Помогите расшифровать логи в журналировании (сообщение об ошибках).
Код:
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=178.206.149.18 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=30608 DF PROTO=TCP SPT=59691 DPT=37253 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 240
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=109.71.179.130 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=119 ID=7539 DF PROTO=TCP SPT=52915 DPT=443 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 237
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=113.161.85.39 DST=94.243.209.195 LEN=52 TOS=0x08 PREC=0x40 TTL=100 ID=28585 DF PROTO=TCP SPT=60832 DPT=37253 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 239
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=2.134.155.151 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=29837 DF PROTO=TCP SPT=14892 DPT=37253 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 239
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=113.161.85.39 DST=94.243.209.195 LEN=52 TOS=0x08 PREC=0x40 TTL=100 ID=629 DF PROTO=TCP SPT=34127 DPT=37253 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 237
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=80.82.79.163 DST=94.243.209.195 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=TCP SPT=54301 DPT=21320 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=119.90.135.240 DST=94.243.209.195 LEN=40 TOS=0x08 PREC=0x20 TTL=91 ID=256 PROTO=TCP SPT=6000 DPT=23 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000 231
Aug 15 16:09:40 (none) user.alert kernel: 67.245 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=10610 DF PROTO=TCP SPT=61799 DPT=37253 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 197
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=60.173.14.87 DST=94.243.209.195 LEN=40 TOS=0x08 PREC=0x20 TTL=93 ID=256 PROTO=TCP SPT=6000 DPT=8080 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000 231
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=91.197.134.117 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=18983 DF PROTO=TCP SPT=65181 DPT=37253 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 240
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=213.184.245.111 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=54785 DF PROTO=TCP SPT=1164 DPT=37253 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 241
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=61.174.51.232 DST=94.243.209.195 LEN=40 TOS=0x08 PREC=0x20 TTL=90 ID=256 PROTO=TCP SPT=6000 DPT=22 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000 230
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=84.42.181.122 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=6048 DF PROTO=TCP SPT=64099 DPT=37253 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 238
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=178.90.221.101 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=31964 DF PROTO=TCP SPT=52475 DPT=37253 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 240
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=92.49.185.16 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=9978 DF PROTO=TCP SPT=58110 DPT=37253 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 237
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=188.253.232.78 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=7220 DF PROTO=TCP SPT=11499 DPT=37253 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 239
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=23.95.34.220 DST=94.243.209.195 LEN=40 TOS=0x08 PREC=0x40 TTL=100 ID=256 PROTO=TCP SPT=6000 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000 232
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=50.22.60.148 DST=94.243.209.195 LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=32780 PROTO=TCP SPT=51824 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 233
Aug 15 16:09:40 (none) user.crit kernel: eth1 Link DOWN. 62
Aug 15 16:09:40 (none) user.crit kernel: eth1 Link UP 100 mbps full duplex 80
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=77.39.27.39 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=12408 DF PROTO=TCP SPT=51190 DPT=443 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 234
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=91.72.118.47 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=8075 DF PROTO=TCP SPT=50694 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 234
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=77.39.27.39 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=12563 DF PROTO=TCP SPT=51190 DPT=443 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 234
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=91.72.118.47 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=8265 DF PROTO=TCP SPT=50694 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 234
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=77.39.27.39 DST=94.243.209.195 LEN=48 TOS=0x00 PREC=0x00 TTL=49 ID=12862 DF PROTO=TCP SPT=51190 DPT=443 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 234
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=178.90.221.101 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=10033 DF PROTO=TCP SPT=64585 DPT=37253 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 240
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=80.82.70.148 DST=94.243.209.195 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=TCP SPT=47443 DPT=8088 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 235
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=116.213.70.52 DST=94.243.209.195 LEN=52 TOS=0x08 PREC=0x40 TTL=38 ID=17413 DF PROTO=TCP SPT=2810 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 237
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=94.71.74.63 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=14975 DF PROTO=TCP SPT=51982 DPT=37253 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 237
Aug 15 16:09:40 (none) user.alert kernel: 92 RES=0x00 SYN URGP=0 MARK=0x8000000 86
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=50.22.60.148 DST=94.243.209.195 LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=58095 PROTO=TCP SPT=21783 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 233
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=89.185.8.107 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=14641 DF PROTO=TCP SPT=54971 DPT=37253 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 238
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=93.76.244.143 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=19092 DF PROTO=TCP SPT=53835 DPT=37253 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 239
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=94.243.208.10 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=125 ID=24571 DF PROTO=TCP SPT=59599 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=211.42.249.141 DST=94.243.209.195 LEN=40 TOS=0x00 PREC=0x00 TTL=92 ID=256 PROTO=TCP SPT=6000 DPT=4899 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000 233
