Groups | Blog | Home
all groups > sql server programming > april 2007 >

sql server programming : Login failed for user


Sajith
4/3/2007 11:00:03 PM
Hi all,

I have these lines repeated many times, every 1 second, in the error log:

Login failed for user 'user'
Login failed for user 'sa'
Login failed for user 'root'
Login failed for user 'admin'

Is someone trying to hack my SQL server (version is 2000)?


How can I control and stop these logins?

Thank you

GilaMonster
4/3/2007 11:50:04 PM
Certainly looks like a hack.

Run profiler for a while, capture the audit login failure event and log the
host name. Maybe you can find out where the logins are coming from.

I'd also suggest you make sure your sa password is strong.

--
Gail Shaw (MCDBA, MCTS SQL 2005)
http://gail.rucus.net/


[quoted text, click to view]
Tibor Karaszi
4/4/2007 12:00:00 AM
[quoted text, click to view]

It certainly look that way!

--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://sqlblog.com/blogs/tibor_karaszi


[quoted text, click to view]
AddThis Social Bookmark Button