[KB2951] Resolve "Detected Port Scanning Attack" notifications (15.x–16.x)

Issue

  • The "Network threat blocked" notification indicates that ESET has detected and blocked an intrusion attempt (it does not indicate that your system is infected)

Solution

Before you proceed

If the ESET firewall is blocking a program or network resource that you know to be safe, exclude the IP address from being detected as a threat by the intrusion detection system (IDS).

If you are not sure that the detected IP address is safe, ESET recommends that you create a log of all connections blocked by the ESET firewall and contact ESET technical support for assistance.

Update your ESET Windows home product and run a Computer scan

  1. Verify that program module updates are downloading properly (these will include ESET firewall module updates whenever they are available). Update ESET products—check for latest product modules.

  2. Scan your computer.

  3. If your ESET product detects an infection, complete preliminary malware troubleshooting.

If your ESET product does not detect an infection, disable intrusion detection notifications.


Disable intrusion detection notifications

If your system is not infected, follow the step below to disable Detected Port Scanning Attack notifications:

Intrusion detection notifications

Intrusion detection notifications indicate that your ESET product has detected and blocked an intrusion attempt. They do not indicate an infection.

Your ESET product will continue to block these attacks even after the notifications are disabled.

  1. Open the main program window of your ESET Windows product.

  2. Press the F5 key to open Advanced setup.

  3. Click Network Protection → Network attack protection and expand Advanced OptionsIntrusion Detection. Click the toggle next to Notify about attack detection to disable it and click OK.

To re-enable these notifications, repeat steps 1-2 above, click the toggle next to Notify about attack detection to enable it and click OK.

Figure 1-1