Blaser Software - RDP Sentinel

Protects your Remote Desktop Server from brute-force logon attacks. Blaser RDP Sentinel is a host-based intrusion prevention system that protects your Windows Remote Desktop Server (Terminal Server - mstsc) from brute-force logon attacks.  These attacks are like background noise on the Internet and show up in your server's security eventlog as 4625 failed logon events.

Blaser RDP Sentinel monitors the eventlog your server and detects failed these failed logon attempts. If the number of failed logon attempts from a single IP address reaches a set limit, the attacker's IP address will be automatically blocked using the Windows Firewall.  An e-mail alert can also be sent to the system administrator to make them aware of the blocked attacker.

The initial setup takes only minutes and requires little to no maintenance.