I have frequent access error log like below:

Error: 17806, Severity: 20, State: 14.
SSPI handshake failed with error code 0x8009030c, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of failure. The logon attempt failed [CLIENT: 222.186.XX.XX]

I see many IPs that are trying to login to my servers.

Tell me please, I don't know what I have to do in this situation, Do you prefer to change my SQL SERVER port or not?

I follow this answer but I don't get right answer: SQL Server error log entry : Error: 17806, Severity: 20, State: 14

  • Is your server on a routed ip address? If so configure the windows firewall to block all traffic except the one you want. Better than moving the server to a different port which still has the server publicly availible
    – Spörri
    Sep 11 '15 at 11:16
  • Changing the port is about as effective as locking the doors instead of the windows. You need to use a firewall or other network devices, not random port numbers, to protect your servers from unauthorized incoming traffic. Sep 11 '15 at 12:50
  • Thanks, I'm going to block them with firewall,but I think they are robot with many IPs, because I see new IP every week.
    – Ebrahim
    Sep 11 '15 at 16:03
  • Can i refer this problem to my network admin? is this a network issue or a sql server issue
    – SqlNovice
    Nov 19 '17 at 23:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.