January 31, 2011 at 3:33 pm
I see this message int he error log.. The ip address mentioned is it the ipaddress of machine where someone tried using "abc: account or is it ip address of router or is it ipaddress of VPN connection?
January 31, 2011 at 3:43 pm
It's the IP address of the machine that originated the connection to SQL.
Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability
January 31, 2011 at 11:50 pm
The machine which tried connecting to your sql server:smooooth:
NEVER NEVER EVER GIVE UP;-)
February 1, 2011 at 12:05 am
If you want more info about the failed login itself, you can implement an event notification for failed logins.
(see attachement)
That provides interesting information.
At instance level we have enabled "failed login reporting" for Login auditing.
I only have the event notification active when I suspect hack attempts.
Johan
Learn to play, play to learn !
Dont drive faster than your guardian angel can fly ...
but keeping both feet on the ground wont get you anywhere :w00t:
- How to post Performance Problems
- How to post data/code to get the best help[/url]
- How to prevent a sore throat after hours of presenting ppt
press F1 for solution, press shift+F1 for urgent solution 😀
Need a bit of Powershell? How about this
Who am I ? Sometimes this is me but most of the time this is me
February 2, 2011 at 5:40 pm
123.345.678.50
that has to be spoofed.
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply