RdpGuard is a host-based intrusion prevention system (HIPS) that protects your Windows Server from
brute-force attacks on various protocols and services (RDP, FTP, IMAP, POP3, SMTP, MySQL, MS-SQL, IIS Web Login,
ASP.NET Web Forms, MS Exchange, RD Web Access, VoIP/SIP, SSH, etc).
It monitors the logs on your server and detects failed logon attempts.
If the number of failed logon attempts from a single IP address reaches a set limit,
the attacker's IP address will be blocked for a specified period of time.
For Windows Vista/7/8/10/11 and Windows Server 2008/2012/2016/2019/2022
Attacker's IP addresses are blocked automatically. Click image to view other screenshots.
Why do you need it?
Many Windows Server machines are under constant attack.
Network scanners and RDP brute-force tools work 24/7.
Eventually they may find a password to access your server!
Moreover, RDP brute-force attacks abuse server resources (CPU, RAM, Disk Space and Network Bandwidth).
Take a look at your server's Security EventLog. How many failed login attempts do you see?
The log may note thousands of failed login attempts from a single IP address.
This means that someone is trying to find a password to access your server.
This is how an RDP brute-force attack appears in Security Event Log.
How can you protect your server from brute-force password-guessing attacks on RDP? The answer is
RdpGuard - powerful tool that allows you to protect your Remote Desktop from brute-force attacks.
RdpGuard works as a Windows Service. Your Windows Server will be protected even if nobody is logged in.
Attacker's IP addresses are blocked via Windows Firewall. Other blocking methods are also supported.
For Windows Vista/7/8/10/11 and Windows Server 2008/2012/2016/2019/2022
