3 Replies Latest reply: Aug 13, 2013 10:03 AM by tfichtner RSS

    All my machines think the Core server is attacking them

    tfichtner Apprentice

      I am on Version 9.5 (have not upgraded to SP1)


      When I log into any computer and open up Kaspersky and view the reports I see alarm events for each day.


      Event name:  Network attack detected

      Event Component:  Network Attack Blocker

      Application:  Unknown

      Result:  Blocked: Scan.Generic.TCP

      Object:  TCP from to local port 8008



      The IP shown above is for my Core Server.


      Note that the port attacks vary each day and have included ports:  7070, 5000, 389, 13 and others


      I have attached a snapshot from one of my machines.


      Any ideas on what I should do?