OP/PSA: Net Systems Research mail port diddlers
Sean Greenslade
sean at seangreenslade.com
Fri Jan 6 23:57:05 UTC 2017
On January 5, 2017 4:52:41 PM HST, "lists at lazygranch.com" <lists at lazygranch.com> wrote:
>http://netsystemsresearch.com/
>
>dovecot.log.1.bz2:Jan 05 17:28:15 pop3-login: Info: Disconnected (no
>auth attempts in 3 secs): user=<>, rip=169.54.233.124, lip=MYIP, TLS
>handshaking: Disconnected, session=<z/L0OVxFetOpNul8>
>
>Their "research" pokes your email ports. Block if you want or
>participate in the (cough cough) research.
>
>IP addresses and opt-out email address on webpage.
Assuming your password policies are up to snuff and you have connection rate limiting in place, this sort of thing is basically just background noise. I'd focus my efforts on those two rather than playing the "block the port scanner whack-a-mole" game.
--Sean
More information about the dovecot
mailing list