Ban, slowdown or stop massive login attempts to RDP
I got some hackers constantly hitting my RDP and generating thousands of audit failures in event log.
Password is pretty elaborate so I dont think bruteforcing will get them anywhere. I am using VPS and I am pretty much a noob in Windows Server security (am a programmer myself and its my webserver for my site).
Which is a recommended approach to deal with this? I would rather block IPs after some amount of failures for example.
Sorry if question is not appropriate.