Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Possible Duplicate:
Ban, slowdown or stop massive login attempts to RDP

There was an interesting thread about brute-force RDP attacks and one suggested solution that I liked was "set up so 150 incorrect passwords from any given IP within 24 hours blocks that IP".

Could someone provide more info on how to block out an IP if there were too many incorrect login attempts via RDP?

PS the original thread was: Ban, slowdown or stop massive login attempts to RDP

share|improve this question

marked as duplicate by Ward, Shane Madden, John Gardeniers, Skyhawk, mailq Sep 27 '11 at 11:25

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

I don't think this adds anything to the original question. The simple answer is: use a firewall. – Ward Sep 27 '11 at 4:42

Simple. Dont allow RDP from the internet. Point. Dont be cheap, install a security system.

my own RDP access runs through a terminal gateway (i.e. it is http on the internet) wand a firewall with intrusion prevention - THERE you stop the crap, not downline on the server.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.