AnCode presents

Our Top 3 Frequently Asked Questions about the

AnCode IP Guard

What is Ancode IP Guard?

Does the Windows firewall have to be turned on in order for IP Guard to work?

What happens when the maximum number of blocked IP is reached?

The full list of

Frequently Asked Questions

© 2021 AnCode, All rights reserved

What is Ancode IP Guard?

IP Guard is an intrusion detection tool that monitors the Windows Event logs for unsuccessful Remote Desktop logon attempts from any given source IP. Once the number of logon attempts exceeds the configured logon attempt threshold, the offending source IP is added to a custom Ancode IP Guard firewall rule within the Windows firewall. This blocks any further activity from the offending IP on the Windows Firewall level to the server.

Does the Windows firewall have to be turned on in order for IP Guard to work?

Yes. IP Guard adds offending IP adresses to a firewall rule within the Windows firewall. Offending IP adresses are therefor blocked on the Windows Firewall level.

What happens when the maximum number of blocked IP is reached?

IPGuard will look for the oldest blocked IP and replace it with the newly blocked IP on a First in First out basis.

What is RDP TCP Port?

Remote Desktop Protocol (RDP) is a Microsoft proprietary protocol that enables remote connections to other computers, typically over TCP port 3389. It provides network access for a remote user over an encrypted channel.

How do I know what port to use?

Type “netstat -a” without the quotation marks and press the “Enter” key. A list of data appears. The first column signifies the protocol type used, while the second column displays a list of local connections that are in use. The number that appears after the colon in this column is the port that is in use.

Which ports are blocked?

You can choose to block all ports from an offending IP or only selected ports, such as 3389 for RDP.

What is the difference between a private and public IP address and which one gets added to the blocked or whitelist lists on the IP Guard?

public IP address identifies you to the wider internet so that all the information you’re searching for can find you. A private IP address is used within a private network to connect securely to other devices within that same network. Each device within the same network has a unique private IP address.

You should use your private IP address for the AnCode IP Guard.

What is Whitelisting?

Whitelisting an IP marks the IP as safe. Any failed logon attempts from a whitelisted IP will be ignored and the whitelisted IP will never be blocked.

Can a malicious user use my private or public IP address to impersonate me?

Your IP address is essential for sending and receiving information online. However, if a hacker knows your IP address, they can use it to seize very valuable information, including your location and online identity. Using this information as a starting point, they could potentially hack your device, steal your identity, and more.