<4>Jun 30 17:27:49 hq-data001 kernel: [84432.427862] [UFW BLOCK] IN=ens5 OUT= MAC=02:87:42:3e:4f:ba:02:1a:a4:b4:e1:82:08:00 SRC=197.25.112.33 DST=239.155.198.85 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=6030 DF PROTO=TCP SPT=7001 DPT=36636 WINDOW=442 RES=0x00 ACK URGP=0 
This is a syslog message from a product called Uncomplicated Firewall (UFW) by linux. The following fields were extracted from the message:
action: block
clientbytes: 52
clientport: 36636
facilitylabel: kernel
localhostname: hq-data001
localstarttime: Jun 30 17:27:49
messagetype: firewall_action
priority: 4
program: kernel
protocol: 6
senderhost: 10.1.100.121
sensitivity: normal
serverport: 7001
severitycode: 4
severitylabel: warning
sourceinfo: unknown
tags: ['rfc3164', 'ufw', 'firewall_action']
streamName: ufw
clientIP: 239.155.198.85
serverIP: 197.25.112.33