SQL Server Performance Forum – Threads Archive

MS Sql Server Error

I am getting weird error with sql server express. Here are details from the log: Event Type:Failure Audit
Event Source:MSSQLSERVER
Event Category

4)
Event ID:18456
Date:19/10/2006
Time:09:27:26
User:N/A
Computer:INET
Description:
Login failed for user ‘sa’. [CLIENT: 81.27.111.162] I tried to ping the IP address shown in the error log, but the request times out. It is not our IP address. I wonder how to solve this problem as the event is firing few times a second and bloting the error file.

Hi,
1). is your network on DHCP enabled !
2). does your SQL Server have access for INTERNET / outside Network !??
3). Ensure firewall is setup properly , have you check cross check with Network Support Team at your end !!! Regards
Hemantgiri S. Goswami
"Humans don’t have Caliber to PASS TIME , Time it self Pass or Fail Humans" – by Hemantgiri S. Goswami
————————
http://hemantgirisgoswami.blogspot.com

1.No
2.Yes
3. I do not run a firewall. Did the checks and ISP’s Router is blocking everything apart from neccessery ports. I actually have 2 services running on my server. One is MSSQL Server and the other is SQLSERVER Express.
I stoped MSSQL SERVER Service and the problem has stopped. There is no problem with accessing databases.

Im not really sure why you think this error is strange.
Youre running an SQL Server without a firewall, live on the internet ? I would expect to see a lot of login failures from various worms and hackers scanning for vulnerable machines (including slammer worm)

Refer to thishttp://blogs.msdn.com/sqlexpress/archive/2006/04/20/580312.aspx fyi. Satya SKJ
Microsoft SQL Server MVP
Contributing Editor & Forums Moderator
http://www.SQL-Server-Performance.Com
This posting is provided AS IS with no rights for the sake of knowledge sharing.

]]>