Quotidien Shaarli

Tous les liens d'un jour sur une page.

August 30, 2024

GitHub - devnulli/EvlWatcher: a "fail2ban" style modular log file analyzer for windows
thumbnail

It's basically a fail2ban for windows. Its goals are also mainly what we love about fail2ban:

RdpGuard - RDP Protection, Stop Brute-Force Attacks on RDP, POP3, FTP, SMTP, IMAP, MSSQL, MySQL, VoIP/SIP. Fail2Ban for Windows. Stop RDP, MSSQL, FTP brute-force attacks on your Windows Server. Terminal Services Protection.

RdpGuard is a host-based intrusion prevention system (HIPS) that protects your Windows Server from brute-force attacks on various protocols and services (RDP, FTP, IMAP, POP3, SMTP, MySQL, MS-SQL, IIS Web Login, ASP.NET Web Forms, MS Exchange, RD Web Access, VoIP/SIP, SSH, etc).

It monitors the logs on your server and detects failed logon attempts. If the number of failed logon attempts from a single IP address reaches a set limit, the attacker's IP address will be blocked for a specified period of time.