We just created an instance of “SQL Server” in Azure (not Azure SQL) and did a portscan to discover that the server was not private but public – anyone in the world could access port 1433.

We checked the “Network Settings” in Azure and public access was disabled – how is it possible that we could connect?