Features

Everything you need to detect and stop brute-force attacks on Windows Desktop and Windows Server.

Real-time monitoring

Watches Windows event logs for failed authentication attempts across RDP, MSSQL, SSH, FTP, and SMB.

Automatic firewall blocking

Adds Windows Firewall rules to block offending IPs the moment they cross your threshold.

Country blocking

Allow or deny by country. Stop entire regions you never authorise.

Active-hours protection

Lock down logins outside business hours. Reduce attack surface during nights and weekends.

Email alerts

Get notified when thresholds are exceeded or a critical event occurs.

Local dashboard

Tray app and dashboard for live status, logs, blocked IPs, and settings.

SMB monitoring

Visibility into SMB authentication failures with alerting (monitor + alert only).

Lightweight Windows service

Runs as AntiBruteService.exe — minimal footprint, designed for production servers.

Live dashboard

System status, active blocks, today's failed logins, top attacking IPs, a 7-day blocked-history chart, and per-service protection toggles — all on one screen.

Click the screenshot to enlarge.

Searchable logs & alerts

Failed-login log and security alerts with search, filter, and export. Acknowledge events as you triage them.

Click the screenshot to enlarge.

Email alerts, whitelist & tuning

SMTP-based email alerts, per-service protection, IP/CIDR whitelist, and tunable failure threshold, window, and block duration.

Click the screenshot to enlarge.

License activation

Enter your license key on the About tab to activate. Trial status and remaining days are shown at a glance.

Click the screenshot to enlarge.