Okay, this was just an idiot who didn't even know how to play script kiddie who found a way into a domain of mine and then played a game that was more annoying than anything. He first crashed out a DB that had to be repaired. Okay, took me longer to log in than it did to repair the DB.
We missed at first who it was as we didn't look to closely, then he came back 2 days later and decided to smack the perms on the files changing everything to 755/644 which of course just causes errors that are a little more time consuming than anything.
So, now I'm returning the favor to all of you. We isolated out the IP, he's come in multiple times to play and we're locking him out now via a full IP block on him at the server level as in he will straight up be denied for even sniffing our direction on any domain that is on that server. Next up, I'm providing the IP of this individual right here so the rest of you can go ahead and shut him out of your sites.
76.178.213.165
Enjoy it folks and we have definitely confirmed this one, he came in flying so low so many times, like he was reading instructions on which folders/files to mess with or something that there's no doubt. A good hacker would of at least come in with a proxy or hidden his IP somehow. LOL