Network Attack Detected - IP is from LAN (Router)

June 16, 2021

Hello,

I started to get port scanned in early May of this year. I think the attacking IP’s are spoofed, so they aren’t really the ones from my LAN (Not too sure), but I’m still worried. I understand that port scanning is normal, but my router IP seems to periodically port scan 873 at almost exact time. I made sure that the blocked IP’s are blocked for 32000 minutes (~20 days). However, the same IP keeps attacking couple of days later. So I’m really confused. I attached a screenshot. Any help would be appreciated.

Windows Version: Windows 10 (Version 21H1 (OS Build 19043.1052))

Kaspersky Version: Security Cloud (21.3.10.391 (b))