Port scan on a VIP shows UDP port 123 and 161 open
I have a loadbalancer with one virtual server for doing HTTP balancing to two back-end nodes in a pool. When I run:
nmap -sV -sU VIP -p 123,161 I get both ports as being open. The only ports that I have opened on the backend nodes are 80 and 22. My question is why when I scan the VIP I get these ports being open. I thought Zeus starts it's services only on one interface, and not on all VIP's?