General discussion

Locked

ISA server log Intrution detection

By surveymaster.shivaram ·
every few minutes our ISA server log shows the following message. Caould you tell me how to block this.

2004-02-16 00:35:23 68.72.161.34 - 192.168.150.200 80 SEARCH /AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA?????????????????????????????????????####??????????rmomddddddisjhnegdddddddlohddplokdepnqlojldlloskjndiimrlimddddddrfsmlgrpehggpdidjlfrjikljijljljskgkhjlipkgkjjgloqpidjndjjndfididjlddddddhdigssejlgslsskhfmlosljnddlopjlgpdelidloilspiglgpddhidikssijdhidikssijdlillipdkhdmloqpggpdidigssijdpssijedieijlohigploihflkldgqiiflokffddgsiggpmhmhenqdgpiggqodsoredgnqjkhdlpepodqdgqnhdrosegoeskirkinloinfhdgqqjjlodpholoinepdgqqlodhlodgpinoirimpgrlhfssssssniekddkpeskmdnrlsomksqdsmlsrlndrrsprrdjdddgfddddddddddddhqinmddddgdddddddhddddddssssddddolddddddddddddddhdddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddrldddddddresondrddohdmpqfeoldehppqfeihjljmkgfdkdkfjsjkkfjejqfdjgjejrjrjskhfdjfjifdkfkijrfdjmjrfdhhhsigfdjqjsjhjifrdqdqdnfhddddddddddddddnigldipkreimjomhreimjomhreimjomhmnhijkmhrgimjomhjfhijimhrgimjomhlrhjjemhrnimjomhlrhjjsmhrgimjomhreimjnmhljimjomhjfiegjmhrlimjomhrkknjdmhrdimjomhifjmjgjlreimjomhddddddddddddddddddddddddddddddddddddddddddddddddidhiddddhpdedgddjgkinpkdddddddddddddddddrddddsdedodeqloiddgdddddddedddddddmdddddndpnddddddndddddddqdddddddddhdddddeddddddddfdddddhdddddddddddddddhddddddddddddddddrddddddddhdddddddddddddgddddddddddedddddedddddddddedddddedddddddddddddedddddddddddddddddddddddddqdddddgldeddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddmdddddddeddddddddddddddddhddddddddddddddddddddddddddddldddddrdddddddddddddddddddgddddddd

This conversation is currently closed to new comments.

1 total post (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by CG IT In reply to ISA server log Intrution ...

well first off what log are your referring to? and what format? if your using the file format in notepad and not ODBC data, what is shown is a bunch for junk. Now depending upon the logging e.g. packet filter logs, Firewall service logs or web proxy logs, you should have the basic FWSEXTD, IPPEXTD & WEBXTD logs. Now you can't block logs. You can turn off logging, that that is done under monitoring configuration, logs. just uncheck the box "enable logging for this service" for whatever one you don't want to log.

Back to Security Forum
1 total post (Page 1 of 1)  

Related Discussions

Related Forums