How can I stop continuous failed logins on SQL Server

It sounds like those failed logins are coming from the Internet.

You really shouldn't have a firewall port open to SQL Server directly from the Internet. That is just asking for trouble.

If the website and SQL Server are not on the same network, or are connected only via the Internet, you should look at providing a VPN connection between the two so that you don't provide an open port directly from the Internet to SQL Server.


Are you saying that your SQL Server is accessible remotely from any public IP address? If so then the simple answer is to not expose your server to the internet. This applies to your RDP connections too.

I would suggest investing in a VPN solution to access your servers remotely and disable any port forwarding rules you have to your SQL Server.

If you cannot do the above then you could limit the source IP address to a network of your own. This might reduce the number of failed login attempts but it is not advisable either.

Tags:

Sql Server