Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Unauthenticated user in mysql processes list - hack attempt?

Tags:

security

mysql

I see frequently when I run mysqladmin proc or when I review the MySQL Server process list a user marked with: unauthenticated user trying to connect.

+-----+----------------------+--------------+-----------------+---------+------+------------------+------------------+-----------+---------------+-----------+
| Id  | User                 | Host         | db              | Command | Time | State            | Info             | Rows_sent | Rows_examined | Rows_read |
+-----+----------------------+--------------+-----------------+---------+------+------------------+------------------+-----------+---------------+-----------+
| 40  | unauthenticated user | x.x.x.x:xxxx |                 | Connect |      | Reading from net |                  | 0         | 0             | 0         |

What may causes such thing?

Is that normal, or should I investigate my system for any vulnerability or security breach?

Thanks

like image 531
Hasan Alsawadi Avatar asked Nov 03 '22 17:11

Hasan Alsawadi


1 Answers

unauthenticated user is the user connected and not yet sent authentication credentials. Doesn't look like a hack attempt to me.

like image 121
bansi Avatar answered Nov 08 '22 04:11

bansi