We have a small network setup on a Windows Domain. We also have a company website that has the same domain name - but is actually not in any way on the domain - it's hosted elsewhere on a cheapo website hosting solution.
So our site for example would look like: www.test123.com
and our machines are all sat on the domain test123.com
We sell a product which uses SQL Server. So most of our machines have SQL Server Express installed, with the SQL Browser service activated.
Recently the company that hosts our website started blocking some of our networks. After talking to them they have stated that these networks were port scanning the website on port 1434 - SQL Server.
Now we're fully up to date with Windows updates, and Anti virus etc as yet nothings come up. One thought crossed our minds however. Could the SQL Server Browser service be looking for SQL Server instances on port 1434, and check the WWW address for the domain name?