I'm regularly under brute force attacks on my Windows Server 2003 with Citrix installed. How can I automatically ban IP addresses that have several unsuccessful login attempts ?
This question has already a couple of answers that work on Windows 2008, and that I use successfully in my network (@MichaelKhalili's code). I also found sshd_block here, it applies also to Windows 2003 but is targeted on ssh. Unfortunately I don't have the expertise to adapt it for Terminal Server attempted logins.
Thanks for your help.