[Network Attack Detected-Solution for DoS.Generic.Flood.TCPSYN]

fe80::6ec2:

fe80::3224:

port 5357

[Network Attack Detected-Solution for DoS.Generic.Flood.TCPSYN]

 

Thanks for the response.

After reading your recommended articles, I started suspecting my printer(s)

I have three different printers/scanners connected to my network.  I disconnected all of them and have not had any additional attacks.

I am putting them back online one at a time to find the culprit.

Since the IPs are likely within my network, is it a bad Idea to post them publicly?

[Network Attack Detected-Solution for DoS.Generic.Flood.TCPSYN]

I am running windows 10 and using Kaspersky Antivirus Ver 21.2.10.391.

Starting on Jan 02, 2023 I have been receiving Network Attack Detected/Blocked notifications from Kaspersky. It is a Dos.Generic.Flood.TCPSYN that has been occurring about every two minutes. It started from one IP address until today when I restarted my computer then it has been coming from two different IP addresses consistently.

Is there a solution to stop this?

Is my computer at risk? I disconnected it from the internet.

Is it possible that this is a false positive?

I have attached a screen shot of the report.

Thanks for the help,

Dustin