Hi guys:) Have issue with SMB on Windows 7 Ultimate (x64). Someone trying to establish connection to TCP 445 port from diffrent ips. My firewall (nis) is blocking but want to stop the service. The logs are:
"Default Block Microsoft Windows 2000 SMB\" blocked (1.175.35.142, Port (445) Inbound TCP connection
Default Block Microsoft Windows 2000 SMB\" blocked (1.175.35.142, Port (445) Inbound TCP connection
Default Block Microsoft Windows 2000 SMB\" blocked (128.73.148.155, Port (445) Inbound TCP connection
Default Block Microsoft Windows 2000 SMB\" blocked (123.216.223.155, Port (445) Inbound TCP connection - Process name is System or Svchost.exe - diffrent every time
I have tons of these , with different ips. Every two tries the ip is change. I scanned my pc with 2 antivirus software no infection. I stop in services: service - Server, SSPD Discovery, Net BIOS Helper,WMP Sharing, the logs keep coming. Also uninstall printer and filesharing in local area connection properties, also disable Net BIOS over TCP/IP on all my network adapters. Using some crappy router from my isp that i have no admin rights to it (dhcp server). I also blocked TCP & UDP 445 ports in windows firewall but the logs keep coming. I aslo updated my Ethernet card drivers. Now the service process "Server" is turned on/ NetBIOS over TCP/IP is disabled but logs are keep coming. I don't think that it is good idea to stop "Server" because "Computer Browser: also will be stop. Just want to stop these logs. When i type netstat -an the port 445 is not in the list but the logs keep coming.
Please can you tell me what i must exact turn off to stop receiving this logs.
"Default Block Microsoft Windows 2000 SMB\" blocked (1.175.35.142, Port (445) Inbound TCP connection
Default Block Microsoft Windows 2000 SMB\" blocked (1.175.35.142, Port (445) Inbound TCP connection
Default Block Microsoft Windows 2000 SMB\" blocked (128.73.148.155, Port (445) Inbound TCP connection
Default Block Microsoft Windows 2000 SMB\" blocked (123.216.223.155, Port (445) Inbound TCP connection - Process name is System or Svchost.exe - diffrent every time
I have tons of these , with different ips. Every two tries the ip is change. I scanned my pc with 2 antivirus software no infection. I stop in services: service - Server, SSPD Discovery, Net BIOS Helper,WMP Sharing, the logs keep coming. Also uninstall printer and filesharing in local area connection properties, also disable Net BIOS over TCP/IP on all my network adapters. Using some crappy router from my isp that i have no admin rights to it (dhcp server). I also blocked TCP & UDP 445 ports in windows firewall but the logs keep coming. I aslo updated my Ethernet card drivers. Now the service process "Server" is turned on/ NetBIOS over TCP/IP is disabled but logs are keep coming. I don't think that it is good idea to stop "Server" because "Computer Browser: also will be stop. Just want to stop these logs. When i type netstat -an the port 445 is not in the list but the logs keep coming.
Please can you tell me what i must exact turn off to stop receiving this logs.