I'm running Windows Server2008 R2, and seeing the following error multiple times with various IPs in the event log:
The Terminal Server security layer detected an error in the protocol stream and has disconnected the client. Client IP xxx.xxx.xxx.xxx
I checked the IPs and they are definitely not from anyone on my team or anyone who should have access. One of the IPs was even blacklisted.
I'm assuming here that someone is trying to access my server via RDP.
Normally I would configure the firewall to only accept RDP from "allowed" IP addresses. However the issue that I face is that I dont have a static IP with my ISP, and it changes from time to time.
Is there any recommended way / solution to deal with this issue considering that I dont have a static IP at home?