看看listener.log

select * from sys.aud$ where returncode = '1017';