OSSEC HIDS Notification. 2019 Oct 08 09:04:54 Received From: iris->/var/log/authlog Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system." Portion of the log(s): Oct 8 11:04:53 iris sshguard[84562]: Attack from "195.56.253.49" on service 100 with danger 2. --END OF NOTIFICATION