Hi,
It's hard to give a conclusive answer on this question by just looking at the IoC events.
You need to do some digging in the events and host profile to see what is going on.
First I would start to look at the events (magnifying glass) last seen to see what addresses and ports has been involved and what direction the traffic is going.
Check if server on that host profile is active and responding to the type of traffic.
br, Micke
