They stopped when I turned off the incoming rule that allowed port 1433.
Login failed for user 'sa'. Reason: Password did not match that for the login provided. [CLIENT: XXX.XXX.XXX.XXX]
HI!
Every minute I receive such messages (5-50 messages) on my server Win 2022 (in Event Viewer-->Application):
Login failed for user 'sa'. Reason: Password did not match that for the login provided. [CLIENT: XXX.XXX.XXX.XXX]
Login failed for user 'brett'. Reason: Password did not match that for the login provided. [CLIENT: XXX.XXX.XXX.XXX]
Login failed for user 'qingshu'. Reason: Password did not match that for the login provided. [CLIENT: XXX.XXX.XXX.XXX]
Login failed for user 'dayane'. Reason: Password did not match that for the login provided. [CLIENT: XXX.XXX.XXX.XXX]
....
....
....
How do I stop this? I read on some forums that these are attempts to hack MSSQL from the outside. Is it true? Why is this happening? And what should I do in this case?
Thanks!