I recently installed a SonicWall Soho3 firewall and have noticed in the logs that I am experiencing 10-15 SubSeven attacks a day. They are being dropped by the firewall, however I am still wondering if they are false positives are if they are real attacks.

Any way to find out where they are coming from?

Any info on this issue would be much appreciated. Thanks