I once had Windows server 2008 and the VPS provider had VNC access that I could log in to VPS as locally.
Now I upgrade 2008 to Windows server 2016 Hyper-V. Then I found they don't provide VNC access. The only way to access Windows Server 2016 is remote desktop.
In the past I secure RDP by firewall policy and IP Security rules. These measurements are so useful that it might also lock me out. However as I'm unable to log in as locally, I have to issue a support ticket and let them disable firewall, and turnaround time is long. It's very inconvenient when I'm setting up these rules.
Do you have any suggestions on protecting brute force RDP attack to my VPS?
If I somehow blocked attacker's subnet, if he so happens to be in the same subnet with me, I'm also locked out.
How can I stop attackers while the VPS still allows me to log in?