Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Possible Duplicate:
Attempt to access SQL Server with the user SA

I'm suffering an attempted invasion by brute force. A bot is trying to figure out the sa password. How do I restrict logins 3 attempts in SQL Server?

Moreover, I would like to block an IP, how can I do this?

share|improve this question

migrated from stackoverflow.com May 18 '11 at 16:06

This question came from our site for professional and enthusiast programmers.

marked as duplicate by Chopper3 May 18 '11 at 16:10

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1  
Is your SQL server exposed directly to the net? –  Jason May 18 '11 at 15:13
1  
Use a firewall to block an IP. –  Carl R May 18 '11 at 15:14
    
You should whitelist acceptable IPs and block the rest, instead of blacklisting bad ones and allowing all others. –  RexM May 18 '11 at 15:20
    
just use the windows firewall. How can I block an ip using it? –  Ridermansb May 18 '11 at 15:21
    
You should post this on ServerFault.com –  Philip Kelley May 18 '11 at 15:24

1 Answer 1

You can use a login trigger to restrict access from given ip addresses. I will dig out the code for you.

Technet video on how to do it here: http://technet.microsoft.com/en-us/sqlserver/Video/dd898898

share|improve this answer
    
See this link - [sqlservercentral.com/articles/Security/66151/]http://… –  Duncan Howe May 18 '11 at 15:21

Not the answer you're looking for? Browse other questions tagged or ask your own question.