Dear Pak Syafril,

 

Mau bertanya Pak syafril mengenai dynamic screening  mdaemon sbb :

 

Dynamic Screen: Blocked IP Address: 150.129.56.115


Address Range History


IP Address

Date

Time

Protocol

Logon Used

Notes

Location


150.129.56.115

7/16/2018

10:42:02

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


150.129.56.115

7/16/2018

10:57:26

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


150.129.56.115

7/16/2018

11:25:09

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


150.129.56.115

7/16/2018

11:31:56

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


150.129.56.115

7/16/2018

11:47:31

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


150.129.56.115

7/16/2018

11:59:07

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


150.129.56.115

7/16/2018

12:04:50

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


150.129.56.115

7/16/2018

12:08:21

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


150.129.56.115

7/16/2018

13:11:23

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


150.129.56.115

7/16/2018

13:33:41

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


150.129.56.115

7/16/2018

13:42:41

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


150.129.56.115

7/16/2018

14:12:50

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia

 

This IP Address range was added to the Dynamic Screening Blacklist for
failing at least 10 authentication attempts over 1440 minutes.

The blocking of this address range will expire at 2:12 PM on Tuesday, July
17, 2018 SE Asia Standard Time.

 

NOTE: The history above may list a range below your configured threshold due
to a simultaneous attempt(s) at the time of this blocking action

 

You may remove the address range from the Blacklist prior to the expiration
date/time by replying to this message.

 

Dynamic Screening for MDaemon Messaging Server  18.0.2.9 / 18.0.2

 

 

Dynamic Screen: Blocked IP Address: 103.105.64.146


Address Range History


IP Address

Date

Time

Protocol

Logon Used

Notes

Location


103.105.64.146

7/16/2018

10:14:03

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:16:53

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:17:24

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:17:55

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:17:58

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:18:34

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:22:16

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:22:41

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:23:35

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:24:15

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:27:00

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:27:11

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:27:28

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:27:50

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:28:24

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:28:40

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:29:09

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:29:38

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:30:56

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:31:02

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:31:37

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:32:21

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:33:28

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:34:05

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:37:16

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:38:15

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia


103.105.64.146

7/16/2018

10:40:25

SMTP

[email protected] <mailto:[email protected]> 

 

Indonesia

 

This IP Address range was added to the Dynamic Screening Blacklist for
failing at least 10 authentication attempts over 1440 minutes.

The blocking of this address range will expire at 10:40 AM on Tuesday, July
17, 2018 SE Asia Standard Time.

 

NOTE: The history above may list a range below your configured threshold due
to a simultaneous attempt(s) at the time of this blocking action

 

You may remove the address range from the Blacklist prior to the expiration
date/time by replying to this message.

 

Dynamic Screening for MDaemon Messaging Server  18.0.2.9 / 18.0.2

 

 

Mengenai serangan ini bagaimana kita melakukan blocking nya  ? utk serangan
ini sudah kita tambahkan di dynamic blasklist dan Security - > Screening ->
IP Screen -> Masukkin IP 150.129.56.115 & 103.105.64.146 refuse.

 

Apakah perihal ini sudah bener belum Pak syafril utk blocking terhadap
serangan ini ? need advise. Thx

 

 

Thank's

 

 

Heryanto

 


-- 
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke [email protected]
Henti Langgan: Kirim mail ke [email protected]
Versi terakhir MD 18.0.2, SG 5.5.0

Kirim email ke