Antivirus detected firewall IP address

Hello. Recently, there was a brute force attempt against RDP detected on one of our devices. However, the source IP detected comes from our firewall. Please let us know what is causing this and if there is any way for us to narrow down to the true source IP address.