Take the 2-minute tour ×  I just checked the eventlog on my vps
and found that someone is brute forcing both my sql server sa
password and windows administrator password. (I have changed the
account name from Administrator to something else but they are
using the correct account name!)  Is there anything that I can
do to prevent them from doing it? My OS is Windows Server 2008
R2 and SQL Server 2008 R2 Express.  Edit: It seems that the
attack IP address keeps changing. So blocking them would take a
lot effort.  share|improve this question  5 Answers 5  up vote
16 down vote accepted  Unfortunately for any server exposed to
the public internet, this is pretty much a fact of life. There
will always be some moron trying to hack in. My private server
sees several thousand invalid login attempts every day.  You
could put a firewall in front, and do port forwarding from an
obscure port to the RDP port. This isn't going to protect
anything, but at least some of the traffic will go away.  You
could report the most fre