[OPLINTECH] Port Scans from Domain Controllers

[Chad Salamon]

I have Sygate firewall installed on my machine and I noticed this 
morning that I was being port scanned from both domain controllers 
(windows 2000) on our network.  Both domain controllers initiated a port 
scan almost simultaneously. They scanned UDP ports 1179, 1191, 1201,  
and 1215. I've never seen traffic like this coming from the domain 
controllers. Does this sound like something innocent -- or do we have a 
problem? I will continue researching this, but any ideas or suggestions 
would be greatly appreciated.
-- 
Chad Salamon
Library Systems Administrator
Stow-Monroe Falls Public Library
330-688-3295
csalamon at oplin.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20050421/77a9ae45/attachment.htm>