это? Попытка взлома или что-то еще?
Я где-то это прочитал и в /etc/my.cnf добавил skip_name_resolve = 1
. Помогает?
решение1
Для каждого входящего соединения MariaDB пытается выполнить DNS-поиск. Как вы написали в вопросе, добавление skip-name-resolve = on
к /etc/my.cnf
предотвратит поиск.
Тот факт, что вы вообще получаете эти попытки подключения, означает, что ваша БД открыта для Интернета. Настоятельно рекомендуется не разрешать публичный доступ к этому порту, например, ограничить интерфейс обратной связи и/или использовать брандмауэр, чтобы разрешить только IP-адреса из белого списка.