What kind of work do you expect? If this is unknown IP, block it completely.
There are many port scans and attacks on the internet. A good firewall is always recommended.
The log messages you can see are there exactly because you have limited access to the services for a list of subnets. So whatever comes from another address to ports where these services listen is not allowed to connect but the attempt is logged, so that you would learn it happened.