Intrusion Detection Overview

Within Intrusion Detection we have seven key areas:

• Auto Blocked IP
  • The computer at this address has done activities that have proven to be what a hacker/malware infected computer would do. This can include visiting too many pages too quicky, trying to log into the system multiple times with invalid information, trying to inject specific code into the website, etc.
  • The time for locking will depend upon what was done and the settings in the system. These will be automatically removed from the intrusion detection table based on the defined parameters. 
• Blocked
  • These are email addresses and website domains that you don't want people to be coming from or using within the system. These are similar to the bad words (below) as well. They will set off certain triggers within the system.
• Blocked Country
  • Many will only want to do business with people within a given country. By default, we limit to the United States and you can turn on/off all countries you want to allow.
  • Note: Just because you're blocking a country doesn't mean they still can't access. When someone uses a VPN they can bypass the country check as the IP address the user is using will appear from a potentially allowed country.
• Manual IP Block
  • If you know of known hacker/malware IP addresses you can block them from every accessing the system. This is a great way to add further security to your system.
• Bad Words
  • When emails or forms are submitted through the system they can go through a list of bad words. These words are known words that you don't want people to say. These can be curse words or words you know are always going to be spam. To the user everything will look like it went through. It won't though. Everything is logged and the reason for the block is part of the log for your reference.
• Blocked Password
  • These are passwords that are not allowed to be used in the system. Each year we update with the top most used passwords and include them. This way we know that the most common passwords people might try are not in the system.

Beyond the core blocks that the system you can control the following:

• Dark Web Integration
  • Get notified of users email addresses existing on the dark web and information on how to cleanup that information.
• Global Honey Pot Firewall
  • Have hackers blocked before they even try to attach your site by utilize our global firewall that automatically adds IP addresses that are 100% known to be hackers and malware infected machines.
• Security Headers
  • Protect your site from cross site scripting
• Two Factor Authorization
  • Email verification
  • Google Authenticator