Tag Archive for: ids/ips

A black sphere and falling letters. Dystopian and IT-ish.

How to battle slowgrind bruteforce attacks against Windows servers

The default rule of Syspeace is that if an intruder fails to login more than 5 times within 30 minutes, the intruders IP address is blocked, tracked and reported for 2 hours and simply is denied any access to the server.  A new trend though has emerged and that is for bruteforce attackers to “slowgrind” through […]

Let’s look at some ROI: So far we’ve saved 4 292 968 US$

This is just a geeky, cost-calculating experiment really. Nothing scientific or anything. Just a fun thought on how easy it is to calculate the ROI for the low cost of Syspeace licenses. Yesterday evening we had a really interesting meeting with a future reseller so we thought we’d look at the actual numbers of blocked […]