We seem to be getting a huge load of entries in our security log with the following details: The Windows Filtering Platform has blocked a connection.
The source IP address and port change for each record and they occur about every few minutes to every few seconds.
Is this something we should be concerned about. The reason we spotted this is because the server performance was very poor on Friday and on inspection found many of these logs in the security log.
Should we be concerned?