That’s why you have an vpn or the rdp gateway instead of exposing the machines directly to internet.