locked
WHS 2011 port scannning? RRS feed

  • Question

  • My laptop with Sygate personal firewall installed has been reporting a port scan from my WHS 2011. Is there any reason the server should be doing this? Here is a sampling of what has been reported so far today:

    1900, 1445, 1458,  and 1472
    1900, 3392, 3397,  and 3408
    3469, 3474, 3479,  and 3500
    3540, 3545, 3550,  and 3555
    4780, 4785, 4797,  and 4807
    1900, 4846, 4851,  and 4861
    4861, 4883, 4888,  and 4925
    1180, 1185, 1190,  and 1200
    3782, 3788, 3794,  and 3813
    3813, 3840, 3887,  and 3934
    3934, 3953, 3959,  and 3990
    4044, 4050, 4056,  and 4069
    4069, 4088, 4149,  and 4167
    1900, 4217, 4223,  and 4235
    4352, 4358, 4364,  and 4376
    4514, 4520, 4526,  and 4544
    4544, 4551, 4561,  and 4585
    4664, 1900, 4670,  and 4706
    4706, 4725, 4763,  and 4775
    4871, 4877, 4895,  and 4909
    1064, 1079, 1900,  and 1097
    1097, 1103, 1122,  and 1134

    Thursday, September 1, 2011 6:57 PM

All replies

  • I know of no reason for your server to be doing that. It sounds to me like a malware infection of some sort. Have you:

    • Used your server as a desktop, probably surfing the web?
    • Downloaded software other than a Windows Home Server add-in for installation on your server?
    • Recently had a problem with malware on some other computer in your home?
    • Recently had a guest connect their portable computer to your home metwork?

    I'm not on the WHS team, I just post a lot. :)
    Thursday, September 1, 2011 7:50 PM
  • Ken, no to your questions, the only "surfing" has been to this forum for answers. And it is definitely coming from the server, I shut it down and the scans have stopped. Now I need to find the culprit on the box. Antivirus, Antimalware recommendations anyone?
    Friday, September 2, 2011 2:37 AM
  • you ever fix this?
    Thursday, September 22, 2011 3:39 PM