ARP attack to my desktop

1

I’ve been seeing logs on the comodo firewall (free version) about APR intrusion on my desktop for some time now. My family’s laptop has an APR infection, so I deleted it. However, nevertheless, my desktop continues to attempt APR intrusion, which causes my destination to lose internet connection whenever there’s an attack. So, even though I set the comodo firewall setting on the laptop that I’m attacking to block UDP, TCP, IP, and ICPM going out of my desktop’s ip, what should I do?

1 Like
2

Please show screenshot of log entries.

3

2024-07-20_193158-1
2024-07-20_193158-11062×976 170 KB

1 Like
4

Those are quite strict svchost rules which may be part of the issue and it may be just the router trying to communicate with your computer but can you show us your Global Rules? Do you have a Trusted Network rule?

For example, with my Proactive Configuration stealth ports set to Alert Incoming, I have the following:

image
image701×386 99.3 KB

5

This is my global Rules.

2024-07-20_200856
2024-07-20_200856790×675 106 KB

1 Like
6

Thanks. Looks like you haven’t added a network rule. You can still add a network as Public if you don’t want to trust your home network. Either add it manually or untick the Do Not show alerts box below and then reconnect to the network.

image

If that’s not the issue then CF is protecting you from the attack or you may need to reset your ARP Cache. Details can be found here: Reset ARP Cache

1 Like
7

2024-07-20_204335-1
2024-07-20_204335-1877×1532 187 KB

Thank you. I ran Reset ARP Cache’s action, which you kindly guided me, before I read your comments. Although the APR intrusion log is still showing in the CF, it’s a bit of a relief because it’s not showing on my desktop’s IP.

1 Like