You are using Wireshark to monitor your network traffic and you see a lot of...

The presence of packets with FIN, PUSH, and URG flags activated in network traffic, as observed through Wireshark, is indicative of a XMAS scan. This type of scan is used by attackers to identify open ports and services available on a networked computer. The peculiar combination of these TCP flags is not used in normal, everyday communications and is easily picked up by intrusion detection systems as anomalous. The XMAS scan derives its name from the fact that the packet lights up like a Christmas tree with several flags set, which is an unusual and conspicuous event in network traffic.

References: The characteristics of a XMAS scan and the use of these specific TCP flags are documented in network security literature and align with the Certified Network Defender (CND) course materials, which cover network scanning techniques and their identification123.