[MarioL]

Thanks for posting an image.

Since you didn't post the Info field, I'm going to assume it's empty, if not, please post. Also I'm going to assume those source addresses are External (Internet).

The thing I notice is that Interface is "daemon", normally this should show one of the firewall's interfaces... so the logs are being generated by a security server or something.

I'd check all the rules, make sure there is none allowing http or using resources, also change any possible log "short" to "long". I'd also review the "Policy->Global Properties".

Sorry I can't be any more detailed...