Here's an example from the logs (private info munged):
Time UTC 05/16/2014 17:03 Priority Alert Category Security Services Message Gateway Anti-Virus Alert: Suspicious#mpress.2 (Worm) blocked. Source 54.231.1.81, 80, X1, s3-1-w.amazonaws.com Destination 192.168.x.x, 32079, X0, pc.example.local