Someone keeps trying to connect to my Ubuntu machine through remote desktop. Is there any way I can determine who it is, and permanently block access to my machine?
migrated from stackoverflow.com Oct 30 '11 at 15:56
Unless you are running an RDP server, such as
To find out who is doing it, you can use
If the packets are coming from a generic source on the internet, you can use
The easiest way to deny access is to use a firewall. I use Shorewall to build an iptables firewall on my server. For the user to be able to connect you must have a process listening on the RDP port. RDP is not a standard facility on Unix/Linux servers.
If you have the address of the server which is trying to connect you can use
If you do have a listening process and the process has been built with libwrap functionality, you can add rules to