
Benjamin D.
- Total activity 523
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 15
- Subscriptions 97
Activity overview
Latest activity by Benjamin D.-
Benjamin D. commented,
No, I really don't know why. This is censorship and it makes cPanel look bad if I go and post it elsewhere. I wrote this comment because I know cPanel moderators and staff might read it and use m...
-
Benjamin D. commented,
Hi, several of my posts in this thread were automatically marked as "Pending approval" and do not currently show to the public or even to this specific thread's subscribers. One of the non showing...
-
Benjamin D. commented,
Uhm, I ran WAY more than 1200 IP address through AbuseIPDB. Every day, I run 300-400 IP addresses and I've been doing this for a couple years now. You can use their free API to automate this and ...
-
Benjamin D. commented,
With those IP addresses scoring 100% confidence in AbuseIPDB and the fact that those IP addresses are not ISP provided (they're datacentre servers just like yours) then it's clear that those IP add...
-
Benjamin D. commented,
Of course there's a solution: To permanently blacklist the offending bot net IP addresses until the master IP is blocked, then the attacks stop. We've proven that 2 days ago (see the other thread)...
-
Benjamin D. commented,
Yes but in my experience they will be back just an hour or two later and indefinitely. Trying to prevent them to fully send their spam/trying their dictionary attack by introducing a delay (that e...
-
Benjamin D. commented,
All it took for us is to ban the 1215 IP addresses shown in my message above and it completely (and I mean COMPLETELY) stopped. There hasn't been a single Exim attack in over 2 days, not a single ...
-
Benjamin D. commented,
Yes, same thing here, it stopped around 9:00 AM (now it's 11:00 AM). I'm thinking it's one of the last IP address that I've blocked that was the botnet master, but I'm not sure exactly which one.
-
Benjamin D. commented,
I hope I'm not jinxing myself but I believe one of the IP in the list above is the botnet's master used for detecting if a host is still online (so that the botnet can attack it or not) because aft...
-
Benjamin D. commented,
Here's a small update after roughly 48 hours. So there were 1215 unique IP addresses from all around the world, totalling at least 125,000 Exim calls (note that some have had the time after an hou...