Paresh Prajapati (2/11/2009)

---

SQAPro (2/11/2009)

---

That's not a 'valid' IP, it's one of the ones that is reserved for special or future uses..

http://www.iana.org/assignments/ipv4-address-space/

You sometimes see that IP used by trojans...

That's not a 'valid' IP, it's one of the ones that is reserved for special or future uses..

http://www.iana.org/assignments/ipv4-address-space/

You sometimes see that IP used by trojans or botnets as...

Paresh Prajapati (2/10/2009)

---

Only I know that from...

GilaMonster (2/10/2009)

---

Then tell them to do their bloody jobs and find out where the intrusion is coming...

huh must have misread things.. it just sounded to me like a new setup you were trying to debug..

just call me emeliy lattella then.. "Never Mind"

I'll toss in another vote that in the long run, you'd probably be better off running 64 bit OS and SQL server on that box.

If you are still in the...

Greg Edwards (2/6/2009)

---

It looks to me like someone might be trying to give you a real life example of SQL Injection.

Hopefully this machine is not internet facing and has been...

What are the first two octets of of the IP address?

Did you try running it through one of the whois links provided above?

If you have developers that are using, or otherwise have access to MS Visual Studio Team System in either then "Team Suite" or "Test Edition" varieties, then you have access...

also have a good look at the IP itself, is it a non-routable IP such as a 10.10 or 192.168 if it is then it MIGHT...

As to the question of how someone could go 6 years without knowing about sql injection.. bear in mind that for the first year or so the attack was not...

as for titles: "Senior Software QA Engineer"

In other words "I like to break things" 😀

Except of course that's not actually accurate because truthfully 'things' are broken...

compelled to respond, many post when value they add not.

This the path to the forum dark side is..

care we must all take, to that way stray not.

Time to...

Another thing related to SQL injection is the display of SQL information in errors seen by the end user.

it's ok to enable stuff like that on your test environments, and...

Don't forget to consider other things like where backups are being placed, the same for logfiles, who can run backups, physical security for the backup media itself, and even who's...