Solved

domain controler port scanning one computer on network

Posted on 2004-08-25
4
213 Views
Last Modified: 2010-04-11
I have vpn conections through sonicwall tz170's from our head office to our branches.  Recently one of our sonicwalls started reporting that our 2003 domain controler was port  scanning one of the computers at a branch.  It is only one computer and is always the same every 15min to an hour.  here is a what the sonicwall warning says "08/25/2004 15:58:29.336 -       Possible port scan dropped -       Source:*.*.151.1, 53, WAN -       Destination:*.*.155.39, 1226, LAN -       TCP scanned port list, 1219, 1219, 1219, 1219, 1219 - "  the port does not stay the same it goes from 1100 or so to 4000 or so.  climbs and then starts over again.  This computer is not on the domain but is is a 2000 box that is actually just a dumb terminal that is used to connect to a terminal server.  The *.*.151.1 is one of our domain controlers.  It has been scaned for viruses and come up clean.  But I do not think it is a virus problem becasue it is centered around just one computer.  We have identical systems at other branches with sonicwalls there and do not have the same problem.  Any suggestions would be greatly apreciated.
0
Comment
Question by:walub
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 4

Expert Comment

by:ErikPhilips
ID: 11897897
Did you also check for trojans and IE crapola?  Try using spybot search and destroy

http://www.safer-networking.org/en/index.html
0
 

Author Comment

by:walub
ID: 12123185
I figured out what the problem. it was that the systems still had the extention .mydomain.com under computername; networkid.  thanks for the attempt though.
0
 

Accepted Solution

by:
modulo earned 0 total points
ID: 12602387
PAQed with points refunded (250)

modulo
Community Support Moderator
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question