IPBan Monitors failed security audit in Windows Event Viewer and bans ip addresses using netsh. Wide range of customization and unlimited ip address ban count.
Features:
– Unlimited number of ip addresses to ban
– Duration to ban ip address
– Number of failed login attempts before ban
– Whitelist of comma separated ip addresses or regex to never ban
– Blacklist of comma separated ip addresses or regex to always ban
– Custom prefix to windows firewall rules
– Custom keywords, XPath and Regex to parse event viewer logs for failed login attempts
– Refreshes config so no need to restart the service when you change something
– Highly configurable, ban anything that comes through Windows Event Viewer
– A GREAT and FREE (if you install it yourself) alternative to RdpGuard or Syspeace
– Contains configuration to block Remote Desktop attempts, Microsoft SQL Server login attempts and MySQL Server login attempts by default
IPBan
Requirement:
– .NET 4.0 and Windows Vista or Windows Server 2008 or newer.
– Visual Studio
Usage:
git clone https://github.com/jjxtra/Windows-IP-Ban-Service right click IPBan.sln open with Visual Studio with Administration user build -> Build Solution C:\your_path\Windows-IP-Ban-Service\bin\Debug\IPBan.exe debug
Source: https://github.com/jjxtra