From: "Geo." 

"Ellen K."  wrote in message
news:j8ct90pgfclvoaig8506hj7scb90044srv{at}4ax.com...
> ?  Haven't seen it, but also don't have replication turned on for any of
> my databases...

Maybe it doesn't exist in current versions.

Way back in 1995 when I first got involved with Netlink, I setup a calls
database using sql server. We were small then, about 200 customers and we
couldn't afford much in the way of equipment and such so I had to run it on
one of the web servers. Had a heck of a time locking it down and not long
after we went live with it I found someone was trying to log directly into
it but fortunately was being rejected (this was shown in the sqlserver
logs). Spent about two weeks trying to make sure he couldn't get in and
trying to catch him in the act. The login he was using was
"probe".

Finally one day I disabled all replication services only to discover it
wasn't a hacker, probe was the replication service (found it in the
documentation). Boy did I feel stupid, but at least I managed to lock it
down so even the replication service couldn't get in .

Damn Microsoft, if they would just learn to include IP addresses when they
log these sorts of things it sure would make life easier.

Geo.

--- BBBS/NT v4.01 Flag-5