Thanks R1CH. Right now the attacks are gone.You can right click the interface and choose Torch to see the traffic in real time and identify what it is (make sure to enable port and protocol numbers).
Thanks for your answer. My post was not approved by the moderators for 3 days (I assume due to the weekend) and in the meantime I have found other sources which helped to do a successful update.