Originally posted here by Vorlin
It's the same box that two years ago, when Code Red came out, my apache got HAMMERED because of all the damned infested taken-over IIS-driven servers. In one month, I had over 80,000 hits from 900+ unique addresses. Does this mean my box is less secure? On the contrary; in this one example, my box was shining because I wasn't running the webserver that was insecure. And then I installed that great php script that someone made up halt IIS and shutdown the server if it was infected, hehe...
In the long run, security is up to the administrator. I know die-hard windows admins who have really secure environments and I know linux admins who have holes all over the place...it's up to the administrator to secure a box and you're only as good as how much you check logs and the like, hehe. :D [/B]