[DepLexOr]

I tried remotely connecting to a MySQL server to do an authentication bypass exploit, however it comes up with:

Code

ERROR 1130: Host 'My IP Address' is not allowed to connect to this MySQL server

Which obviously means I cannot connect remotely. Is there a way to bypass this without being on the network? Any help is appreciated.

[kambrik]

Not that i am aware of; i believe what its saying is that there is only a certain ip(s) that allowed to connect to the system. If someone has more information I would also like to hear a bypass.

[ProblemSolva]

This is a very good security measure. This means they whitelisted maybe some ips only to have access there. And the rest is blacklisted. I dont know anyways of bypassing that.
Or u have to be connected through their network. Maybe they use vpn access.

[DepLexOr]

This is a very good security measure. This means they whitelisted maybe some ips only to have access there. And the rest is blacklisted. I dont know anyways of bypassing that.
Or u have to be connected through their network. Maybe they use vpn access.

I know they don't use VPNs. I have access to their forum's admin control panel (which blocks me out after 3 attempts). Their forum doesn't store their database, however I'd still have access to all the forum accounts (10,000+). Their database has over 1 million registered users (it's a gaming server).

Not that i am aware of; i believe what its saying is that there is only a certain ip(s) that allowed to connect to the system. If someone has more information I would also like to hear a bypass.

Yes that's what it is. I know the owner gave permission to two other people (I can't R.A.T them because they're very security conscious).

If there's anything at all that will get me into that database I'd love some information on it.

Edit:
I have also discovered two other MySQL servers running Apache/2.2.26 (CentOS). It comes up with a login box saying "Who's there?!." when I try to access it through port 80. However, the MySQL server is not vulnerable to an authentication bypass, or the username is not "root". I'm not entirely sure what's in it, but I got the IPs after running a tracert and port scanning them.

[21redallday12]

shell it and access the mysql database locally?

[InspectorGadget]

Depending what backend it is running - load a shell into a template or php template.
Then use the shell's SQL manager from there.

Localhost will likely be the only IP allowed to connect.

[DepLexOr]

Depending what backend it is running - load a shell into a template or php template.
Then use the shell's SQL manager from there.

Localhost will likely be the only IP allowed to connect.

I have no access to any administrative features. And the forum's admin panel will not be linked to the game's database. I don't even have access to it, I just know where the panel's located.