Can some one explain the following?
This came out of yesterday's log
Code:
Date: 12/23 17:13:58 Name: Portscan detected from 70.xx.xxx.91 Talker(fixed: 30 sliding: 14) Scanner(fixed: 0 sliding: 0)
Priority: n/a Type: n/a
IP info: n/a:n/a -> n/a:n/a
References: none found SID: n/a
Date: 12/23 17:14:05 Name: Portscan detected from 70.xx.xxx.91 Talker(fixed: 4 sliding: 30) Scanner(fixed: 0 sliding: 0)
Priority: n/a Type: n/a
IP info: n/a:n/a -> n/a:n/a
References: none found SID: n/a
Date: 12/23 21:29:56 Name: (http_inspect) DOUBLE DECODING ATTACK
Priority: n/a Type: n/a
IP info: 192.168.1.199:2782 -> 192.168.1.1:8080
References: none found SID: n/a
Date: 12/23 21:29:56 Name: (http_inspect) DOUBLE DECODING ATTACK
Priority: n/a Type: n/a
IP info: 70.xx.xxx.91:40901 -> 65.206.60.124:80
References: none found SID: n/a
This came out of yesterday's log