Login failed for user 'sa'. Reason: Password did not match that for the login provided. [CLIENT: XXX.XXX.XXX.XXX]

Volk Volk 571 Reputation points
2024-07-13T14:03:35.7533333+00:00

HI!

Every minute I receive such messages (5-50 messages) on my server Win 2022 (in Event Viewer-->Application):

Login failed for user 'sa'. Reason: Password did not match that for the login provided. [CLIENT: XXX.XXX.XXX.XXX]

Login failed for user 'brett'. Reason: Password did not match that for the login provided. [CLIENT: XXX.XXX.XXX.XXX]

Login failed for user 'qingshu'. Reason: Password did not match that for the login provided. [CLIENT: XXX.XXX.XXX.XXX]

Login failed for user 'dayane'. Reason: Password did not match that for the login provided. [CLIENT: XXX.XXX.XXX.XXX]

....

....

....

How do I stop this? I read on some forums that these are attempts to hack MSSQL from the outside. Is it true? Why is this happening? And what should I do in this case?

Thanks!

SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
13,264 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Volk Volk 571 Reputation points
    2024-07-13T15:10:58.3933333+00:00

    They stopped when I turned off the incoming rule that allowed port 1433.