OP/PSA: Net Systems Research mail port diddlers

Sean Greenslade sean at seangreenslade.com
Fri Jan 6 23:57:05 UTC 2017


On January 5, 2017 4:52:41 PM HST, "lists at lazygranch.com" <lists at lazygranch.com> wrote:
>http://netsystemsresearch.com/
>
>dovecot.log.1.bz2:Jan 05 17:28:15 pop3-login: Info: Disconnected (no
>auth attempts in 3 secs): user=<>, rip=169.54.233.124, lip=MYIP, TLS
>handshaking: Disconnected, session=<z/L0OVxFetOpNul8>
>
>Their "research" pokes your email ports. Block if you want or
>participate in the (cough cough) research.
>
>IP addresses and opt-out email address on webpage.

Assuming your password policies are up to snuff and you have connection rate limiting in place, this sort of thing is basically just background noise. I'd focus my efforts on those two rather than playing the "block the port scanner whack-a-mole" game.

--Sean



More information about the dovecot mailing list