07/18/2024
Not today hacker.
As a part of my duties for Hosting Dragon, tonight I chased down / stopped mischief directed from Germany on our hosting environment.
This bad actor was using many techniques to try and gain access through the several layers of protections in our infrastructure.
Our automated systems were doing their job, as I was getting hordes of notifications of successful blocks of intrusion attempts.
If it ever becomes needed, I have people that I employ that can correct issues fast. But, it was fun tonight to draw from my prior years as an I.T. professional and to thwart this particular attacker myself.
At first, I didn't make too many moves, as I wanted to gather information on what the attacker was trying to do exactly. He/She was trying to use some known exploits to piggy-back on in an effort to gain more access. Though there was never any real compromise, it was sure apparent that this person knew what they were doing.
I took note of I.P.'s, techniques, etc.., then visited our main firewall and started adding rules. I made sure to turn on logging for these rules.
I took some enjoyment at visiting these logs and seeing this hacker try their different tools / techniques, only to fail at each attempt... Finally, ceasing all effort.
Our security systems (as most systems) block an impressive amount of checkered behavior hourly. Hundreds, thousands, and potentially many more attacks happen at regular intervals, daily.
Security is sure important, and the fact that Hosting Dragon has not been compromised to this date, from it's inception, is a testament to the quality of protection we employ.