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=94.243.208.10 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=125 ID=25904 DF PROTO=TCP SPT=60239 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=94.243.208.10 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=125 ID=25905 DF PROTO=TCP SPT=59863 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=94.243.208.10 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=125 ID=25911 DF PROTO=TCP SPT=61149 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=94.243.208.10 DST=94.243.209.195 LEN=52 TOS=0x00 PREC=0x00 TTL=125 ID=25913 DF PROTO=TCP SPT=60239 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=94.243.208.10 DST=94.243.210.160 LEN=52 TOS=0x00 PREC=0x00 TTL=125 ID=26176 DF PROTO=TCP SPT=64065 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=94.243.208.10 DST=94.243.210.160 LEN=52 TOS=0x00 PREC=0x00 TTL=125 ID=26177 DF PROTO=TCP SPT=63381 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=94.243.208.10 DST=94.243.210.160 LEN=52 TOS=0x00 PREC=0x00 TTL=125 ID=26184 DF PROTO=TCP SPT=63861 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=94.243.208.10 DST=94.243.210.160 LEN=52 TOS=0x00 PREC=0x00 TTL=125 ID=26195 DF PROTO=TCP SPT=64065 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=94.243.208.10 DST=94.243.210.160 LEN=52 TOS=0x00 PREC=0x00 TTL=125 ID=26196 DF PROTO=TCP SPT=63381 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=94.243.208.10 DST=94.243.210.160 LEN=52 TOS=0x00 PREC=0x00 TTL=125 ID=26200 DF PROTO=TCP SPT=63861 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=78.82.9.207 DST=94.243.210.160 LEN=60 TOS=0x00 PREC=0x00 TTL=116 ID=11971 DF PROTO=TCP SPT=50593 DPT=443 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 235
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=41.133.42.251 DST=94.243.210.160 LEN=52 TOS=0x0C PREC=0x00 TTL=112 ID=28926 DF PROTO=TCP SPT=61674 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=94.243.208.10 DST=94.243.210.160 LEN=48 TOS=0x00 PREC=0x00 TTL=125 ID=26238 DF PROTO=TCP SPT=64065 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=94.243.208.10 DST=94.243.210.160 LEN=48 TOS=0x00 PREC=0x00 TTL=125 ID=26239 DF PROTO=TCP SPT=63381 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=94.243.208.10 DST=94.243.210.160 LEN=48 TOS=0x00 PREC=0x00 TTL=125 ID=26240 DF PROTO=TCP SPT=63861 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 16:09:40 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=218.77.79.43 DST=94.243.210.160 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=54321 PROTO=TCP SPT=53670 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 233
Aug 15 16:17:08 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=101.227.247.206 DST=94.243.210.160 LEN=40 TOS=0x08 PREC=0x20 TTL=95 ID=256 PROTO=TCP SPT=46156 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000 235
Aug 15 16:22:20 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=211.42.249.141 DST=94.243.210.160 LEN=40 TOS=0x00 PREC=0x00 TTL=92 ID=256 PROTO=TCP SPT=6000 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000 233
Aug 15 16:38:05 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=201.252.6.158 DST=94.243.210.160 LEN=40 TOS=0x08 PREC=0x40 TTL=234 ID=12345 PROTO=TCP SPT=27617 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 235
Aug 15 16:43:33 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=113.108.21.16 DST=94.243.210.160 LEN=40 TOS=0x08 PREC=0x20 TTL=42 ID=0 DF PROTO=TCP SPT=12202 DPT=0 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 230
Aug 15 17:01:42 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=218.207.77.42 DST=94.243.210.160 LEN=40 TOS=0x08 PREC=0x40 TTL=90 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000 232
Aug 15 17:01:49 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=95.34.148.234 DST=94.243.210.160 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=21721 DF PROTO=TCP SPT=1764 DPT=45470 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 238
Aug 15 17:14:00 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=82.221.106.233 DST=94.243.210.160 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=54321 PROTO=TCP SPT=48668 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 235
Aug 15 17:22:19 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=58.221.49.88 DST=94.243.210.160 LEN=40 TOS=0x08 PREC=0x20 TTL=104 ID=256 PROTO=TCP SPT=26855 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000 233
Aug 15 17:35:53 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=80.82.79.163 DST=94.243.210.160 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=TCP SPT=47531 DPT=21320 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 17:41:28 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=218.77.79.43 DST=94.243.210.160 LEN=40 TOS=0x08 PREC=0x20 TTL=229 ID=54321 PROTO=TCP SPT=34212 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 234
Aug 15 17:56:45 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=137.175.14.105 DST=94.243.210.160 LEN=40 TOS=0x00 PREC=0x00 TTL=105 ID=256 PROTO=TCP SPT=6000 DPT=3389 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000 234
Aug 15 18:04:55 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=95.6.23.115 DST=94.243.210.160 LEN=48 TOS=0x08 PREC=0x20 TTL=110 ID=6334 DF PROTO=TCP SPT=1312 DPT=110 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 234
Aug 15 18:14:58 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=80.82.79.163 DST=94.243.210.160 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=TCP SPT=56807 DPT=21320 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 18:23:05 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=116.10.191.218 DST=94.243.210.160 LEN=40 TOS=0x08 PREC=0x20 TTL=97 ID=256 PROTO=TCP SPT=6000 DPT=22 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000 231
Aug 15 18:31:17 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=94.120.248.90 DST=94.243.210.160 LEN=60 TOS=0x08 PREC=0x20 TTL=47 ID=4033 DF PROTO=TCP SPT=41338 DPT=23 WINDOW=5808 RES=0x00 SYN URGP=0 MARK=0x8000000 234
Aug 15 18:56:06 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=80.82.79.163 DST=94.243.210.160 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=TCP SPT=52761 DPT=21320 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Aug 15 18:56:34 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=14.63.217.97 DST=94.243.210.160 LEN=60 TOS=0x08 PREC=0x40 TTL=31 ID=9860 DF PROTO=TCP SPT=33328 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0 MARK=0x8000000 233
Aug 15 19:02:13 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=87.229.253.10 DST=94.243.210.160 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=19231 DF PROTO=TCP SPT=50598 DPT=13959 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 239
Aug 15 19:18:35 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=37.220.31.116 DST=94.243.210.160 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=21770 DF PROTO=TCP SPT=4881 DPT=135 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 237
Aug 15 19:23:30 (none) user.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=5.18.181.93 DST=94.243.210.160 LEN=52 TOS=0x00 PREC=0x60 TTL=117 ID=15945 DF PROTO=TCP SPT=61728 DPT=44190 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 237