I have detected a constant scan of my sql server, apparently the script is trying to guess the "sa" password every few seconds, the attempts come from different IP's and different ports.
Is the only solutions to this to close the MS SQL port 1433 ?
We have many customer that like the feature of being able to connect remotely to our MS SQL using their enterprise manager.
Anybody dealing with this ?

thanks

I would recommend changing your MSSQL port to something non standard, then letting your customers know the new port. This will keep most automated scripts away...

Originally posted by mdscorp
I have detected a constant scan of my sql server, apparently the script is trying to guess the "sa" password every few seconds, the attempts come from different IP's and different ports.
Is the only solutions to this to close the MS SQL port 1433 ?
We have many customer that like the feature of being able to connect remotely to our MS SQL using their enterprise manager.
Anybody dealing with this ?

thanks


MsSQL "hacking" is very common among script kiddies, its a way of life, get used to it. As said before change your default usernames/passwords