Event ID - 1761

Port No1761
Service Namems-sms
RFC Doc0
ProtocolTCP
DescriptionNovell ZENworks (Zero Effort Networks) client installed on workstations, also used by Microsoft SMS 2.0. Verification of Rights / Remote reboot / remote execute Microsoft Systems Management Server versions 2.0 [NOTE:This information can be applied to Service:- zenworks, cft-0]
Reference LinkPort No:1761 Service Name:ms-sms Protocol:TCP
AttackVirtually any traffic from external sources to port 1761 will likely be an attack and should be flagged as such.
Action:Block port 1761 inbound and outbound, as a general rule administrative traffic for Microsoft SMS and Novell ZENworks should not cross network perimeters, or if it needs to access should be firewalled to specific systems.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.