topic Re: Strange URL request in botnet in General Topics

Strange URL request in botnet

VinceM — Mon, 17 Jun 2013 07:44:44 GMT

Hi all,

This morning, spending some time on my palo report and in botnet report there is many alert concerning repeted request to "84.39.153.31/SpamResolverNG/SpamResolverNG.dll?DoNewRequest"

Does someone know what it is ? Is it part of Microsoft email server ?

Thx

Re: Strange URL request in botnet

Gregoux — Mon, 17 Jun 2013 11:32:52 GMT

Hello

in the traffic log, or threat log do you have more information, like a client device which initiate this request.

is it intern device or extern. may be more clues could help us.

Re: Strange URL request in botnet

VinceM — Mon, 17 Jun 2013 12:03:20 GMT

Here detail:

Source is MS exchange server.