[Dshield] FW: BASE Incident Report

Michael Thompson mike at thompsonmike.co.uk
Mon Jun 6 17:50:16 GMT 2005


On Monday 06 June 2005 17:21, tfischer at oldenburggroup.com wrote:
>    Could someone please help me understand what I am looking at here? I
> caught this on my external snort sensor. What bothers me the most are lines
> 320-360. Thanks for any help.
>
> Generated by BASE v1.0 (denise) on Mon,  6 Jun 2005 11:06:26 -0500
>
> ---------------------------------------------------------------------------
>- --
> #(2 - 181520) [2005-06-05 01:31:15] [snort/2001848]  BLEEDING-EDGE EXPLOIT
> MS05-021 Exchange Link State - Possible Attack

Looks like a mailserver transfer.
-- 
Mike

To see the world in a grain of sand,
and to see heaven in a wild flower,
hold infinity in the palm of your hands,
and eternity in an hour.

GnuGPG KeyID:=FC0D8D9A



More information about the list mailing list