Port 3306 (MySQL / MariaDB)

Default port for MySQL and MariaDB.

Transport
TCP
Internet exposure
Never expose

Should not be reachable from the internet.

Security notes

  • Internet-exposed databases are brute forced and, when weak, wiped and held to ransom.
  • Bind to localhost or the application network only.

When it shows up in your logs

Inbound 3306 from the internet is scanning or brute forcing.