Nice little visual basic script that creates a sink to monitor failed RDP logons and adds them to a ban list for RDP.
https://github.com/EvanAnderson/ts_block
You may also be interested in how you can send email notifications upon failed RDP logins that I posted here: How To Send Email Notification On Failed or Successful RDP Logon.
Hi Rich,
Thanks for the information, this looks very useful! For quite some time, I have been looking for a way to stop these RDP attempts as I find them extremely annoying –and while I think the functionality should really be added to the Windows Server core, the ts_block script looks like a great solution in the interim… Thanks again!
Marcel
Hi.
I thoight I’d also give tip for a similar thing but with a GUI and a software tht ryuns as a Windows service really.
http://www.syspeace.com
Chhers // Juha
There’s also been a cool addition to Syspeace ( http://www.syspeace.com ) now called the Global Blacklist that’s designed to have al installations of Syspeace report every attack centrally and if they are deemed as menace to society the information is shared between all other Syspeace installations around the world, thus blockng the bad guys preemptively ..
// Juha
http://www.jufcorp.com
Senior consultant in backup, security, server operations an cloud services
There is a software at http:/www.eguardo.com . Which prevents brute force attacks