System version: CentOS Linux release 7.4.1708 (Core)
Network environment: LAN server area
Operation: the server in the iptables rules add sudo/sbin/iptables -t mangle - A PREROUTING -p TCP syn - j. LOG - LOG level=warning - LOG - prefix="test" - m limit, limit="5/second......
Was meant to be used to record other equipment access to the machine scans the log, but in the view log found record with the destination address field (DST) is not the native IP scan (is another of the same class c address, sure it's not the machine IP), could you tell me what is this principle