Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2005 Forums
 SQL Server Administration (2005)
 Remote attacks on my database

Author  Topic 

machinegun
Starting Member

1 Post

Posted - 2007-11-29 : 22:15:04


Hi, I´m new on this forum, I just need help to solve or avoid better saying attacks to a SQL Server 2005 database. I ´ve had some intruders on my database, changing some data on 2 tables. the information there is too important. But i need to know how can i get all the remote address that make some masive updates on my DB. I´ve make some triggers to avoid that, but those peaoples have reach modify data. I think is some user on the same VPN.

Help me please what can i do to get the ip address.

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2007-11-29 : 22:27:49
It's a little late to get that information unless you've got network logs to view.

You've probably got some code in your application with SQL injection or are using dynamic SQL improperly. Creating triggers isn't really going to solve the problem. You need to fix your code.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/
Go to Top of Page
   

- Advertisement -