I launched a new website in April which uses SQL Server 2005 Express. I just reviewed the error logs and see several instances of login failures. Almost all are Error 18456, Severity 14, State 5 or 8. The users in the error message vary...like "admin", "user", "sa", "sql" (all are not valid). The client IP addresses are unknown to me. Usually when login failures occur from a client, there is one failure every 1-2 seconds continuously for a couple of days (thousands of login failures for each instance). Are these Hackers trying to access my database? My server is currently not behind a firewall.
Start Free Trial