Some best practices:
1. Create one user with sysadmin privileges.
2. Disable sa account and use that account because people might try cracking sa user account which is well known to every one.
3. Set SQL Server to listen on port other than default port 1433
4. Enable SQL Server Browser if your SQL Server hosts more than one instance. Else disable SQL Server Browser Service and port 1434
Step 2 clearly would help you to solve your problem..