7 Jan
2017
7 Jan
'17
1:57 a.m.
On January 5, 2017 4:52:41 PM HST, "lists@lazygranch.com" lists@lazygranch.com wrote:
http://netsystemsresearch.com/
dovecot.log.1.bz2:Jan 05 17:28:15 pop3-login: Info: Disconnected (no auth attempts in 3 secs): user=<>, rip=169.54.233.124, lip=MYIP, TLS handshaking: Disconnected, session=
Their "research" pokes your email ports. Block if you want or participate in the (cough cough) research.
IP addresses and opt-out email address on webpage.
Assuming your password policies are up to snuff and you have connection rate limiting in place, this sort of thing is basically just background noise. I'd focus my efforts on those two rather than playing the "block the port scanner whack-a-mole" game.
--Sean