MYSQL show databases attempt

 

Code: p538

Severity: Notice

 

Description: This event is generated when an attempt is made to use the MySQL 'show' command to garner a list of databases.

Impact: Intelligence gathering. This may be the prelude to an attack against one the databases or the MySQL daemon.

Corrective: Ensure that this event was not generated by a legitimate session then investigate the server for signs of compromise Look for other events generated by the same IP addresses.