How to avoid unwanted hits on MSSQL Database Server

Question

i have MSSQL Database server, Daily am getting more than 50,000 unwanted login attempts for sa user. because this server got low performance. how to avoid this

i have disabled sa user instead of that i have create new sql admin user. but when i have check sql log same issue invalid user & password login attempts.

please help me anyone to resolve this issue.

Answer 1

1/ Switch from using "mixed mode" authentication to windows accounts.

2/ If (and only if) an external service requires access to the SQL Server, permit access to the specific IP addresses required at the firewall.

3/ Put in place a VPN Network between the office and the data center.

4/ Persist IPs where those request comes from than ignore any request coming from those IPs. Check with your hosting provider if they offer any "IP deny" feature.