[ FIELD NOTES ]
FIELD NOTES
Practical articles on secure software, cyber risk, ISO/IEC 27001, NIS2 and GDPR. Written from an engineering-first perspective.
2.35 million HTTP requests. What were the bots looking for on the server, and what did Fail2ban change?
2.35 million HTTP requests. What were bots looking for on the server, and what difference did Fail2ban make? A technical case study covering nearly 11 months of Apache2 traffic—from scans for .env files and webshells to signatures of known CVEs—along with the security measures implemented and an assessment of their effectiveness.
READ FIELD NOTE ↗ 31-08-2026 / CybersecurityThe day-to-day reality of servers exposed to the Internet
Imagine you’re sitting at home in the evening. Someone walks up to your door and tries the handle. Once. Then a second time, and a third. And this happens 68 times a day—even at night. That’s 2,123 times a month!
READ FIELD NOTE ↗ 19-08-2026 / CybersecurityIT outsourcing does not mean outsourcing responsibility. What do companies still fail to understand about cybersecurity?
This article was prompted by a recent phone conversation I had with an executive at a large chain of medical facilities, as well as the recent data breach at MyDr.
READ FIELD NOTE ↗ 07-02-2026 / CybersecurityCyberattack on the Polish energy sector – technical conclusions
CERT recently published a report detailing findings from a cyberattack on energy infrastructure that took place on December 29, 2025. Were we truly on the brink of a catastrophe?
READ FIELD NOTE ↗