fail to ban for Microsoft RDP servers?

[wirestyle22]

I've heard of RDP Guard. I know it's compatible with 2012 R2 but have never used it. Site looks shady though.

[StrongBad]

What about actual Fail2Ban?

https://wqweto.wordpress.com/2013/12/10/how-to-use-fail2ban-with-terminal-servers-rdsh-farm/

I've not done this, but looks possible.

[Mike Davis]

I put RdpGuard on a couple servers. In a matter of minutes I had 17 IPs banned.

[scottalanmiller]

@Mike-Davis said in fail to ban for Microsoft RDP servers?:

I put RdpGuard on a couple servers. In a matter of minutes I had 17 IPs banned.

Nice, glad to hear that that is working out! Sounds like good feedback so far.

[Deleted74295]

@Mike-Davis said in fail to ban for Microsoft RDP servers?:

I put RdpGuard on a couple servers. In a matter of minutes I had 17 IPs banned.

Here's another possibility
http://serverfault.com/questions/43360/cygwin-sshd-autoblock-failed-logins/43900#43900

[wirestyle22]

Scott how fat apart did we post? Seconds? I guess technically a minute. FML

[scottalanmiller]

@wirestyle22 said in fail to ban for Microsoft RDP servers?:

Scott how fat apart did we post? Seconds? I guess technically a minute. FML

Oh, I thought that you were responding to what I had posted

[wirestyle22]

@scottalanmiller Nope. Actual recommendation

[scottalanmiller]

@wirestyle22 said in fail to ban for Microsoft RDP servers?:

@scottalanmiller Nope. Actual recommendation

Ha ha. That's funny. Well it is what got deployed so that worked.

[wirestyle22]

@scottalanmiller said in fail to ban for Microsoft RDP servers?:

@wirestyle22 said in fail to ban for Microsoft RDP servers?:

@scottalanmiller Nope. Actual recommendation

Ha ha. That's funny. Well it is what got deployed so that worked.

I'm just glad I recommended the correct solution tbh lol

[JaredBusch]

We had a thread here about a year ago about some Fail2Ban style service for Windows servers. Not able to search for it at the moment.