3 ms·
You'd recommend a standard trick like changing the port? Just doing that dropped the number of attempts to almost zero here.
by stinos 4y ago
You'd recommend a standard trick like changing the port? Just doing that dropped the number of attempts to almost zero here.
- technion 4y agoI think that's down to the problem you're trying to solve. Much like SSH brute force, if you know the only account is yours and it has an appropriately reasonable password and you can trust yourself not to get phished (say, you have a system managing the logon) then that's probably fine. The second there are other people with dumb passwords, or many other risk factors at play, I'd really suggest you need something doing MFA which unfortunately, MS doesn't offer out of the box on RDP.
- r00f 4y agoYou never know which 0-day gets discovered tomorrow, so even strong password might not be enough. I always change default ports on both SSH and RDP. It helps falling out of scope of unsofisticatrd scanners, keeps logs a bit cleaner plus doesn't waste CPU on useless auth attempts. Keeping ports behind VPN or port knocking is even better, but not always feasible