On two Windows 7 machines in my LAN I have Symantec Endpoint Protection 12.1 installed. Things work fine, but several time per day I get to see the following warning:
I had a thorough look at the machine that is running on 192.168.1.111, but I am quite sure there is no malicious software on there. What could be triggering this alarm? The only thing I can think of is utorrent local peer discovery, although I that is not exactly a "port scan".