The post Happy New Year appeared first on Creative People | Quality IT services.

A port-scan is a process at which, in simple terms, an outsider checks each and every port of our public-facing side of the network (usually our edge firewall or a DMZ host) to see if it is open and what it can serve. This process is performed by various specialized tools (a pretty well-known tool is nmap), which with the proper configuration can yield valuable results from some not so well-attended network targets.

Daily I can see in the firewall logs various attempts from multiple sources to connect to ports that are not common and no-one would expect a service to be active; this smells like a port-scan.

Such events have significantly increased since the pandemic, where remote working became a norm. A very common way for remote workers to connect to the office is via Remote Desktop services. Many admins (depending on the network equipment at hand) turned to the port-mapping approach, by using non-standard high ports that map to individual PCs in the office. Attackers know that, so as a means to find those precious RDP ports they select the port-scan technique. Most cases like this are fully automated; the attacker feeds his tools with target IP lists and lets it run until something useful comes up. It’s like hunting by using traps. While the port-scan is running, the firewall of the target network has to do work, as well. Imagine if someone comes and knocks on your door and you have to answer if he can come in or not. Now take into account that you have 65535 ports. That is a lot of work!

So, someone that is not so friendly, should be stopped at a relatively early stage and be discouraged to continue with his wrong-doing. Essentially, you would want to “blacklist” this source and prevent at that point and onward any connections from or to this host. However, it is physically impossible to sit in front of your computer 24-7 just to monitor the connections and deduce which sources need to be blacklisted or not.

A very helpful and low-cost technique to blacklist such threat actors is to select some really uncommon ports (not the ones you run your services on) and add some monitoring rules that wait for connections. If someone tries to connect to those ports then (s)he is your guy. Usually, a quite low-budget or open source firewall has this ability to tag or add the source IP addresses to a list that can be processed later with other firewall rules (eg. if an IP is in this list, drop the packets). Those decoy or “honeypot” ports should be carefully selected though, as we would not want to accidentally blacklist actually needed traffic.

I hope this helps some of you, but rest assured there are many more monsters out there…

[Disclaimer: This article was not written with AI support, so excuse any grammatical errors]

The post Honeypot Ports technique appeared first on Creative People | Quality IT services.

The post Creative People: IT in Action Highlights appeared first on Creative People | Quality IT services.

The post E-Mail Πως δουλεύει και τελευταίες εξελίξεις appeared first on Creative People | Quality IT services.

The post Thinking like an IT appeared first on Creative People | Quality IT services.

The post Γιατί πρέπει να το κάνει το IT και όχι μόνος μου appeared first on Creative People | Quality IT services.

Greek Sailors’ children, waiting for their dads, were building their own toys, usually boats…

Those boats symbolized their anticipation of seeing their fathers again,
along with their love for the sea.

In Greece, Christmas boats symbolize a new life voyage, following the birth of Jesus.
This is what we wish for 2024!

Καλά Χριστούγεννα!

The post Merry Christmas and a happy and prosperous 2024!!! appeared first on Creative People | Quality IT services.

Στην Creative People αντιλαμβανόμαστε βαθιά την σημασία της και την ενσωματώνουμε στον πυρήνα της φιλοσοφίας μας με σκοπό να προσφέρουμε υψηλότερης ποιότητας εξυπηρέτηση στους πελάτες μας.

Στην καθημερινότητα του IT Support, οι χρήστες δεν θέλουν να ακούσουν το τετριμμένο «κάνε ένα restart». Πολλές φορές θα λύσει ένα πρόβλημα, όχι όμως όλα. Έτσι η συμβολή της ουσιαστικής επικοινωνίας στην απόκτηση πληροφορίας και την μεταφορά γνώσης αποτελεί θεμέλιο λίθο για την παροχή καλύτερης υπηρεσίας και δημιουργίας σχέσεων εμπιστοσύνης με τους πελάτες μας.

Η εξυπηρέτηση των πελατών μας δεν αποτελεί απλά μια διαδικασία, είναι μια συνεχής προσπάθεια να είμαστε αφοσιωμένοι, να ακούμε πρώτα και να ανταποκρινόμαστε αποτελεσματικά κατανοώντας τις ανάγκες και τα καθημερινά τους προβλήματα.

Για τους λόγους αυτούς, με μεγάλή μας χαρά ανακοινώνουμε τη χορηγία μας στο επερχόμενο RISE 2023 – the 2 day EXPERIENCE από τους theSPEAKERS.

Το event αυτό αποτελεί μια μοναδική ευκαιρία για όσους θέλουν να βελτιώσουν τις επικοινωνιακές τους δεξιότητες, την συναισθηματική νοημοσύνη και να αναπτυχθούν σε προσωπικό κι επαγγελματικό επίπεδο.

Συμμετέχοντας στο event, μπορείτε να συμμετάσχετε κι εσείς σε workshops που αφορούν στους κανόνες επικοινωνίας, τεχνικές επαγγελματικής παρουσίασης και δημόσιας ομιλίας, λεκτική και μη λεκτική επικοινωνία, καθώς και workshop συναισθηματικής νοημοσύνης κ.α. γνωρίζοντας ενδιαφέροντες ανθρώπους με ξεχωριστές προσωπικότητες.

Σας περιμένουμε λοιπόν να μας συνοδέψετε σ’ αυτό το ταξίδι αυτό-βελτίωσης και εξέλιξης.

Let’s RISE together!

The post RISE 2023 appeared first on Creative People | Quality IT services.

The post Το έργο Xenios έφτασε στο τέλος του; appeared first on Creative People | Quality IT services.

The post ΤΕΛΙΚΗ ΗΜΕΡΙΔΑ XENIOS appeared first on Creative People | Quality IT services.