My website monitors were going off the charts one day and I started investigating. Tons of SQL Injection attempts were flooding my servers. Without much difficu

My website monitors were going off the charts one day and I started investigating. Tons of SQL Injection attempts were flooding my servers. Without much difficulty, I tracked the IPs to a company that does security checking and reporting. I never requested such a test. Later, that company sent me an email saying my site was insecure because they sent a SQL injection request and the response included lots of SQL. They wanted to sell me a comprehensive report and methodology to eliminate similar threats in the future. Turns out, the SQL their threat detection system found was in a static html blog post where I was telling people how to build a particular type of SQL Statement. I did not purchase the "services" they were selling.