Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

domain controler port scanning one computer on network

Posted on 2004-08-25
4
Medium Priority
?
219 Views
Last Modified: 2010-04-11
I have vpn conections through sonicwall tz170's from our head office to our branches.  Recently one of our sonicwalls started reporting that our 2003 domain controler was port  scanning one of the computers at a branch.  It is only one computer and is always the same every 15min to an hour.  here is a what the sonicwall warning says "08/25/2004 15:58:29.336 -       Possible port scan dropped -       Source:*.*.151.1, 53, WAN -       Destination:*.*.155.39, 1226, LAN -       TCP scanned port list, 1219, 1219, 1219, 1219, 1219 - "  the port does not stay the same it goes from 1100 or so to 4000 or so.  climbs and then starts over again.  This computer is not on the domain but is is a 2000 box that is actually just a dumb terminal that is used to connect to a terminal server.  The *.*.151.1 is one of our domain controlers.  It has been scaned for viruses and come up clean.  But I do not think it is a virus problem becasue it is centered around just one computer.  We have identical systems at other branches with sonicwalls there and do not have the same problem.  Any suggestions would be greatly apreciated.
0
Comment
Question by:walub
3 Comments
 
LVL 4

Expert Comment

by:ErikPhilips
ID: 11897897
Did you also check for trojans and IE crapola?  Try using spybot search and destroy

http://www.safer-networking.org/en/index.html
0
 

Author Comment

by:walub
ID: 12123185
I figured out what the problem. it was that the systems still had the extention .mydomain.com under computername; networkid.  thanks for the attempt though.
0
 

Accepted Solution

by:
modulo earned 0 total points
ID: 12602387
PAQed with points refunded (250)

modulo
Community Support Moderator
0

Featured Post

[Webinar On Demand] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

During and after that shift to cloud, one area that still poses a struggle for many organizations is what to do with their department file shares.
In this article I will be showing you how to subnet the easiest way possible for IPv4 (Internet Protocol version 4). This article does not cover IPv6. Keep in mind that subnetting requires lots of practice and time.
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question