MSSQL over the internet but we connect over RDP
I wrote a blog post about the perils of having your SQL Server exposed to the internet.  

You should almost never allow internet access directly to SQL Server.  From your description, it sounds like you have no requirement for that, since you RDP into the machine for access.  I would immediately ensure the port used by the SQL Server is blocked at the firewall.