Well yes they were same, unfortunately i cant provide the logs of either the firewall or the trace since they got deleted but i remember that there was attempt to access thru netbios,http port,telnet,ftp and pings.

so any idea on what happened