"Server attacks client" is pretty common with web browsers. Probably more common than the other way around. Much less common with Database clients of course.