BotFence

Dynamically blocks IP addresses of bots and hackers in your windows firewall

Automatically blocks IP addresses with hacking attempts on your windows server services (rdp, FTP, SQL-Server) using the Windows firewall. The software runs as a Windows background service and monitors RDP, FTP und SQL-Server events for failed logins. If a configurable number of failed login events is detected from the same IP address BotFence dynamically lists that IP address im the Windows firewall as blocked. If your Windows server is reachable from the internet and you want certain services like remote desktop, FTP transfers or SQL-Server to be accessible from outside then hacking attempts on your server will definitely be made. Numerous automated hacking tools, called 'bots' are active on the internet. They scan IP address ranges for published services and when they find FTP, RDP or SQL-Server services active they will try hundreds or even thousands of frequently-used passwords. 'Administrator' (rdp) and 'sa' (superuser for SQL-Server) are the most targeted accounts. As long as the bots don't guess your passwords right you'll probably never now about them, apart from the high server load caused by the thousands of login attempts.

Changes: Bugfix: Malformed Eventlog entries no longer cause the BotFence service to stop

Minimum requirements: min. Windows Server 2008

Operating system: Win2000,WinXP,Win7 x32,Win7 x64,Windows 8,Windows 10,WinServer,WinOther,WinVista,WinVista x64

Program URL: http://www.servolutions.com/botfence.htm

BotFence screenshot

...

Servolutions releases BotFence, an application that keeps hackers and bots out of Windows servers. The software monitors a server’s FTP, RDP, SMTP, SQL-Server and WordPress failed logins and blocks attacking IP-Addresses in the firewall.

Special permissions

The trial version of BotFence can be freely distributed over the internet in an unchanged form.