Pegasus Mail & Mercury

Welcome to the Community for Pegasus Mail and
The Mercury Mail Transport System, the Internet's longest-serving PC e-mail system!
Welcome to Pegasus Mail & Mercury Sign in | Join | Help
in
Home Blogs Forums Downloads Pegasus Mail Overview Mercury Overview Wiki

MercuryS activity question

Last post 03-24-2018, 20:35 by Rolf Lindby. 1 replies.
Sort Posts: Previous Next
  •  03-23-2018, 17:23

    • Brian Fluet is not online. Last active: 07-18-2018, 13:26 Brian Fluet
    • Top 10 Contributor
    • Joined on 12-24-2014
    • North Carolina, USA
    • SuperStar
    • Points 20,945

    MercuryS activity question

    I saw the following activity in my MercuryS window.  It's unlike any I've seen before.  The source IP belongs to DigitalOcean, LLC which is of concern because only two outside sales people use MercuryS.  Port is not standard, credentials are required, passwords are complex.  Insight into what I looking at would be appreciated.

    T 20180323 103805 5ab49a46 Connection from 107.170.193.59
    T 20180323 103805 5ab49a46 GET / HTTP/1.1
    T 20180323 103805 5ab49a46 Host: XX.XX.XX.XXX:XXX
    T 20180323 103805 5ab49a46 User-Agent: Mozilla/5.0 zgrab/0.x
    T 20180323 103805 5ab49a46 Accept: */*
    T 20180323 103805 5ab49a46 Accept-Encoding: gzip
    T 20180323 103805 5ab49a46
    T 20180323 103805 5ab49a46 Connection closed with 107.170.193.59, 0 sec. elapsed.

     

  •  03-24-2018, 20:35

    • Rolf Lindby is not online. Last active: 2018-07-18, 3:18 Rolf Lindby
    • Top 10 Contributor
    • Joined on 05-08-2007
    • Stockholm, Sweden
    • SuperStar
    • Points 25,835
    • BetaTeam Moderator SystemAdministrator

    Re: MercuryS activity question

    Zgrab is apparently a kind of scan tool: https://linuxsecurity.expert/tools/zgrab/

    In this case it tried to connect using the HTTP protocol, it might have tried with SMTP as well though.

View as RSS news feed in XML

Contact | Advertise | Host provider: PraktIT | Terms of Use | Privacy Statement
Copyright © 2007-2011 David Harris / Peter Strömblad. | Pegasus Mail Home Page