I'm managing a Server 2008. I need to access it by Remote Desktop on 3389.
But I'm experiencing several Brute-Force attacks on 3389 per day.
I notice that it always comes from the same workstation, but with different IPS. I then assume that the hacker is using a proxy.
My question: Is there a way to block Proxy incoming connections for 3389 on the firewall or elsewhere?
Thanks, Zoe