All my machines think the Core server is attacking them

I am on Version 9.5 (have not upgraded to SP1)

When I log into any computer and open up Kaspersky and view the reports I see alarm events for each day.

Event name:  Network attack detected

Event Component:  Network Attack Blocker

Application:  Unknown

Result:  Blocked: Scan.Generic.TCP

Object:  TCP from 10.1.3.48 to local port 8008

The IP shown above is for my Core Server.

Note that the port attacks vary each day and have included ports:  7070, 5000, 389, 13 and others

I have attached a snapshot from one of my machines.

Any ideas on what I should do?