 |
|
MYSQL show databases attempt
|
| |
Code:
p538
Severity: Notice
Description: This event is generated when an attempt is made to use the MySQL 'show' command to garner a list of databases.
Impact:
Intelligence gathering. This may be the prelude to an attack against one the databases or the MySQL daemon.
Corrective: Ensure that this event was not generated by a legitimate session then investigate the server for signs of compromise
Look for other events generated by the same IP addresses.
|