Notification

Icon
Error

TCP 445 to external IP during LS scan?

Posted: Tuesday, February 23, 2021 8:02:06 PM(UTC)
jvogler

jvogler

Member Original PosterPosts: 1
0
Like
Greetings - I am wondering if anyone else is seeing access attempts via TCP 445 to an external IP when scanning internal and DMZ subnets?

We do not have any LSAgent scanning, nor scanning of anything external. But my infosec team is seeing outbound requests over TCP 445 to an external IP. I have triple-checked our scanning targets (nothing external), and don't know where this is coming from. We initially shut LS down and saw the traffic stop, then we turned it back on and saw the traffic immediately. Then we left the LS service up but disabled all scans and cleared the scanning queue, and the traffic stopped again.

Opened a ticket with support but also wanted to check with the LS community to see if anyone else has had this, and what you may have done about it.

Thanks!

Active Discussions

Lansweeper USB printers with toner levels
by  vstevo   Go to last post Go to first unread
Last post: Today at 3:15:35 PM(UTC)
Lansweeper Changing picture in Assets, New Location error.
by  jmani  
Go to last post Go to first unread
Last post: Today at 2:44:27 PM(UTC)
Lansweeper Showing all assets without a department
by  Andy.S   Go to last post Go to first unread
Last post: Yesterday at 8:30:43 AM(UTC)
Lansweeper Patch Volume Across Fleet
by  darren.kimber  
Go to last post Go to first unread
Last post: Yesterday at 8:29:33 AM(UTC)
Lansweeper Count by Department
by  Brandon   Go to last post Go to first unread
Last post: 4/21/2021 7:42:00 PM(UTC)
Lansweeper Adding computer type to Windows 10 report
by  Brandon   Go to last post Go to first unread
Last post: 4/19/2021 6:38:45 PM(UTC)
Report Center Hardware Inventory
by  Cori  
Go to last post Go to first unread
Last post: 4/16/2021 4:05:02 PM(UTC)