November 22, 2011 at 6:08 pm
Hi Everyone,
I have an old database server running on SQL Server 2000 Enterprise Edition.
Recently, I noticed multiple failed logins on the server. As the error log in SQL Server 2000 does not show the client IP, if there any method I could use to trace the client IP which is giving the failed login ?
Appreciate your suggestions.
Thank You !
Regards,
Al
November 23, 2011 at 6:10 am
If it is a Windows authenticated user that is getting failed login, it should write it to the event viewer security log.
You could also run a trace for just failed logins and catch the IP and host name.
-Roy
November 24, 2011 at 8:11 pm
Hi Roy,
Thanks for your suggestion however it seems like sql server 2000 does not provide the IP address information even in the SQL Server profiler.
The connection is done via SQL Server Authentication.
Well I'm still looking for ways to trace it.
I'm always open to suggestions. = )
Thank You !
Regards,
Al
November 24, 2011 at 8:34 pm
Hi Roy !
You are right, SQL Server profiler does provide the information. I did not select the hostname column when performing the trace.
Thank You very much !
Regards,
Al
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply