Windows Event Viewer has a lot of 'failure audit' events for failed logins

I am receiving a lot of audits for people trying to access the SA account on SQL 2005. It looks to me to be from one IP address. I don't tend to use the SA account, so is this something I can rename or something similar? Would this stop the SA failed audits? I know it's probably a good idea to disable or rename the SA account so any help would be appreciated.
AbeSpainAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

pcelbaCommented:
The sa account renaming is a good idea and it increases security but it cannot stop attackers from their attemptes...
0
Aneesh RetnakaranDatabase AdministratorCommented:
> Would this stop the SA failed audits?
no

If that ip doesnt belong to your network, possibly someone is trying to hack ur database, so better block those ip in your firewall

you can use the Windows authentication, that would be a great idea, but make sure that you chnage the connection string
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
AbeSpainAuthor Commented:
"you can use the Windows authentication, that would be a great idea, but make sure that you chnage the connection string "

Rather than auth using the users set up in the database?
0
Aneesh RetnakaranDatabase AdministratorCommented:
Yup. Windows authentication provides additional security, thats why i suggested you to use that.
0
pcelbaCommented:
The Windows authentication allows each Windows admin full SQL administrator access. I don't think this is correct in all situations.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft SQL Server

From novice to tech pro — start learning today.