MySQL server brute: mysqld: [Warning] access denied for user 'xxxxxx'@xx.xx.xx.xx should I be worried?

Question

MySQL

Periodically, in the system log I see entries of this nature:
mysqld: 2019.05.11 12:00:00 1200 [Warning] access denied for user 'xxxxxx'@xx.xx.xx.xx (using password: YES)
Here is a screenshot:

I am like this I understand, this someone brute mysql server?
Is this worth worrying about? And do we need to take any action?

Answer 1

You should not worry, but find the one who opened the MySQL port to the whole world. This is why people are losing their jobs

Answer 2

it’s worth it
if it’s open to the outside and you find a non-standard port (you have a non-standard port, after all?
and there is an irresistible need to go outside?
), then you need to urgently change

Answer 3

First you need to understand - is there a need to keep the mysql server open to the entire Internet. This is bad practice. What can be done ? If necessary, close the firewall on the IP white list. Close VPN.

Answer 4

At a minimum, you should install fail2ban.
And it is better to forbid the MySQL server to look outside.