I have a SQL 2008 box that has been the recent target of brute force attacks on the "sa" account (silly kids . . .). Is it possible to quantify the server load of a single attempt at logging in to SA with a bad password on an account that is also disabled? I'm mostly interested in CPU load and I'd have to do it retroactively since that box has been taken offline. I don't开发者_StackOverflow中文版 have to have an exact value, just a value that I can use as a heuristic and extrapolate out to the number of requests.
Best way to prevent Brute Force Attack on SQL Server is to disable its remote access and don't expose it on to the internet.
http://iskrov.info/2013/11/how-to-disable-remote-access-microsoft-sql-server/
精彩评论