There is a network claiming to be a security company, however the activity appears to be a little more malicious, and appears to be attempting buffer overflows against POP-SSL services.. (and other attacks).

https://www.abuseipdb.com/check/104.156.155.21

Just thought it would be worth mentioning, you might want to keep an eye out for traffic from this company...

Might want to make up your own mind, or maybe someone has more information, but enough of a red flag, that thought it warranted posting on the list.

Not sure yet if it is Dovecot, or the SSL libraries they are attempting to break, but using a variety of SSL/TLS methods and connections...

Anyone with more information?

NetRange:       104.156.155.0 - 104.156.155.255
CIDR:           104.156.155.0/24
NetName:        ACDRESEARCH
NetHandle:      NET-104-156-155-0-1
Parent:         NET104 (NET-104-0-0-0-0)
NetType:        Direct Allocation
OriginAS:
Organization:   Academy of Internet Research Limited Liability Company
(AIRLL)
RegDate:        2022-01-07
Updated:        2022-01-07
Ref:            https://rdap.arin.net/registry/ip/104.156.155.0


OrgName:        Academy of Internet Research Limited Liability Company
OrgId:          AIRLL
Address:        #A1- 5436
Address:        1110 Nuuanu Ave
City:           Honolulu
StateProv:      HI
PostalCode:     96817
Country:        US
RegDate:        2021-10-15
Updated:        2022-11-06
Ref:            https://rdap.arin.net/registry/entity/AIRLL

--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.
_______________________________________________
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

Reply via email to