EvlWatcher automates the detection and mitigation of attackers by monitoring the Windows Event Log.
: Once an IP violates a rule (e.g., 5 failed attempts within 2 minutes), EvlWatcher automatically creates a Windows Firewall rule to ban that IP for a set duration, typically 2 hours. download evlwatcher
: The service will create a firewall rule named "EvlWatcher." Note that this rule is often disabled when the ban list is empty and only activates when an active ban is in place. Key Features for Power Users : Open the EvlWatcher Console from the Start
devnulli/EvlWatcher: a "fail2ban" style modular log ... - GitHub 5 failed attempts within 2 minutes)
: You can easily exclude trusted IP patterns to prevent accidental lockouts of legitimate users or administrators. Installation & Basic Setup
: As a community-driven project , the source code is entirely open for auditing, ensuring no hidden backdoors are introduced into your security stack.
: Open the EvlWatcher Console from the Start Menu to monitor real-time activity and manage current bans.