MYSQL root login attempt

 

Code: p537

Severity: Notice

 

Description: This event is generated when the user "root" logs in to a MySQL database from an external source.

Impact: Serious. An attacker may have gained superuser access to the system.

Corrective: Ensure that this event was not generated by a legitimate session then investigate the server for signs of compromise Look for other events generated by the same IP addresses.