Auto-block IP address after N unsuccessful logins?

Question

Windows Server

Hello everyone, I’ll make a reservation right away, I’m not very good at administration, maybe you just need to poke your nose. The bottom line is this:
there is a home server on the windows server, access via RDP is open. I can’t restrict access by IP, I often log in from smartphones or any other equipment. Accordingly, a password is constantly selected for it. I created a “blacklisted ip” rule in the firewall, blocked all connections there, periodically opening the Security log, adding ip from which they break into the blacklist.
Respectively questions: -Am
I doing everything right? Is there any other way to fight?
-can the process be automated? 20 unsuccessful logins - permanent blocking of the IP address. In the server management, I found only the “Attach action to this event” button, but there you can’t set the number of repetitions, for example, from one IP, and I can make a mistake myself once.
Yes, passwords are quite strong and unique, but after all, everything can be guessed sooner or later ... and it’s unpleasant to know that someone is constantly breaking. What to do? Thank you.

Answer 1

Secure RDP
www.2x.com/securerdp/

Answer 2

Try Radmin. It has everything you need!

Answer 3

Or maybe not in vain, since XP, Windows disables the admin account and gives admin rights to the first user with a clearly non-standard “administrator / Administrator” login?
By the way, if you change it (the login in the account properties), for example, to something non-standard, they will go through the hell out of it.
My seven with a bare booty on the internet has stood for almost a year and is now behind a router with forwarded port 3389 - the account has never been blocked. and in the logs there is not a single error about the wrong password.
aypishnik honest external static.