IIS Web Login Protection. Stop brute-force attacks on IIS Authentication methods

Protection Overview

Many of the Web Servers use built-in IIS Authentication methods to limit access to some parts of the website like admin panels and customer areas.

The most commonly used authentication methods are Basic, Digest and NTLM.

Being widely used, these authentication methods are subject to brute-force attacks on a regular basis.

Everyone is able to download freely available brute-force tools and start abusing your server and flooding the logs with thousands of failed login attempts like below:

Failed IIS Login attempts

Failed IIS login attempts in the Security event log

Luckily these login attempts are logged in the Security event log and RdpGuard is able to detect and block these brute-force attempts even if they come over SSL/TLS.

To Enable IIS Web Login Protection

IIS Web Login Protection is completely covered by RDP Protection. IIS authentication methods generate the same 4625 events in Security event log as the RDP ones.

In order to enable brute-force protection for IIS authentication methods, please enable RDP protection as described in this tutorial.

"This sotware is really great. It's a relief. Because my server is constantly under attack. Thanks RdpGuard" - Joaquim De Sousa Marques

"Nice product. I used to implement something similiar in a low-tech and cumbersome manner via a script called TSBlock (not mine). This makes it much easier and is well worth the pricetag for SMB's." - J. Johnson

"Absolutely amazed at your product. We are a church in the North Dallas area, and I discovered this morning multiple failed logon attempts via our Remote Access Server. A friend suggested your product, so I immediately downloaded the trial. It had a list of about five blocked IP addresses in minutes, and that was enough to lead me to push the BUY button. Over the past 10-15 minutes the list is now about thirty with at least a third being international attempts to break into our system. Thanks for a great product. You may have just saved us much grief." - John Hallford

"Love the software. RDP on our Windows servers is just ridiculous. We would block it in the router but we have lots of old-time customers that would have issues." - Scott Hirsch

"Love the software! Makes it easier than tailoring VB Scripts!!" - Nick Brennan

"It's a great product - really stopping those RDP attackers :-)" - Dave, UK

"First of all: Your application is very (!!!) useful and I like it very much securing my 2012 R2 server. RdpGuard is the best solution, I found on the market and after 10 minutes of testing it I ordered the fully-featured version. :-)" - Carsten Baltes