Hi,
There nothing wrong with the config as such.
The screen thresholds depend on your network and the traffic passing through.
There is nothing in the configuration which would force the users on the internet to initiate tarffic towards those IP addresses.
Regards,
Sahil Sharma
---------------------------------------------------
Please mark my solution as accepted if it helped, Kudos are appreciated as well.