Try looking more towards other forms of attack other than the RPC that you seem to have focused on. Check the websites of any servers he is running. Maybe he is not as up to date as he might think...