September 14, 2007 at 3:25 pm
I have a strange message in the SQL server log. It says:
Login failed for user ". The user is not associated with a trusted SQL server connection [Client: 10.112.1.215]
I made a search for this IP address 10.112.1.215 in whois and it says
| 10.112.1.215 | ||
| Record Type: | IP Address | |
OrgName: Internet Assigned Numbers Authority OrgID: IANA Does it mean that somebody from that organization is trying to login to my server? | ||
September 14, 2007 at 3:31 pm
That's actually going to be a machine within your network. You're better off doing an nslookup of that IP address to see the machine trying to make the connection.
September 17, 2007 at 8:02 am
While it doesn't help you track down the specific machine, that particular message means that someone/thing tried to authenticate to SQL Server with Windows authentication but wasn't on the same domain as the SQL Server or a domain with a trust relationship to the SQL Server's domain. So, for example, I get those when people on laptops which aren't on the corporate domain accidentally try to use Windows authentication to connect to SQL Server.
September 17, 2007 at 8:23 am
Karen,
You are right, I figured it out, that was exactly the case. Thanks!
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply