Intrusion attempts blocked

[tcsdi_support1]

Hi Support

We would like to report this computers because they have large amount of intrusion detections blocked. How can we reduce the detections ?

Kindly see the picture below and get the logs here:
https://wetransfer.com/downloads/3ae4fc ... 934/96d9ff
https://ibb.co/WKDfRSN

Regards,
Christian

[Darth Panda]

Hi tcsdi_support1,


We can not determine the cause of the intrusion attempts. To solve the problem, I recommend that you check the device that is performing them, which can be identified by the MAC that appears in the report.

Regards,

[tcsdi_support1]

Hi Darth,

I Believe this is the mac address of the affected endpoint
94-c6-91-65-89-56

We also tried to update the network driver of 94-c6-91-65-89-56

And checked the PC and there are no unusual programs that may generate abnormal ARP traffic

How can we reduce the detection of the intrusion on this endpoint ?

Regards,
Christian

[Darth Panda]

Hi tcsdi_support1,

You have to verify the device with the MAC f4-4d-30-ff-3a-51, which is the remote MAC that appears in the report.

Regards,

[tcsdi_support1]

Hi Darth ,

Thank you for your reply. So how can we reduce or fix this matter?

there are still many intrusion attempts that panda blocke.

If you want PSinfo logs we can provide a new one again.

Looking forward hearing from you!

Regards,
Christian

[Darth Panda]

Hi tcsdi_supportt1,

We can not determine the cause of the intrusion attempts so I cannot tell you how to fix it, sorry. Check the devide with the remote MAC I told you..
Regards,