January 24, 2006 at 6:59 am
Sql server 2005 Enterprise with Windows 2003 Server
Description:
In my Event Viewer :
Login failed for user 'sa'. [CLIENT: 211.233.38.77]
each 5 seconds.
How I can stop this?
thank you
January 24, 2006 at 8:57 am
Is the authentication set to NT only, or mixed mode?
January 24, 2006 at 9:03 am
mixed mode
January 25, 2006 at 1:21 am
On the client site check programs that are triing to logon to your SQL server.
I had similar programs long tima ago, when password for 'sa' user was changed and SQL Enterprise Manager was constantly triing to logon to SQL Server.
Darko
First rule of debugging:
No Code, No Bugs
January 25, 2006 at 1:33 am
The IP looks like an Internet address, if so then block port 1433 in your firewall.
If you have a valid DMZ access need then be sure to open port 1433 for that IP address.
SQL Server access from the Internet is risky, re: the Slammer worm.
Andy
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply