Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

Will failed login attempts cause SQL Server performance issues? Expand / Collapse
Author
Message
Posted Tuesday, December 18, 2012 1:17 PM
SSC Rookie

SSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC Rookie

Group: General Forum Members
Last Login: Wednesday, September 25, 2013 12:03 PM
Points: 39, Visits: 69
I'll be honest I really know jack about the inner workings of SQL, so any help would be appreciated. Trying to help my boss figure out why we have been having Server Too Busy errors with our website all day. The tech support at our hosting company seem to think it is an issue with too many concurrent connections to the database. I was looking in the log, and saw some thousands and thousands of failed attempts by some IP in Mubai to login using our sa account. Could that be causing us any issues?
Post #1398000
Posted Tuesday, December 18, 2012 1:22 PM
SSC Veteran

SSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC Veteran

Group: General Forum Members
Last Login: Thursday, March 13, 2014 5:56 PM
Points: 237, Visits: 761
How many times a second are the errors?

High number of login attempts can chew up CPU, but it would have to be very frequent.

Generally, any SQL server instance running on port 1433 and whose IP is not blocked by a firewall,
will see sa login attempts, primarily coming from IPs in China.
Post #1398004
Posted Tuesday, December 18, 2012 1:25 PM
SSC Rookie

SSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC Rookie

Group: General Forum Members
Last Login: Wednesday, September 25, 2013 12:03 PM
Points: 39, Visits: 69
5 to 8 times a second for about 6 hours from the same IP.
Post #1398008
Posted Tuesday, December 18, 2012 1:32 PM
SSC Veteran

SSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC Veteran

Group: General Forum Members
Last Login: Thursday, March 13, 2014 5:56 PM
Points: 237, Visits: 761
And is CPU high on the SQL server box?

Is there a particular reason your SQL server is not behind a firewall?
Post #1398012
Posted Tuesday, December 18, 2012 1:32 PM


SSC-Enthusiastic

SSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-Enthusiastic

Group: General Forum Members
Last Login: Friday, January 31, 2014 9:27 AM
Points: 112, Visits: 376
As a related question, if the port is set to 1433, should it be changed to prevent this? Is this typical hacker type of issues?

“Any fool can know. The point is to understand.”
- Albert Einstein

"DOH!"
- Homer Simpson
Post #1398013
Posted Tuesday, December 18, 2012 1:37 PM
SSC Veteran

SSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC Veteran

Group: General Forum Members
Last Login: Thursday, March 13, 2014 5:56 PM
Points: 237, Visits: 761
As a rule I don't like to run on 1433.

Yes, any scanning tool out there will try to attack 1433 first.
They will try to log in as sa and sometimes other logins such as dbadmin or some such thing.

Also they will throw a malformed packet at the port to see if they get something useful back.
Post #1398017
Posted Tuesday, December 18, 2012 1:37 PM
SSC Rookie

SSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC Rookie

Group: General Forum Members
Last Login: Wednesday, September 25, 2013 12:03 PM
Points: 39, Visits: 69
arnipetursson (12/18/2012)
And is CPU high on the SQL server box?

Is there a particular reason your SQL server is not behind a firewall?


I'll be honest, I am neither a DBA or a Network guy, and I've only been here a week. So my knowledge on why and how the database and web servers are setup is very limited.
Post #1398018
Posted Wednesday, December 19, 2012 5:37 AM
Grasshopper

GrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopper

Group: General Forum Members
Last Login: Tuesday, April 16, 2013 8:34 AM
Points: 23, Visits: 128
Its may be a performance related issue ...
check you CPU usage and memory usage for the sql server

If its taking much percentage as expected ..you should reorganize the indexes and

defragment your SQL database
Post #1398334
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse