Wireless Water Cooler

last person joined: 14 days ago 

Hang out and socialize with other community members in this off topic forum. Everything from industry trends to hobbies and interests are welcomed!
Back to discussions
Expand all | Collapse all

airwave doing port scan?

This thread has been viewed 0 times

  • 1.  airwave doing port scan?

    Posted Sep 16, 2014 08:06 AM

    Anyone ever seen airwave do random port scans to devices on the network? We have our airwave system reaching out (tcp 135) to random systems and those networks are not in the discover page.



  • 2.  RE: airwave doing port scan?

    EMPLOYEE
    Posted Sep 16, 2014 08:26 AM

    Are you using LDAP authentication or an Exchange server for sending emails?



  • 3.  RE: airwave doing port scan?

    Posted Sep 16, 2014 09:01 AM

    Exchange is sending emails, but the auth is TACACS/RADIUS



  • 4.  RE: airwave doing port scan?

    EMPLOYEE
    Posted Sep 16, 2014 09:03 AM
    TCP 135 is used for some Exchange communications. What servers are you seeing the traffic? Is it only exchange and/or domain controllers?


  • 5.  RE: airwave doing port scan?

    Posted Sep 16, 2014 09:08 AM
    It really goes to all systems not just windows or exchange but *nix as well.


  • 6.  RE: airwave doing port scan?

    Posted Nov 23, 2014 07:30 AM

    if it happens often enough i would start a packet capture on the airwave or target server to see what exactly is going on.