how to get rid of this

Someone entering my company server using this method.
this one http://prnt.sc/11j65fo
this two http://prnt.sc/11j661e

Please gimme advise to remove it. it's eating our company resource