1

Today Symantec antivirus has blocked web attack which is as follows

Web Attack: Malicious Scan Request attack blocked. Traffic has been blocked for this application: \DEVICE\HARDDISKVOLUME4\APACHE2.2\BIN\HTTPD.EXE

Web Attack: Malicious Scan Request

what is the hacker trying to do with my apache httpd.exe file? can anyone elaborate?

1
  • 2
    The information You're giving is insufficient, but there's a good chance that is normal background noise, port- or vulnerability scans on your host. Nothing to worry about if your server is up to date.
    – Tobi Nary
    Aug 23, 2017 at 5:00

1 Answer 1

1

The information you are giving is insufficient, however you may Harden your Server, by filtering ports or closing the ports that are not in use. Additionally, you may add a Network Based Intrusion Detection System to get information regarding any intrusion occurs in your network. Also, you may update the services running on ports since, using the older versions of services lead to un-authorized access to the Server by exploiting their vulnerability or a Denial of Service attack might be possible in order to crash your server.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .