16 Nov
2023
16 Nov
'23
10:48 a.m.
Any traffic that is not your client's, is unwanted. I have never ever had some scanning company called me, saying 'here you have 100 us$ because we used your data' or 'here are some tips to configure this better'. If someone is scanning you, it is always in their advantage not yours, no santa clauses on the internet ;)
Not sure yet if it is Dovecot, or the SSL libraries they are attempting to break, but using a variety of SSL/TLS methods and connections...
They are not interested in dovecot per se. They scan for TLS
vulnerabilities,
mostly.
They're running comprehensive port scans, so they're targeting more than just SSL services.
OrgName: Academy of Internet Research Limited Liability Company OrgId: AIRLL Address: #A1- 5436 Address: 1110 Nuuanu Ave City: Honolulu StateProv: HI PostalCode: 96817 Country: US
Out of business virtual offices, naturally.
AIRLL also operating out of 195.96.137.0/24.
Joseph Tam <jtam.home@gmail.com>
dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-leave@dovecot.org