Re: SQL Attack?

Right but he was saying he's seeing those "inside" his sql logs. Which begs the question on what he does have open.

Leythos wrote:
In article <OumqqyZ0HHA.1168@xxxxxxxxxxxxxxxxxxxx>, sbradcpa@xxxxxxxxxxx says...
You see them "inside" your SQL logs though?

Can you match them up to ISA log files and see what's occuring at the same time?

No, No, No, we never expose SQL, not any database, to the public, ever.

I just watch our firewall, it has real-time reporting that shows the DNS (if I allow it) of the source and the destination.

.