100s of Audit Failures ( brute force attack )

nowva

New member
Joined
Mar 2, 2012
Messages
1
Hi i am very new to this, we have installed a server 2008 with RDP enabled we use the RDP from various places hotels, home, etc. my problem is that everyday i get 100s of attempts to guess the password on my server. i have setup a policy to lock accounts out on 3 bad password trys, i cant setup a firewall rule in the router to only allow from certain ip address because we connect from various places all with different ip addresses ( hotels etc ) is there any thing else i can do yo prevent this, i have searched the web for answers with no real success, please help !!

Thanks in advance Nowva
 
It's people fishing for open ftp accounts so they can upload to your server. I get these all the time. As long as the user accounts have strong passwords you'll be fine. Just make sure you don't actually have any guest or anonymous accounts and if you do make sure they have strong passwords.

Just do as I do and clear the logs. There is no way to stop them unless you unplug from the internet.
 
Back
Top