sqlmap.Scanner

Description

This indicates detection of an attempted SQL Injection scan on a server by sqlmap Scanner.
sqlmap Scanner is used to probe web servers to see which systems are vulnerable to SQL Injection attacks. An attacker may use the scanner to identify that your system is vulnerable and perform further attacks based on its findings.

Affected Products

All web servers

Impact

System Compromise: Remote attackers can add, view, delete or modify data in the database of the affected application

Recommended Actions

Monitor the traffic from that network for any suspicious activity.

References