Support

Hi Team,

Just want to ask what action do we need to do when we receive this kind of emails:

---------------------------------------------

Hello,

We would like to notify you that a security exception was detected on your site, *****, with the following details:

IP Address: ***.***.***.*** (IP Lookup: IP Lookup)
Reason: Admin Query String

---------------------------------------------

Does this mean that the owner of the IP address already accessed the backend of our website? I'm having a hard time knowing the exact definition of that exception. Can you explain that exception further? And do we really need to block all the IP address that have these exceptions?

Hope you can help me with this matter.

Cheers,

This means that the attacker tried and failed to access the back end of your site. Anything in the Security Exceptions Log was blocked by Admin Tools.

Just let Admin Tools handle it. Hackers don't use their own IP addresses. If you block it, you'll just be blocking one IP in a pool of dynamically assigned IP addresses, or a compromised computer, an open proxy server, etc. Admin Tools can block the IP temporarily if it is used more times than the block threshold and can block it permanently if the IP is temporarily blocked multiple times - a repeat offender.