Re: Login failed for user 'sa'

From: Jens Süßmeyer (Jens_at_Remove_this_For_Contacting.sqlserver2005.de)
Date: 04/28/05 

Date: Thu, 28 Apr 2005 12:25:54 +0200

http://www.appsecinc.com/products/appradar/mssql/faq.html

HTH, Jens Suessmeyer.

"Ian Bell" <ianbell6862@hotmail.comm> schrieb im Newsbeitrag
news:er95zJ9SFHA.3188@TK2MSFTNGP09.phx.gbl...
> Hi,
>
> We are getting a lot of entries in the Windows event log indicating 'Login
> failed for user 'sa'' and 'root'. It seems like an obvious hack attempt
> but is there any way of determining the source (ip address) of these
> attempts. I can't understand why SQL doesn't log the ip address of login
> attempts.
>
> Thanks - Ian
>

Relevant Pages

  • Login failed for user sa
    ... We are getting a lot of entries in the Windows event log indicating 'Login ... failed for user 'sa'' and 'root'. ... It seems like an obvious hack attempt but ...
    (microsoft.public.sqlserver.security)
  • Re: foreign ip in /var/log/wtmp
    ... That's normally a login ... you reported differences in the wtmp entries ... between logging in via ssh verses logging in over the console. ...
    (comp.os.linux.security)
  • Re: 440 Login Timeout!! OWA Authentication error!!
    ... which entries I should add .. ... > should of course have DNS entries pointing mail to your exchange server). ... I get the login screen but no login account works! ... >> The page you are trying to access is secured with Secure Sockets Layer ...
    (microsoft.public.exchange2000.general)
  • Re: user-level security
    ... >To use their login and compare it to table entries, ... >CurrentUser() function. ...
    (microsoft.public.access.security)
  • Problem with login.conf classes
    ... I can add the login.class entries to the ... I create a copy of the default entry with the name "mygroup" and add ... Then I run "chpass jrandom" add put him in the mygroup class. ... Then I try to login as jrandom, but I use an invalid password. ...
    (freebsd-questions)