EvlWatcher!

Protected against RDP-Brute forcers. It installs a service which scans the event log for anomalies every 30 seconds (by default).When the service finds out that someone is taunting your server with RDP-login attempts, it adds the remote IP to a generic rule in the windows firewall which locks out the attacker. After 2 hours (default), the ban will be lifted, i.e. the IP will be removed from the rule.

EvlWatcher alternatives

  • RdpGuard

  • RdpGuard allows you to protect your Remote Desktop (RDP) from brute-force attacks by blocking attacker's IP address. Fail2Ban for Windows.

    tags: remote-desktop-access rdp
    platform: Windows
  • IPBan

  • A FREE and open source application that allows banning ip addresses from failed terminal services or SQL server logins out of the box. Other types of banning are easily added via an application configuration file.

    tags: remote-desktop-access terminal-services
    platform: Windows
  • Anti DDoS Guardian

  • DDoS Protection tool. Anti DDoS Guardian stops DDoS attacks for Windows servers, it prevents Remote Desktop Connection brute force attacks, Slow HTTP Get&Post attacks, SYN flood, TCP flood, UDP flood, ICMP flood, bandwidth attacks, etc.

    tags: anti-ddos-firewall anti-ddos-windows dos-protection rdp-brute-force rdp-protection
    platform: Windows
  • Cyberarms Intrusion Detection and Defense System (IDDS)

  • Out-of-the-box security for Remote Deskop, Exchange, OWA, SharePoint, CRM, generic IIS applications and many other server systems.

    tags: brute-force-attack-protection brute-force-protection intrusion-detection intrusion-detection-system intrusion-prevention
    platform: Windows
  • SpyLog

  • lua-spylog - Execute actions based on log records

    tags: autoblock brute-force-protection bruteforce protection rdp-protection
    platform: Windows
  • Syspeace

  • An autoblocker for brute force attacks primarily for Windows Servers with good information in the admin mils telling you DNS names, country of origin and username used for the attack.

    tags: network-monitoring security-auditing bruteforce fail2ban autoblock
    platform: Windows