brute force – Hacking attemps from unkown source

These requests are coming from your private network, not from the public internet. is part of the subnet, which is dedicated for private networks. See for more info.

Is it possible that the security policy that you created is only applied to the public interface, and not the private interface?