Someone keeps trying to connect to my Ubuntu machine through remote desktop. Is there any way I can determine who it is, and permanently block access to my machine?
migrated from stackoverflow.com Oct 30 '11 at 15:56
This question came from our site for professional and enthusiast programmers.
Unless you are running an RDP server, such as
To find out who is doing it, you can use
If the packets are coming from a generic source on the internet, you can use
The easiest way to deny access is to use a firewall. I use Shorewall to build an iptables firewall on my server. For the user to be able to connect you must have a process listening on the RDP port. RDP is not a standard facility on Unix/Linux servers.
If you have the address of the server which is trying to connect you can use
If you do have a listening process and the process has been built with libwrap functionality, you can add rules to