Want to subscribe to topics you're interested in?
Become a Member

MariaDB Log error about unknown ip

Discussion in 'Nginx, PHP-FPM & MariaDB MySQL' started by pamamolf, Jul 5, 2014.

  1. pamamolf

    pamamolf Premium Member Premium Member

    4,074
    427
    83
    May 31, 2014
    Ratings:
    +833
    Local Time:
    10:56 PM
    Nginx-1.25.x
    MariaDB 10.3.x
    Hi

    On log files i got this:

    Code:
    Version: '10.0.12-MariaDB'  socket: '/var/lib/mysql/mysql.sock'  port: 3306  MariaDB Server
    140705  0:37:42 [Warning] IP address '184.172.59.146' has been resolved to the host name '184.172.59.146-static.reverse.softlayer.com', which resembles IPv4-address itself.
    140705  4:56:26 [Warning] IP address '119.146.202.126' could not be resolved: Name or service not known
    140705  9:15:45 [Warning] IP address '124.232.147.150' could not be resolved: Name or service not known
    
    But i do not use any if the ip's above and i don't know why i am getting this error :(


    Thanks
     
  2. eva2000

    eva2000 Administrator Staff Member

    54,107
    12,179
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,738
    Local Time:
    6:56 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    The error is because mysql is trying to resolve and do a reverse ip look up of but the ips listed do not contain a reverse lookup address

    the 2 ips

    2 belongs to china

    http://ip-lookup.net/?119.146.202.126
    http://ip-lookup.net/?124.232.147.15

    and one to softlayer

    http://ip-lookup.net/?184.172.59.146

    where is your server hosted and have you done anything iptable or csf firewall wise i.e. open ports or whitelist certain IP addresses or hostnames to remotely be able to connect to this server's MySQL server ?

    You shouldn't get any of these errors if CSF Firewall is properly installed and configured for out of box Centmin Mod installs, as CSF Firewall protects you from such attacks

    You could also remove the warnings using skip-name-resolve in /etc/my.cnf but that only hides the fact that these remote ips are trying to connect to your server's MySQL server instance (which they should NOT even be able to with CSF Firewall in place protecting the server).

    in /etc/my.cnf and restart mysql server to hide warnings
    Code:
    [mysqld]
    skip-name-resolve
    
    skip-name-resolve http://dev.mysql.com/doc/refman/5.5/en/server-options.html#option_mysqld_skip-name-resolve when set will only allow connections via ip addresses and not hostnames, so remote mysql user grants would need to be done via username@remoteipaddress and NOT username@remotehostname.

    Hence, why CSF Firewall is installed and enabled by default for Centmin Mod installs http://centminmod.com/csf_firewall.html :D
     
    Last edited: Jul 6, 2014
  3. pamamolf

    pamamolf Premium Member Premium Member

    4,074
    427
    83
    May 31, 2014
    Ratings:
    +833
    Local Time:
    10:56 PM
    Nginx-1.25.x
    MariaDB 10.3.x
    I just disable the server for a minute lol :)

    Yes now is ok no more warnings :)

    Thanks
     
  4. eva2000

    eva2000 Administrator Staff Member

    54,107
    12,179
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,738
    Local Time:
    6:56 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    disabled server or disabled CSF and hence the above errors ?
     
  5. pamamolf

    pamamolf Premium Member Premium Member

    4,074
    427
    83
    May 31, 2014
    Ratings:
    +833
    Local Time:
    10:56 PM
    Nginx-1.25.x
    MariaDB 10.3.x
    disabled CSF and got that errors and now i enable it and all errors gone :)
     
  6. rdan

    rdan Well-Known Member

    5,443
    1,402
    113
    May 25, 2014
    Ratings:
    +2,194
    Local Time:
    4:56 AM
    Mainline
    10.2
    I just enable skip-name-resolve on my.cnf, Thanks Eva.