我在服务器上(系统是window2003)装了SQL2005,用建一个登录名为aaaaa(临时的),有建一个数据库bbbbb(临时的)
bbbbb的所有者是aaaaa,现在SQL日志里面有很多的,几万条的登录错误日志,而且还在急剧的增长,曾经达到几百万条,后来SQL2005重装了,还是这样子,SA帐户都没登录,不知道为什么部分错误信息如下:日期,源,严重性,消息
10/08/2007 09:59:36,登录,未知,Login succeeded for user 'NT AUTHORITY\SYSTEM'. Connection: trusted. [客户端: <local machine>]
10/08/2007 09:59:36,登录,未知,Login succeeded for user 'sa'. Connection: non-trusted. [客户端: <local machine>]
10/08/2007 09:59:36,登录,未知,Login succeeded for user 'NT AUTHORITY\SYSTEM'. Connection: trusted. [客户端: <local machine>]
10/08/2007 09:59:35,登录,未知,Login succeeded for user 'sa'. Connection: non-trusted. [客户端: <local machine>]
10/08/2007 09:59:35,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:35,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:35,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:35,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:34,登录,未知,Login failed for user 'wwwadmin'. [客户端: 222.175.45.147]
10/08/2007 09:59:34,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:34,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:34,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:33,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:33,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:32,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:32,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:32,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:32,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:31,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:31,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:30,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:30,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:29,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:29,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:29,登录,未知,Login failed for user 'wwwadmin'. [客户端: 222.175.45.147]
10/08/2007 09:59:29,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:26,登录,未知,Login failed for user 'wwwadmin'. [客户端: 222.175.45.147]
10/08/2007 09:59:26,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:25,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:25,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:25,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:25,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:24,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:24,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:23,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:23,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:23,登录,未知,Login failed for user 'wwwadmin'. [客户端: 222.175.45.147]
10/08/2007 09:59:23,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:22,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:22,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:18,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:18,登录,未知,错误: 18456,严重性: 14,状态: 5。
bbbbb的所有者是aaaaa,现在SQL日志里面有很多的,几万条的登录错误日志,而且还在急剧的增长,曾经达到几百万条,后来SQL2005重装了,还是这样子,SA帐户都没登录,不知道为什么部分错误信息如下:日期,源,严重性,消息
10/08/2007 09:59:36,登录,未知,Login succeeded for user 'NT AUTHORITY\SYSTEM'. Connection: trusted. [客户端: <local machine>]
10/08/2007 09:59:36,登录,未知,Login succeeded for user 'sa'. Connection: non-trusted. [客户端: <local machine>]
10/08/2007 09:59:36,登录,未知,Login succeeded for user 'NT AUTHORITY\SYSTEM'. Connection: trusted. [客户端: <local machine>]
10/08/2007 09:59:35,登录,未知,Login succeeded for user 'sa'. Connection: non-trusted. [客户端: <local machine>]
10/08/2007 09:59:35,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:35,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:35,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:35,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:34,登录,未知,Login failed for user 'wwwadmin'. [客户端: 222.175.45.147]
10/08/2007 09:59:34,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:34,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:34,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:33,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:33,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:32,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:32,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:32,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:32,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:31,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:31,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:30,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:30,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:29,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:29,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:29,登录,未知,Login failed for user 'wwwadmin'. [客户端: 222.175.45.147]
10/08/2007 09:59:29,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:26,登录,未知,Login failed for user 'wwwadmin'. [客户端: 222.175.45.147]
10/08/2007 09:59:26,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:25,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:25,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:25,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:25,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:24,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:24,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:23,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:23,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:23,登录,未知,Login failed for user 'wwwadmin'. [客户端: 222.175.45.147]
10/08/2007 09:59:23,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:22,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:22,登录,未知,错误: 18456,严重性: 14,状态: 5。
10/08/2007 09:59:18,登录,未知,Login failed for user 'mssql'. [客户端: 222.77.114.6]
10/08/2007 09:59:18,登录,未知,错误: 18456,严重性: 14,状态: 5。
尝试的用户名有'teacher','company','mssql','root','administrator','admin','sadmin'
每天都是如此的
但是应该不是受到攻击,
我服务器和网站都没对外公开,只有我自己知道地址呢,我服务器和另外八台运行正常良好的服务器同为一个局域网