Subverting Brute Force Attacks on your iMIS Web Server

Travis Campbell
March 19, 2018

ASI have recently announced that a number of clients are seeing a degradation of their web servers due to Brute Force attacks, with log entries showing that the perpetrators were attempting to load a Word Press Login page.

Even though this page doesn’t exist on the server, it still slows things down as the server deals with that request.

The fact that it has happened to a number of ASI hosted clients shows that it is an automated attack, and therefore ASI have proposed that a rewrite rule be established to drop all connections to the server if they are attempting to load a PHP page. 

If you do not host any PHP content, then it is recommended that you read and action the TechAlert from ASI. More information can be found at:

https://support.imis.com/hc/en-us/articles/360001815052-TECHALERT-Stop-the-WordPress-Login-Attack-Before-it-Reaches-Your-iMIS-RiSE-Site

While you are there – why don’t you subscribe to TechAlerts so you can receive notifications whenever they are released by ASI?

About Causeis: With over 50+ years combined experience, Causeis provides an award-winning iMIS consultancy service to Australia’s leading non-profits. We specialise in business strategy alignment, engagement modelling, critical system management, website development and data analytics.