IPBan UltraVNC Class

For the wonderful IPBan Service https://github.com/jjxtra/Windows-IP-Ban-Service
Paste the code below into your IPBan.exe.config file in the Classes section

      <!-- This group will block failed logins to UltraVNC -->
      <Group>
        <Keywords>0x80000000000000</Keywords>
         <Path>Application</Path>
         <Expressions>
           <Expression>
             <XPath>//Provider[@Name='UltraVNC']</XPath>
           </Expression>
           <Expression>
             <XPath>//Data</XPath>
             <Regex>
               <![CDATA[
               .*\ Invalid attempt from client ?(?<ipaddress>.*)
              ]]>
             </Regex>
            </Expression>
          </Expressions>
      </Group>