Allow login to any MySQL server
This
option should be disabled as it allows attackers to bruteforce login to any MySQL server. If you feel this is necessary, use
trusted proxies list. However, IP-based protection may not be reliable if your IP belongs to an ISP where thousands of users, including you, are connected to.