Notification

Icon
Error

TCP 445 to external IP during LS scan?

Posted: Tuesday, February 23, 2021 8:02:06 PM(UTC)
jvogler

jvogler

Member Original PosterPosts: 1
0
Like
Greetings - I am wondering if anyone else is seeing access attempts via TCP 445 to an external IP when scanning internal and DMZ subnets?

We do not have any LSAgent scanning, nor scanning of anything external. But my infosec team is seeing outbound requests over TCP 445 to an external IP. I have triple-checked our scanning targets (nothing external), and don't know where this is coming from. We initially shut LS down and saw the traffic stop, then we turned it back on and saw the traffic immediately. Then we left the LS service up but disabled all scans and cleared the scanning queue, and the traffic stopped again.

Opened a ticket with support but also wanted to check with the LS community to see if anyone else has had this, and what you may have done about it.

Thanks!

Active Discussions

Lansweeper Acknowlege from Alerts
by  Hilbers   Go to last post Go to first unread
Last post: Today at 7:55:38 AM(UTC)
Lansweeper LsAgent for Windows command line options?
by  Brandon  
Go to last post Go to first unread
Last post: Yesterday at 4:49:17 PM(UTC)
Lansweeper EmailLog.txt file become big in size
by  Ary Ahmed   Go to last post Go to first unread
Last post: 4/18/2021 10:56:58 AM(UTC)
Lansweeper LsAgent.ini
by  Orion Poplawski  
Go to last post Go to first unread
Last post: 4/17/2021 4:49:12 PM(UTC)
Lansweeper LSagent force a scan
by  Orion Poplawski   Go to last post Go to first unread
Last post: 4/17/2021 4:46:49 PM(UTC)
Lansweeper MS Edge Chromium LanSweeper Extension development
by  steveb  
Go to last post Go to first unread
Last post: 4/16/2021 10:59:56 PM(UTC)
Lansweeper Office 365 v2 Scanning Error
by  DJX   Go to last post Go to first unread
Last post: 4/16/2021 7:37:57 PM(UTC)
Lansweeper Database size growing too large
by  JTempleton  
Go to last post Go to first unread
Last post: 4/16/2021 5:19:22 PM(UTC)