Defensive measures for IIS servers against UAT-8099