16 Nov
2023
16 Nov
'23
1:04 a.m.
On Wed, 15 Nov 2023, 23:25 Michael Peddemors, <michael@linuxmagic.com> wrote:
Not sure yet if it is Dovecot, or the SSL libraries they are attempting to break, but using a variety of SSL/TLS methods and connections...They are not interested in dovecot per se. They scan for TLS vulnerabilities, mostly.
They're running comprehensive port scans, so they're targeting more than just SSL services.
OrgName: Academy of Internet Research Limited Liability Company OrgId: AIRLL Address: #A1- 5436 Address: 1110 Nuuanu Ave City: Honolulu StateProv: HI PostalCode: 96817 Country: US
Out of business virtual offices, naturally.
AIRLL also operating out of 195.96.137.0/24.
Joseph Tam <jtam.home@gmail.com>