Tag Info

New answers tagged

2

Is there a list of all known C&C servers published somewhere that I can just add firewall rules for? Unfortunately the operators of such botnets and malware have adapted various strategies to work around such blocks. A complete and always up-to-date list is not possible because these server change frequently either because they got taken down by ...


2

I have found that these automated, undirected scans are usually scanning IPs randomly and do not include a Host: header or include a bogus Host: header. Filtering out requests with bad Host headers can reduce the nuisance logging a bit and possibly reduce the impact on your server, depending on the server's architecture. This doesn't make your server much ...


2

While all of them lead to a 404 Not Found, CPU cycles are wasted in processing these requests ... Somewhere CPU cycles "must be wasted" to filter out these requests. But it depends on the kind of requests and of your server and application setup how much cycles this will be and where exactly they will be needed. If there is a clear source of these ...


1

An open port as such is not a security risk. The security risk, if any, is with the service behind the port. The worst case is a port left open unintentionally, because it exposes a service that wasn't meant to be exposed and consequently might not be secured properly. So the way to deal with the list of open ports you found is: Check it against your list ...


7

What are the risks that will result out of these ports, if I left them open? As a security good practice,ports should be open only on a need-to-be basis.You are exposing the services that are listening on those ports you left open to exploits. Why ? Because a service means something is processing data and thus you are also exposing the vulnerabilities ...


-1

Open ports are like unlocked doors. The risk depends on what you have in those rooms. If you have some money on a table, then the risk is high. If you have money in a safe, then the risk is medium. And if the safe is bolted to the wall, then the risk is low. You can close the services behind those ports or you can use a firewall to control or block access ...


3

The biggest risk for you is that your company network security detected your portscan. It is a security attack and their countermeasures probably don't consider your wish to remain in your job seriously. The biggest risk for the company is that a list of numerous open ports means elevated attack surface. Attacking something is a hard thing, but if there are ...



Top 50 recent answers are included