[Snort-users] Newbie: What does this mean?
plate at ...13254...
Tue Apr 12 03:51:44 EDT 2005
I've found this in the log:
# of from to method
30 192.168.1.2 22.214.171.124 (http_inspect) DOUBLE DECODING ATTACK
The IP 192.168.1.2 is my router to the Net.
Does this mean that MY server did the attack?
Thanks in advance
More information about the Snort-users