Click here to Skip to main content
15,566,267 members
Please Sign up or sign in to vote.
0.00/5 (No votes)
See more:
I just checked the Event Viewer and saw multiple requests trying to login my mssql server, with multiple random IDs and passwords (sa, mssql, hawai, etc).
All from multiple IP addresses

How can I prevent that or what can I do to protect my server?

SQL
Log Name:      Application
Source:        MSSQL$****************
Date:          11/7/2022 4:12:16 PM
Event ID:      18456
Task Category: Logon
Level:         Information
Keywords:      Classic,Audit Failure
User:          N/A
Computer:      B*********
Description:
Login failed for user 'z10015'. Reason: Could not find a login matching the name provided. [CLIENT: 87.251.67.23]

https://i.imgur.com/yR8GXdb.png

What I have tried:

Try to google but nothing helpful
Posted
Updated 6-Nov-22 23:35pm

1 solution

Make sure your firewall is configured to block access to the ports used by MS SQL Server - typically TCP 1433, 4022, 135, and 1434, and UDP 1434.

If you really need to access it from outside of your network, then look at setting up a VPN, or allowing access from specific fixed IP addresses.

If in doubt, talk to your network administrator.
 
Share this answer
 

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)



CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900