Dear Experts!

Explain me please what does it mean:

1. I have RB951 with a simple configuration 1WAN, NAT and L2TP to office ~ 10 users
2. In Interface i'm watching there are no traffic or a little bit working traffic ~ 1 user at office
3. Rx on WAN interface too much!
4. Torch shows traffic from unknown IP adressess to any address from WAN subnet (not WAN IP)

See screenshot

I suppose ISP's equipment was wrong configured

drop port 8000 wan

ISP fixed the issue.
They somewhere made a mistake when replacing their own equipment