Hi all. Need some help. For the last two weeks when at home, every twenty minutes I get a port scan event alert from SEP. Checking the security log, I get details:
"Somebody is scanning your computer.
Your computer's UDP ports:
137, 1900, 1254, 1253 and 1252 have been scanned from 192.168.0.186."
The UDP ports137 and 1900 are constant. The other three vary with each scan event. The IP address is constant as well... it is my home server, an HP MediaSmart Server.
In case it matters, my LAN hub is a D-Link DIR-655 wireless router.
As far as I can tell, nothing changed with the system to cause this to start.
The downside of this, besides the annoying warning pop up bubbles, is in reaction to each event SEP shuts down the ports for 600 seconds. As a result, I cannot back up my laptop to the home server. Every time a back up gets underway, a scan event takes place, the ports close, and the connection to the server is lost. Unfortunately, my company's SEP security policy does not allow me to temporarily disable SEP.
I cannot find anything on the server that might be causing the frequent port scans. Any ideas on what could be causing them and how to stop them?