Skip navigation
98 Views 3 Replies Latest reply: Aug 13, 2013 10:03 AM by tfichtner RSS
tfichtner Apprentice 84 posts since
Feb 1, 2008

Has received 1 of 9 achievements.
Currently Being Moderated

Aug 6, 2013 9:27 AM

All my machines think the Core server is attacking them

I am on Version 9.5 (have not upgraded to SP1)

 

When I log into any computer and open up Kaspersky and view the reports I see alarm events for each day.

 

Event name:  Network attack detected

Event Component:  Network Attack Blocker

Application:  Unknown

Result:  Blocked: Scan.Generic.TCP

Object:  TCP from 10.1.3.48 to local port 8008

 

 

The IP shown above is for my Core Server.

 

Note that the port attacks vary each day and have included ports:  7070, 5000, 389, 13 and others

 

I have attached a snapshot from one of my machines.

 

Any ideas on what I should do?

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 20 points
  • Helpful Answers - 10 points
LANDESK Community powered by Jive SBS® 4.5.7.1  |  Legal Notices  |  Privacy Policy  |  Icon 

TweeterOn Twitter  |  Icon FacebookOn Facebook © 2007 LANDESK Software