Tag Info

New answers tagged


Put a network firewall in front of the server. Using only the Windows firewall is like leaving the bank vault locked but the front door open. You've allowed people into the bank and it's only a matter of time before they breach the vault. In your network firewall (that you're going to put in place) allow traffic only to the ports on the server required for ...


Yeah. That is called a firewall and something an admin should know automatically. Put a firewall in place, block all traffic that you do not want. OBVIOUSLY you do not do this. Besides that - no.


A record of "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" in your Raw Access logs indicates that someone is running vulnerability scanner which has this fingerprint. By itself, this entry does not mean that you have been hacked. It only means that someone has been trying to hack your site. The entry should always have caused a "400" error on your site, ...

Top 50 recent answers are included