I have an Amazon EC2 instance and i don't have anything running on it yet but my event log is full of below error

"Login failed for user 'sa'. Reason: An attempt to login using SQL authentication failed. Server is configured for Windows authentication only. [CLIENT:]"

What is this ? is someone trying to attack or is it something internal ? I know about the authentication mix mode and etc... just want to make sure what it is before I change the sql security settings.


Unless you're expecting traffic from China Telecom, then yes, it's an attempt at an attack - though obviously an ineffective one in this case, since the sa account isn't enabled in windows-only mode.

I'd recommend against having port 1433 accessible to the outside world.

| improve this answer | |
  • I thought it was blocked by default on windows firewall! How do i block it ? – Parham Oct 17 '13 at 5:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.