Is this normal (logs again)

[rands.rodriguez]

Sorry for a newbie question.

I have a lots of repeating IPs in my firewall logs. When i check the port numbers they're unassigned. I don't know what they're up to.

I tried to click the "Easy rule: Add to Block list" and i don't know if i should so it or not.

What would be your recommendations?

Please enlighten me.

Regards,

[GruensFroeschli]

I assume the interface "EASTERN" is your WAN.
This is normal DNS-lookup traffic from other users on your segment you're seeing.
Simply ignore it.

[rands.rodriguez]

Thanks Gruen,

Upon checking on our firewall as of today…

I have this packet loss and high network traffic on our WAN (IN)

checking the LAN side, there's no activity and actually there are no people here in the office.

What could it be? is someone trying to DoS us?