Exessive connection Attempts (SQL Server 2000 sp3a)

• Jbabington

  SSC Eights!

  Points: 854

  More actions

  June 3, 2004 at 10:46 am

  #160958

  SERVER STATS:

  OS = WIN 2000 Serv SP 4

  RDBMS = SQL Server 2000 SP3a (8.00.760)

  Noticed an alarming number of connection attempts in my Error Logs all currently fail and I have provided examples. My Anti Virus Software is Nortons AV and is upto date. Any ideas ?

  Login Failed for user 'sa' (hundreds of attempts) c.10 attempts per second

  Login Failed for user 'Admin' (hundreds of attempts)c.10 attempts per second

  Login Failed for user 'Test' (hundreds of attempts)c.10 attempts per second

  Jim Babington

  Jbabington
  Jbabington@hotmail.com

• Nicholas Cain

  SSC-Dedicated

  Points: 33009

  More actions

  June 3, 2004 at 11:31 am

  #508875

  Get your network bods to check for incoming connection attempts, there could be a virus on another machine, a trojan or a script kiddie.

  ---

  
  Shamless self promotion - read my blog http://sirsql.net

• Steve Jones - SSC Editor

  SSC Guru

  Points: 736458

  More actions

  June 4, 2004 at 7:46 am

  #509008

  That's teh best way and then block the ip at the router while you investigate.

• Yelena Varshal

  SSC-Dedicated

  Points: 34286

  More actions

  June 4, 2004 at 8:57 am

  #509033

  Steve, set up a Profiler or a Trace for the event "Audit Login Faled."

  You will see the Application Name that is trying to connect.

  Regards,Yelena Varsha