On 15/11/2019 05.06, Jeffrey 'jf' Lim wrote:
> On Fri, Nov 15, 2019 at 11:49 AM Fourhundred Thecat <400the...@gmx.ch> wrote:
>>
>> Also, judging by the fact that IP does not resolve to hostname, I assume
>> these are not mail servers. Are these just some bots that are scanning
>> the Internet for mailservers ?
>>
>
> Indeed. I would imagine that's what they're doing. Some bots scan, and
> then other servers deliver.
>
> Don't forget: the moment you connect, you start giving out information
> ("220 $smtpd_banner"), while they, OTOH, dont.But some of the bots connect repeatedly, with high frequency, ie every minute. Are they just misconfigured? I would assume, once they discovered that my IP is indeed a mail server, the would move on to next IP address. why do they continue to scan the same IP another ten thousand times ?
