sqlmap
recommended: challenge
Operated by Open-source
security
sqlmap — automated SQL injection detection and exploitation tool. Presence in logs almost always indicates an attack attempt.
How to identify it
User-agent contains any of:
sqlmap/
Example user-agent string:
sqlmap/1.7.8#stable (https://sqlmap.org)robots.txt
Well-behaved crawlers honor robots.txt. To control sqlmap:
Allow full access
User-agent: sqlmap/
Allow: /Block entirely
User-agent: sqlmap/
Disallow: /
Grey-area scrapers ignore robots.txt. Botscope enforces your policy at the edge or origin regardless —
see how →
References
See sqlmap on your own site
Botscope shows every bot and AI agent hitting your site — and lets you allow, challenge, or block each one. Observe first, enforce when you're ready.
Start free — connect in minutes