CONTACT US

AnCode IP Warden

IP Warden is a Host Intrusion Prevention tool that monitors the Windows Event logs for unsuccessful logon attempts from any given source IP.

What is the IP Warden?


IP Warden is a Host Intrusion Prevention tool that monitors the Windows Event logs for unsuccessful logon attempts from any given source IP. Once the number of logon attempts exceeds the configured logon attempt threshold, the offending source IP is added to a custom IP Warden firewall rule within the Windows firewall. This blocks any further activity from the offending IP on the Windows Firewall level to the server.

Currently IP Warden is able to monitor Remote Desktop, IIS, SMB (File and Printer Sharing) and MSSQL. We are working on adding more logon monitors and this will be available soon.

Control

With IP Warden you can easily control who reaches your servers by adding IP addresses to your blacklist to prevent unwanted access or whitelist addresses to ensure they are not blocked erroneously.

Security

IP blocking is a type of web and network security that blocks specific IP addresses from browsing or accessing your server and performing potentially malicious activities.

Brute Force Protection

IP address blocking is commonly used to protect against brute force attacks and to prevent distributive addresses from gaining unauthorised access to your servers.

© 2021 AnCode, All rights reserved