This IP are found on Source address, and the destination is the router.
On ip firewall connections.
I can find different source porte but the destination port is always the same 53. This traffic is unexpected because as i said there is no host behind the router. Looks like the router is uploading all of this traffic
chechito: it varies from day day... this morning were russian ips, right now are turkish, later may be chinese ips...
If your router is really exposed to the Internet (i.e. not an ADSL o FTTH line) a good firewall, that adds "probing" or port scanning source IPs to dynamic address lists for further firewall drop is mandatory.