They do not download random zip files then find what is in the zip file then connect 
They use scan tools for that, and having mysql directly on Internet unsecured would always ends up like this.
And the logs does not contains your Mysql address at all, I guess it’s the same as your Kodi with port forwarding and no security at all.
Anyway IP is mandatory for debugging, all password and sensitive information is removed, if an hacker can connect with just an IP then you will be hacked no matter what.
Furthermore FAQ and templates explain that you can send the logs by mail or privately here if there’s a privacy concern.