How many failed login attempts do you see? The log may note thousands of failed login attempts from a single IP address. Take a look at your server's Security EventLog. Eventually they may find a password to access your server! Moreover, RDP brute-force attacks abuse server resources (CPU, RAM, Disk Space and Network Bandwidth). Network scanners and RDP brute-force tools work 24/7. Many Windows Server machines are under constant attack. If the number of failed logon attempts from a single IP address reaches a set limit, the attacker's IP address will be blocked for a specified period of time. It monitors the logs on your server and detects failed logon attempts. The cost ids $79.95 for a single user, but the company does offer decent discounts for multiple licenses.RdpGuard is a host-based intrusion prevention system (HIPS) that protects your Windows Server from brute-force attacks on various protocols and services (RDP, FTP, IMAP, POP3, SMTP, MySQL, MS-SQL, IIS Web Login, ASP.NET Web Forms, MS Exchange, RD Web Access, VoIP/SIP, etc). After that, you would need to buy a license. Other internal improvements and bug-fixes.Added support for the X-Forwarded-For Header in the RD-WEB engine.Improved detection of SMTP username enumeration for hMailServer.

Improved username detection for MailEnable.

Added the ability to block TOR exit nodes.

Improved support for Microsoft Exchange Server.

Added SmarterMail support for IMAP, POP3 and SMTP.

There are built-in reporting features to help with compliance as well. RdpGuard can also monitor and manage all user accounts logs on your network allowing you to see a detailed view of who is accessing what data. You can set alert triggers to meet your needs to alert you of suspicious activity. If multiple attempts are detected from the same IP or range RdpGuard will block that IP or range for a set period of time. RdpGuard monitors your server logs looking for multiple failed login attempts (for the most part). (RDP, FTP, IMAP, POP3, SMTP, MySQL, MS-SQL, IIS Web Login, ASP.NET Web Forms, MS Exchange, RD Web Access, VoIP/SIP, SSH, etc). RdpGuard is a full-featured intrusion prevention system designed to prevent brute force attacks on your Windows Servers over multiple protocols and services.

RdpGuard acts as a software guardian for your desktop/server connections protecting you from malicious attacks in real-time. Nor, that Windows servers are under constant attacks. It's not a secret that malicious attacks can compromise your data security.

For mac instal RdpGuard 9.0.3