Remote Desktop IP Monitor & Blocker
1.0.0 - For all versions of Windows
Installer (3.59 MB)
- Mirror #1 MajorGeeks.com
Portable (1.10 MB)
- Direct Download
Tweaking.com - Remote Desktop IP Monitor & Blocker is a free tool to monitor any IP that tries to connect to the remote desktop.
How to remove IP's from the Windows IP Security (IPSec) Added by the Tweaking.com - Block IP Tool
I made this program after seeing brute force attacks on a customers server who had remote desktop enabled and open to the internet. The attacks were trying to brute force the password for the administrator account.
The Windows Event Viewer was not showing which IP address the connections were coming from. They were also coming from multiple locations and hitting at random times during the day and night. So tracking them down with the built-in Windows tools was going nowhere.
This will monitor and log any IP that hits the remote desktop and to be able to block those IP's.
The program will monitor the remote desktop port using the Windows netstat API and keep them in a log for later viewing. The program has a built-in block IP tool to block any IP address easily. It does this by using the built-in Windows IP Security Policy (IPSec). The drawback is, the program can only block IP's, but cannot unblock them. To unblock them I have included a guide here: How to remove IP's from the Windows IP Security (IPSec) Added by the Tweaking.com - Block IP Tool
Even though this tool was built for watching the remote desktop port, you can use it to watch any single port on the system. So if you have another kind of server running and the port open to the internet, you can now log any IP that hits it.

Special thanks to IconTexto for use of the icon for the program.
Tweaking.com - Remote Desktop IP Monitor & Blocker.
v1.0.0
First Release
Tagged as: Blocker, Desktop, Monitor, Remote
Installer (3.59 MB)

Portable (1.10 MB)

Tweaking.com - Remote Desktop IP Monitor & Blocker is a free tool to monitor any IP that tries to connect to the remote desktop.
How to remove IP's from the Windows IP Security (IPSec) Added by the Tweaking.com - Block IP Tool
I made this program after seeing brute force attacks on a customers server who had remote desktop enabled and open to the internet. The attacks were trying to brute force the password for the administrator account.
The Windows Event Viewer was not showing which IP address the connections were coming from. They were also coming from multiple locations and hitting at random times during the day and night. So tracking them down with the built-in Windows tools was going nowhere.
This will monitor and log any IP that hits the remote desktop and to be able to block those IP's.
The program will monitor the remote desktop port using the Windows netstat API and keep them in a log for later viewing. The program has a built-in block IP tool to block any IP address easily. It does this by using the built-in Windows IP Security Policy (IPSec). The drawback is, the program can only block IP's, but cannot unblock them. To unblock them I have included a guide here: How to remove IP's from the Windows IP Security (IPSec) Added by the Tweaking.com - Block IP Tool
Even though this tool was built for watching the remote desktop port, you can use it to watch any single port on the system. So if you have another kind of server running and the port open to the internet, you can now log any IP that hits it.
Special thanks to IconTexto for use of the icon for the program.
Tweaking.com - Remote Desktop IP Monitor & Blocker.
v1.0.0
First Release
Tagged as: Blocker, Desktop, Monitor, Remote