This is the only miner rig on the main ISP router, the rest of the rigs are on a different router.
Looks like someone is trying to HACK IN
That is a stratum command.. Not sure what you are thinking keeping a management port of any kind open to the internet, it doesn't take more than a few hours for a scan to come across with someone looking for miner related ports..
whats your network topography are you exposing your miners on the WAN so you can remotely access them ?