MSSQL Server Brute-Force Protection. Login failed for user sa error 18456. How to Stop brute-force attacks on Microsoft SQL Server. Preventing Brute Force Attacks on SQL Server.

How to Stop Brute-Force Attacks on MS-SQL Server

If you are running Microsoft SQL Server, you are probably aware of brute-force attacks on the SA account. Almost every SQL server connected to the Internet is under constant attack.

Once a hacker has access to an SA (DBA) account, or even a normal user account, they can gain full access to the file system on the server or even to the files on the network to which it is connected.

If your SQL server accepts remote connections, the System Event Log may contain thousands of entries like the ones below:

Failed SA Logon Attempts

This means that someone is trying to get access to your server. Brute-force attacks can also abuse your server resources, including CPU, RAM, and bandwidth.

RdpGuard allows you to protect your MS SQL Server from brute-force attacks.

It monitors the Event Log and detects failed login attempts. If the number of failed login attempts from a single IP address reaches a set limit (three by default), the attacker's IP address will be blocked!

For Windows Vista/7/8/8.1/10/11 and Windows Server 2008/2012/2016/2019/2022

"This sotware is really great. It's a relief. Because my server is constantly under attack. Thanks RdpGuard" - Joaquim De Sousa Marques

"Nice product. I used to implement something similiar in a low-tech and cumbersome manner via a script called TSBlock (not mine). This makes it much easier and is well worth the pricetag for SMB's." - J. Johnson

"Absolutely amazed at your product. We are a church in the North Dallas area, and I discovered this morning multiple failed logon attempts via our Remote Access Server. A friend suggested your product, so I immediately downloaded the trial. It had a list of about five blocked IP addresses in minutes, and that was enough to lead me to push the BUY button. Over the past 10-15 minutes the list is now about thirty with at least a third being international attempts to break into our system. Thanks for a great product. You may have just saved us much grief." - John Hallford

"Love the software. RDP on our Windows servers is just ridiculous. We would block it in the router but we have lots of old-time customers that would have issues." - Scott Hirsch

"Love the software! Makes it easier than tailoring VB Scripts!!" - Nick Brennan

"It's a great product - really stopping those RDP attackers :-)" - Dave, UK

"First of all: Your application is very (!!!) useful and I like it very much securing my 2012 R2 server. RdpGuard is the best solution, I found on the market and after 10 minutes of testing it I ordered the fully-featured version. :-)" - Carsten Baltes

How to Stop Brute-Force Attacks on MS-SQL Server

See Also