Private 10. network broadcasting DHCP to WAN

[watkinsufs]

SG-3100
LAN: 192.168..

In the firewall logs I have the following being blocked every few seconds:
Interface Source Destination
WAN 10.30.232.1:67 255.255.255.255:68 UDP

Since I can ping the IP I figured it was some device on the WAN connection from Cox. I called them and they said they don't see anything. Our LAN is the only private network and it's on a 192.168. subnet.

This is what I get from nmap:
Running: /usr/local/bin/nmap -sS -sV -O '10.30.232.1'
Starting Nmap 7.91 ( https://nmap.org ) at 2021-06-03 10:45 MST
Nmap scan report for 10.30.232.1
Host is up (0.0075s latency).
All 1000 scanned ports on 10.30.232.1 are filtered
Too many fingerprints match this host to give specific OS details

Wouldn't this mean that it's coming from somewhere on the Cox network to our WAN? How else could I get a ping response?
Cox said the modem is in bridge mode, could it also still have DHCP turned on in bridge mode? They said it was not turned on.

[KOM]

@watkinsufs Why do you need to do all these things? Just ignore it and move on. Looks like some client doing a dhcp-discover and your WAN is blocking it like it should.