Jump to content

Scan.Generic.PortScan.TCP pointing to router IP and MAC Address


Theophrastus.Bombastus

Recommended Posts

Theophrastus.Bombastus

 

OS: Windows 11 Version 23H2
Kaspersky: Kaspersky Premium V. 21.18.5.438(a)

Hello. I've receiving notifications for network attack blockers on a daily basis with the following name:

Scan.Generic.PortScan.TCP

On the notification, there's the Mac Address. Upon inspecting it, I have figured that's the highlighted Mac Address is the router's MAC Address.

A few days ago, there was also another network attack name, also being pointed to the router's MAC address:

DoS.Generic.Flood.TCPSYN, the same minute as one of the Scan.Generic.PortScan.TCP notifications. 

I've reseted the modem to factory defaults and changed passwords. Ever since this DoS.Generic.Flood.TCPSYN hasn't came up again.

But I still receive the Scan.Generic.PortScan.TCP on a daily basis.

What could this mean? Is it likely, due to it being the routers MAC Address that it's a false positive?

Link to comment
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now


×
×
  • Create New...