I see what you are describing on a primary MX of mine, same IP address
connecting multiple times roughly every hour.

May 29 22:31:44 irys postfix/submission/smtpd[444857]: warning: hostname
scanner-401.hk2.censys-scanner.com does not resolve to address 199.45.154.4:
Name or service not known
May 29 22:31:44 irys postfix/submission/smtpd[444857]: connect from
unknown[199.45.154.4]
May 29 22:31:44 irys postfix/submission/smtpd[444857]: lost connection
after UNKNOWN from unknown[199.45.154.4]
May 29 22:31:44 irys postfix/submission/smtpd[444857]: disconnect from
unknown[199.45.154.4] unknown=0/1 commands=0/1

That seems more often than I remember as well but I don't particularly keep
an eye on their connections.

-Frost

On Wed, May 29, 2024 at 7:08 PM J Doe via mailop <mailop@mailop.org> wrote:

> On 2024-05-29 17:16, Mark Alley via mailop wrote:
>
> > The website is here below; I get this in my web logs occasionally.
> >
> > https://about.censys[.]io/
> >
> > User Agent: Mozilla/5.0 (compatible; CensysInspect/1.1;
> > +https://about.censys[.]io/)
> >
> > - Mark Alley
>
> Hi Mark,
>
> Thank you for your reply.  I am familiar with what Censys is, but what I
> found unusual is that the frequency with which they scan has noticeably
> increased over the last week or so ... at least from the perspective of
> the mail server I manage.
>
> I wasn't sure if others in the Mailop community were also seeing this or
> whether I was just "lucky"!
>
> - J
>
> _______________________________________________
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to