Previously I posted IISIP - an app that automatically downloaded known bad IPs and blocked them in IIS.
IISIP has been updated to version 0.82 and is available here (source code available optionally).
The changes include:
- Some minor bug fixes
- A new event log scanner. This will scan the event log and extract a bad IP list. It has a filter so you can extract IPs only from certain events (hacking attempts) if you like.
If you use the SMTP service the scanner can also extract a list of failed delivery domains. This was helpful to us for example in finding that *lots* of people send mail to yagoo.com when they mean yahoo.com. By finding all the common mistypes we were able to check for these in the UI and prevent the problem before the user even submits an e-mail address.
Thanks
Posted by: G | March 09, 2009 at 06:47 AM