Dear Pak Syafril,

 

Mau bertanya Pak syafril mengenai dynamic screening  mdaemon sbb :

 

Dynamic Screen: Blocked IP Address: 150.129.56.115


Address Range History


IP Address

Date

Time

Protocol

Logon Used

Notes

Location


150.129.56.115

7/16/2018

10:42:02

SMTP

t...@dima.co.id <mailto:t...@dima.co.id> 

 

Indonesia


150.129.56.115

7/16/2018

10:57:26

SMTP

handri.adr...@dima.co.id <mailto:handri.adr...@dima.co.id> 

 

Indonesia


150.129.56.115

7/16/2018

11:25:09

SMTP

handri.adr...@dima.co.id <mailto:handri.adr...@dima.co.id> 

 

Indonesia


150.129.56.115

7/16/2018

11:31:56

SMTP

jocelyn.ha...@dima.co.id <mailto:jocelyn.ha...@dima.co.id> 

 

Indonesia


150.129.56.115

7/16/2018

11:47:31

SMTP

dimapkb.ad...@dima.co.id <mailto:dimapkb.ad...@dima.co.id> 

 

Indonesia


150.129.56.115

7/16/2018

11:59:07

SMTP

nurhadi.tiafi...@dima.co.id <mailto:nurhadi.tiafi...@dima.co.id> 

 

Indonesia


150.129.56.115

7/16/2018

12:04:50

SMTP

benny.ira...@dima.co.id <mailto:benny.ira...@dima.co.id> 

 

Indonesia


150.129.56.115

7/16/2018

12:08:21

SMTP

wina...@dima.co.id <mailto:wina...@dima.co.id> 

 

Indonesia


150.129.56.115

7/16/2018

13:11:23

SMTP

vera.muly...@dima.co.id <mailto:vera.muly...@dima.co.id> 

 

Indonesia


150.129.56.115

7/16/2018

13:33:41

SMTP

t...@dima.co.id <mailto:t...@dima.co.id> 

 

Indonesia


150.129.56.115

7/16/2018

13:42:41

SMTP

wina...@dima.co.id <mailto:wina...@dima.co.id> 

 

Indonesia


150.129.56.115

7/16/2018

14:12:50

SMTP

jocelyn.ha...@dima.co.id <mailto:jocelyn.ha...@dima.co.id> 

 

Indonesia

 

This IP Address range was added to the Dynamic Screening Blacklist for
failing at least 10 authentication attempts over 1440 minutes.

The blocking of this address range will expire at 2:12 PM on Tuesday, July
17, 2018 SE Asia Standard Time.

 

NOTE: The history above may list a range below your configured threshold due
to a simultaneous attempt(s) at the time of this blocking action

 

You may remove the address range from the Blacklist prior to the expiration
date/time by replying to this message.

 

Dynamic Screening for MDaemon Messaging Server  18.0.2.9 / 18.0.2

 

 

Dynamic Screen: Blocked IP Address: 103.105.64.146


Address Range History


IP Address

Date

Time

Protocol

Logon Used

Notes

Location


103.105.64.146

7/16/2018

10:14:03

SMTP

handri.adr...@dima.co.id <mailto:handri.adr...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:16:53

SMTP

tan.carol...@dima.co.id <mailto:tan.carol...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:17:24

SMTP

tan.carol...@dima.co.id <mailto:tan.carol...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:17:55

SMTP

tan.carol...@dima.co.id <mailto:tan.carol...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:17:58

SMTP

dimalbk...@dima.co.id <mailto:dimalbk...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:18:34

SMTP

sony.setia...@dima.co.id <mailto:sony.setia...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:22:16

SMTP

handri.adr...@dima.co.id <mailto:handri.adr...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:22:41

SMTP

anthony.sumar...@dima.co.id <mailto:anthony.sumar...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:23:35

SMTP

rusnaw...@dima.co.id <mailto:rusnaw...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:24:15

SMTP

rusnaw...@dima.co.id <mailto:rusnaw...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:27:00

SMTP

t...@dima.co.id <mailto:t...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:27:11

SMTP

handri.adr...@dima.co.id <mailto:handri.adr...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:27:28

SMTP

vera.muly...@dima.co.id <mailto:vera.muly...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:27:50

SMTP

irwans...@dima.co.id <mailto:irwans...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:28:24

SMTP

sony.setia...@dima.co.id <mailto:sony.setia...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:28:40

SMTP

vera.muly...@dima.co.id <mailto:vera.muly...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:29:09

SMTP

wina...@dima.co.id <mailto:wina...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:29:38

SMTP

joyce.chri...@dima.co.id <mailto:joyce.chri...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:30:56

SMTP

t...@dima.co.id <mailto:t...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:31:02

SMTP

anthony.sumar...@dima.co.id <mailto:anthony.sumar...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:31:37

SMTP

rusnaw...@dima.co.id <mailto:rusnaw...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:32:21

SMTP

nurhadi.tiafi...@dima.co.id <mailto:nurhadi.tiafi...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:33:28

SMTP

irwi.kanwi...@dima.co.id <mailto:irwi.kanwi...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:34:05

SMTP

dimas.r...@dima.co.id <mailto:dimas.r...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:37:16

SMTP

irvan.gusti...@dima.co.id <mailto:irvan.gusti...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:38:15

SMTP

dimalbk...@dima.co.id <mailto:dimalbk...@dima.co.id> 

 

Indonesia


103.105.64.146

7/16/2018

10:40:25

SMTP

dimalbk...@dima.co.id <mailto:dimalbk...@dima.co.id> 

 

Indonesia

 

This IP Address range was added to the Dynamic Screening Blacklist for
failing at least 10 authentication attempts over 1440 minutes.

The blocking of this address range will expire at 10:40 AM on Tuesday, July
17, 2018 SE Asia Standard Time.

 

NOTE: The history above may list a range below your configured threshold due
to a simultaneous attempt(s) at the time of this blocking action

 

You may remove the address range from the Blacklist prior to the expiration
date/time by replying to this message.

 

Dynamic Screening for MDaemon Messaging Server  18.0.2.9 / 18.0.2

 

 

Mengenai serangan ini bagaimana kita melakukan blocking nya  ? utk serangan
ini sudah kita tambahkan di dynamic blasklist dan Security - > Screening ->
IP Screen -> Masukkin IP 150.129.56.115 & 103.105.64.146 refuse.

 

Apakah perihal ini sudah bener belum Pak syafril utk blocking terhadap
serangan ini ? need advise. Thx

 

 

Thank's

 

 

Heryanto

 


-- 
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0

Kirim email ke