lists at lazygranch.com
2017-Jan-06 02:52 UTC
OP/PSA: Net Systems Research mail port diddlers
http://netsystemsresearch.com/ dovecot.log.1.bz2:Jan 05 17:28:15 pop3-login: Info: Disconnected (no auth attempts in 3 secs): user=<>, rip=169.54.233.124, lip=MYIP, TLS handshaking: Disconnected, session=<z/L0OVxFetOpNul8> Their "research" pokes your email ports. Block if you want or participate in the (cough cough) research. IP addresses and opt-out email address on webpage.
On January 5, 2017 4:52:41 PM HST, "lists at lazygranch.com" <lists at lazygranch.com> wrote:>http://netsystemsresearch.com/ > >dovecot.log.1.bz2:Jan 05 17:28:15 pop3-login: Info: Disconnected (no >auth attempts in 3 secs): user=<>, rip=169.54.233.124, lip=MYIP, TLS >handshaking: Disconnected, session=<z/L0OVxFetOpNul8> > >Their "research" pokes your email ports. Block if you want or >participate in the (cough cough) research. > >IP addresses and opt-out email address on webpage.Assuming your password policies are up to snuff and you have connection rate limiting in place, this sort of thing is basically just background noise. I'd focus my efforts on those two rather than playing the "block the port scanner whack-a-mole" game. --Sean