I am developing a desktop application using VB.Net 2019 and the database is MS Sql Server 2017 free edition. I have opened the MS Sql server to internet using a public ip (Server is in LAN and i have NAT the public IP to LAN IP using Pf sense firewall)
in order to allow my users to access it through internet. So the server is behind a firewall and i have only opened the 1433 port. All the other ports are filtered using PF sense suricata IPS/IDS. Firewall always shows me that various requests are coming to
the server (Non are from my side).
I have a table to log user logins called "TB_LOGINS". I left the office for few days and once back, noticed something strange. I have a auto increment column for each login which i tested it about 7 times. After few days of leave, i started developing the application again. But now i can see that the auto increment has jumped to 1002 from 7 (8-1001 missing). But myself or anyone one else did not login during that time. My password is moderately secure and im not using sa account. So my concerns are,
Has someone hacked in to my SQL Server or is this normal.
Is there anyway to check who logged in in-between this period.
If so what can i do about it?
i am unable to attach a screen shot since my account hasn't been activated yet.
I have a table to log user logins called "TB_LOGINS". I left the office for few days and once back, noticed something strange. I have a auto increment column for each login which i tested it about 7 times. After few days of leave, i started developing the application again. But now i can see that the auto increment has jumped to 1002 from 7 (8-1001 missing). But myself or anyone one else did not login during that time. My password is moderately secure and im not using sa account. So my concerns are,
Has someone hacked in to my SQL Server or is this normal.
Is there anyway to check who logged in in-between this period.
If so what can i do about it?
i am unable to attach a screen shot since my account hasn't been activated yet.