Re: sa loginname being hacked

From: Pipo (Pipo_at_home.com)
Date: 10/16/05 

Date: Sun, 16 Oct 2005 18:41:40 +0200

Yes, we did. We know one of their IPs and blocked it...
But they are using now another IP (IPnumber 9 and 3 different domains
also!!...:-<)
It takes a lot of work every time blocking another IP of theirs....
So the easy thing for us is to just simply(??) change the sa loginname into
something else.
But I guess that's not possible??
We cant change our Domain name or SQL server name also...!!
Why cant I change the sa loginname???

thanks for the help Joseph

"Joseph Bittman MVP MCSD" <RyanBittman@msn.com> schreef in bericht
news:ukgdT5m0FHA.2884@TK2MSFTNGP09.phx.gbl...
> October 16, 2005
>
> Don't you have a router in place between the SQL Server and the outside
> world? Can't you trace where the packets are coming from and block that
> IP/Domain name?
>
> --
> Joseph Bittman
> Microsoft Certified Solution Developer
> Microsoft Most Valuable Professional -- DPM
>
> Web Site: http://71.39.42.23/
> Static IP
> "Pipo" <Pipo@home.com> wrote in message
> news:OAK3n%23l0FHA.560@TK2MSFTNGP12.phx.gbl...
>> Hi,
>>
>> Is there a way to change the sa as loginname?
>> At work we are getting haked by 'brut-force', every second we are beinbg
>> attacked with sa and a password.
>> It's a matter of time when the password will be hacked, so changing the
>> password isnt a solution.
>> If we also can change the sa loginname we will be better of.
>> Or is there something else we can do to prevent the hackers to get our sa
>> password?
>>
>> Many thanks
>>
>
>

Relevant Pages

  • Re: sa loginname being hacked
    ... > It takes a lot of work every time blocking another IP of theirs.... ... > We cant change our Domain name or SQL server name also...!! ... > Why cant I change the sa loginname??? ... >> Don't you have a router in place between the SQL Server and the outside ...
    (microsoft.public.sqlserver.security)
  • Re: sa loginname being hacked
    ... How are they being allowed to hit the SQL server with requests? ... Microsoft Certified Solution Developer ... > Why cant I change the sa loginname??? ...
    (microsoft.public.sqlserver.security)
  • Re: sa loginname being hacked
    ... SQL Server they said EXACTLY the opposite of what you just said. ... > should have a web server or some other server in place to receive the ... >> We cant change our Domain name or SQL server name also...!! ... >> Why cant I change the sa loginname??? ...
    (microsoft.public.sqlserver.security)
  • Re: sa loginname being hacked
    ... SQL Server MVP ... > Thanks for the answer Helmut, but we cant do the VPN solution you suggest. ... > So changing the sa loginname will be a good place to start, ...
    (microsoft.public.sqlserver.security)
  • Re: sa loginname being hacked
    ... Can't you trace where the packets are coming from and block that ... Microsoft Certified Solution Developer ... > If we also can change the sa loginname we will be better of. ...
    (microsoft.public.sqlserver.security)