Attempts to login on 'sa' over and over again

Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

All Forums

SQL Server 2005 Forums

SQL Server Administration (2005)

Attempts to login on 'sa' over and over again

Author

Topic

netsurfer
Starting Member

5 Posts

Posted - 2008-11-24 : 09:48:16

Hi all,
I'm using SQL Server 2005, with SP2 and i notice, everytime i enable Remote Connections, that in the SQL SERVER Logs i have this message over and over again:

quote:
Login failed for user 'sa'. [CLIENT: 211.244.xxx.xx]

It seems to be a brute force attack from a Bot or someting like that.
Is anyway to block this attack, someting like after X number of failed logins block the IP, or something else??
I'm really worried whith this

Thanks in Advance

E.Mendes

SwePeso
Patron Saint of Lost Yaks

30421 Posts

Posted - 2008-11-24 : 10:42:43

1) Change port number for your sql server
2) Blocking should be done in a firewall, either hardware or software firewall.

E 12°55'05.63"
N 56°04'39.26"