protecting network from external attack (SQL server 2012 bruteforce)
You can disable SA account and wait until attack ends. This is not a solution for the problem, but can buy some time to reconfigure your network.

/* Disable SA Login */
ALTER LOGIN [sa] DISABLE
 GO
/* Enable SA Login */
ALTER LOGIN [sa] ENABLE
 GO