The AK Wombat

fe80::6ec2: fe80::3224: port 5357

Thanks for the response. After reading your recommended articles, I started suspecting my printer(s) I have three different printers/scanners connected to my network. I disconnected all of them and have not had any additional attacks. I am putting them back online one at a time to find the culprit. Since the IPs are likely within my network, is it a bad Idea to post them publicly?

I am running windows 10 and using Kaspersky Antivirus Ver 21.2.10.391. Starting on Jan 02, 2023 I have been receiving Network Attack Detected/Blocked notifications from Kaspersky. It is a Dos.Generic.Flood.TCPSYN that has been occurring about every two minutes. It started from one IP address until today when I restarted my computer then it has been coming from two different IP addresses consistently. Is there a solution to stop this? Is my computer at risk? I disconnected it from the internet. Is it possible that this is a false positive? I have attached a screen shot of the report. Thanks for the help, Dustin