What can be drawn from the following syslog message receive by an administrator from his adaptive security appliance?

%ASA-6-201010 Embryonic connection limit exceeded 200/200 for inbound packet from 209.165.201. 10/1026 to 10. 1. 1. 1.20/80 on interface outside

A.
The client at 209.165.201.10 has been infected with a virus.

B.
The server at 10.1.1.20 is under a SYN attack.

C.
The server at 10.1.1.20 is under a smurf attack.

D.
The server at 209.165.201.10 is under a smurf attack.