Knowledge Base

EventSentry can detect malicious activity in a variety of ways including: Failed Logons RDP ... Log File Activity Outgoing process activity Port Scans NetFlow Windows Syslog Once a malicious IP is detected it can be helpful to report the IP address to an online reputation system for IP addresses like abuseipdb.com. Automatic...

Requires: EventSentry NetFlow license pfSense 2.4 or later psexec kittyportable Starting with EventSentry v4.0.3 EventSentry can log events when a potentially malicious IP address has been detected via NetFlow. This event can subsequently be used to trigger a process that remotely logs into the pfSense firewall to block the IP addres...