Solved

Rule : Default Windows File Sharing

Posted on 2007-04-04
1
171 Views
Last Modified: 2013-12-04
I was checking the log of my antivirus, I found in th log:
4/3/2007 10:10:43 PM,"Rule ""Default Windows File Sharing"" permitted (###.##.###.133,netbios-ssn(139)).","Rule ""Default Windows File Sharing"" permitted (###.##.###.133,netbios-ssn(139)).  Inbound TCP connection.   Local address,service is (MYPCNAME(###.##.###.186),netbios-ssn(139)).  Remote address,service is (###.##.###.133,3426).  Process name is ""System""."

now I live in a building where there are 200 pcs on a Lan all start with ###.##.###.XXXX , where XXXX is a fixed number of each user. I dont know the address ###.##.###.133 mine is ###.##.###.186, does it mean someone is hacking mine, as I find the message several times!!, what is this "rule" and how to secure my pc better.
0
Comment
Question by:TheSilverBullet
1 Comment
 
LVL 19

Accepted Solution

by:
CoccoBill earned 250 total points
ID: 18857022
Are all the machines in the network are in the same segment? It looks like someone is trying to access your file shares. I wouldn't call it hacking, just that someone is using a service that your computer has open. You might want to stop sharing your folders if you have no need to do so, or at least protect the shares from outsiders with ACLs.

http://support.microsoft.com/kb/304040
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In today's information driven age, entrepreneurs have so many great tools and options at their disposal to help turn good ideas into a thriving business. With cloud-based online services, such as Amazon's Web Services (AWS) or Microsoft's Azure, bus…
Security measures require Windows be logged in using Standard User login (not Administrator).  Yet, sometimes an application has to be run “As Administrator” from a Standard User login.  This paper describes how to create a shortcut icon to launch a…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question