There is a long list in Attack Detection suspicious packets. What does that mean?
A suspicious packet is a single access to any closed port on your PC. To maintain minimal false positives, these packets are not qualified as non-legitimate actions. The firewall displays a “Port Scan” message only if several suspicious packets are received from one remote host within a specified time interval.
