3 Replies Latest reply: Aug 13, 2013 10:03 AM by tfichtner RSS

    All my machines think the Core server is attacking them

    tfichtner Apprentice

      I am on Version 9.5 (have not upgraded to SP1)

       

      When I log into any computer and open up Kaspersky and view the reports I see alarm events for each day.

       

      Event name:  Network attack detected

      Event Component:  Network Attack Blocker

      Application:  Unknown

      Result:  Blocked: Scan.Generic.TCP

      Object:  TCP from 10.1.3.48 to local port 8008

       

       

      The IP shown above is for my Core Server.

       

      Note that the port attacks vary each day and have included ports:  7070, 5000, 389, 13 and others

       

      I have attached a snapshot from one of my machines.

       

      Any ideas on what I should do?