What is RDP brute-force protection?

RDP brute-force protection stops attackers from guessing Remote Desktop passwords by detecting repeated failed logins and firewall-banning the source before it can break in. RDP Protector installs a lightweight Windows agent that watches the RDP (and FTP and MS SQL) failed-login events, and after a configurable number of attempts permanently bans the attacking IP — or its whole /24 subnet on paid plans — with a single consolidated firewall rule, so brute-force bots are blocked at the network edge instead of reaching the login screen.

How do I protect a Windows server from RDP and RDP/FTP/SQL brute-force attacks?

Install the RDP Protector agent on the server. It auto-detects the RDP, FTP and MS SQL ports, whitelists your current IP so you can never lock yourself out, and starts banning brute-force sources automatically with safe defaults. Bans are permanent by default and survive reboots, the decision is made locally so protection works even offline, and paid plans add whole-subnet bans, GeoIP rules, a cross-tenant threat database and instant Telegram alerts. Server brute-force protection needs no reverse proxy or extra hardware — one agent per Windows server.

What exactly is free, and for how long?

Free is permanent and needs no card: RDP brute-force protection on one server, blocking of the attacking address, 24 hours of attack history and a whitelist of up to three addresses. It does not expire and it is not a trial. Paid plans add banning the attacker's whole subnet, FTP and MS SQL protection, Telegram alerts, GeoIP rules, longer history and the shared threat database.

How does the 14-day trial work?

Every account gets one, with no card and nothing to cancel. It unlocks the full Pro feature set on your own servers. After 14 days the account returns to Free by itself and protection keeps running: subnet bans fall back to blocking single addresses, Telegram alerts switch off and history shortens to 24 hours. Nothing is ever charged automatically.

What if I need one more server than my plan includes?

Add servers individually for $3 per server per month instead of moving up a tier. Extra servers renew on the same cycle as the plan they extend.

Is it safe to install on a production server?

Yes. The agent only reads its own OS security log and blocks inbound connections to the protected ports on the same host. No offensive capabilities, only outbound HTTPS.

Does protection work without a cloud connection?

Yes. The ban decision is made locally on the agent instantly, even offline. If the connection drops, protection keeps working from the local policy.

What if I changed the RDP port?

The agent detects the actual RDP port(s) automatically (registry + listening sockets) and rebuilds the rules on a change. The FTP port is detected the same way.

Will I lock myself out?

No. On install your current IP is automatically whitelisted, and the whitelist always takes priority over any block.

Which Windows versions are supported?

Server 2012 R2 / 2016 / 2019 / 2022 / 2025 and Windows 8.1 / 10 / 11, on x64, x86 and ARM64. A single binary, no .NET/VC-redist.

How does billing work?

Internationally via PayPro Global, in Russia via YooKassa, plus crypto as a fallback channel. Free is perpetual and needs no card.

RDP Protector — RDP, FTP and MS SQL brute-force protection for Windows servers

RDP brute-force protection for Windows servers: a lightweight agent watches failed RDP, FTP and MS SQL logins and permanently bans attacking subnets with one firewall rule, shares reputation across tenants and keeps working offline. Server brute-force protection with 1 server free forever, plus 14 days of Pro — no card.