Strange URL request in botnet

[VinceM]

Hi all,

This morning, spending some time on my palo report and in botnet report there is many alert concerning repeted request to "84.39.153.31/SpamResolverNG/SpamResolverNG.dll?DoNewRequest"

Does someone know what it is ? Is it part of Microsoft email server ?

Thx

V.

[Gregoux]

Hello

in the traffic log, or threat log do you have more information, like a client device which initiate this request.

is it intern device or extern. may be more clues could help us.

[VinceM]

Here detail:

Source is MS exchange server.