netstat , netbios-ssn

#1 XtremeMaC

MSFN SuperB

Group: Members
Posts: 5,070
Joined: 13-October 03

Posted 22 March 2004 - 12:18 PM

Hi there
I'm wondering what this thing means?
netbios-ssn
there is this guy keeps connecting to my comp
I found all about him, he lives 1 floor above 4 rooms down from me.
now he's annoying me.
i don't really know what netbios-ssn is, is he port scanning or something?
or is he trying to send me some packets? or what

should i be concerned, i haven't installed firewall, using xp sp2 firewall now..

Thanks

ip: 66.71.50.145

he's connecting me at port 3803...
[b]edit: picture removed

This post has been edited by XtremeMaC: 08 April 2004 - 02:22 AM

#2 XtremeMaC

MSFN SuperB

Group: Members
Posts: 5,070
Joined: 13-October 03

Posted 22 March 2004 - 02:53 PM

no one know what it is?
its still continuing
what the heck is it? pls?
what the heck is that person trying to do??

#3 spud

Where's the any key??

Group: Members
Posts: 59
Joined: 03-March 04

Posted 23 March 2004 - 10:48 AM

If i was you, install a firewall till you find out what that is.

I had a quick search on the net but couldn't find anything

#4 TomcaT

Member

Group: Members
Posts: 208
Joined: 30-December 03

Posted 23 March 2004 - 03:05 PM

Don't know if this helps you??? however read it and then draw your own conclusions, then GO upstairs..... kick his door in, kick his head in and rip his cpu out and jump up and down on it............

Link

#5 XtremeMaC

MSFN SuperB

Group: Members
Posts: 5,070
Joined: 13-October 03

Posted 23 March 2004 - 03:28 PM

i already paid him a visit
his door was locked. since then i've been waiting for an answer..

though it doesn't answer directly, it helped thanks!

#6 Aaron

The MSFN Banana

Group: Patrons
Posts: 5,767
Joined: 17-August 01

Posted 23 March 2004 - 04:38 PM

Use a firewall, that's what they're for.

#7 XtremeMaC

MSFN SuperB

Group: Members
Posts: 5,070
Joined: 13-October 03

Posted 23 March 2004 - 04:51 PM

aaron tell it to ms I am using sp2 firewall :rolleyes:

i guess i should MOVE on from it

long live zonealarm

its good that ms tries to put everthing together but u know....
do it properly or don't do it(well i know i just said that but they're in learning phase and they're using us as genua pigs

)

#8 chloroform

Newbie

Group: Members
Posts: 14
Joined: 23-March 04

Posted 24 March 2004 - 12:20 AM

Here's what I found out about netbios-ssn ....

Seems to be a process used by SAMBA (seems to be a Linux distribution) for Windows Networking compatibiity.

Quick explanation of netbios-ssn ...
NetBIOS explanation
and here:
More info on NetBIOS

Seems it's a vulnerability in Windows based systems. More info here:
Vulnerability information

The following link is an article on how to restrict anonymous access. It's for Windows 2000, but I'm pretty sure it'll work on XP.
Restricting anonymous connections

Hope that helps

#9 XtremeMaC

MSFN SuperB

Group: Members
Posts: 5,070
Joined: 13-October 03

Posted 24 March 2004 - 12:38 AM

thanks really helpfull!!

hmm that's right we use samba for connecting to networked drives. (my web server)
but what the heck is he doing in mine?
i've no direct links to my site and my main site is blank.
hmm does he have access to my networked drives? $*$#%

well anyways thanks everyone for their support. i don't see him anymore. if i see him i know where to knock :rolleyes:

#10 chloroform

Newbie

Group: Members
Posts: 14
Joined: 23-March 04

Posted 24 March 2004 - 12:45 AM

I'm gussing he established an anonymous connection to your computer. I wouldn't really know though, since I'm not him, and I'm not all that great when it comes to all this vulnerability stuff

#11 newdles

now what?

Group: Members
Posts: 135
Joined: 22-March 04

Posted 24 March 2004 - 12:53 AM

What operating system do you run? NetBIOS isn't just for Linux networking to Windows. It's actually its own language. It stands for Network Basic Input/Output System. All it does is allow applications on different computers to communicate with each other. Here is a link for you to learn a bit about it if interested - http://huizen.dds.nl.../samba/smb.html

Here, go have fun

http://members.rogers.com/viperzone/HelpFi...rk/netstat.html

newdles
http://www.webzila.com

#12 XtremeMaC

MSFN SuperB

Group: Members
Posts: 5,070
Joined: 13-October 03

Posted 24 March 2004 - 01:15 AM

i've xp using samba.
i just looked again its still connected this time on port 1059
i'll definitely pay him a visit he seems to be an annoying person

that's him. tomorrow to be killed :rolleyes:

http://www.personal....ers/j/d/jdk289/

#13 newdles

now what?

Group: Members
Posts: 135
Joined: 22-March 04

Posted 24 March 2004 - 01:20 AM

Quote

I’ve been playing way too much “Enter The Matrix” and not doing enough online.

This guy has the wrong idea. He's been doing too much of everything he's doing and needs to get out and enjoy life. There is so much more than just behind a computer monitor all day long. I love my computer(s) and enjoy using them as well as configuring and tweaking them here and there when needed. However, I live my own life and enjoy doing other things. This guy has nothing but a computer it seems. Shame.

newdles
http://www.webzila.com

#14 TomcaT

Member

Group: Members
Posts: 208
Joined: 30-December 03

Posted 28 March 2004 - 02:12 PM

Well???? Is he dead? did he explain himself b4 U wiped him out?? In suspense!!!

#15 XtremeMaC

MSFN SuperB

Group: Members
Posts: 5,070
Joined: 13-October 03

Posted 28 March 2004 - 03:35 PM

lol
whenever i went to his room, it was locked and no one replied.
instead i went to resident computing thing and wrote him up hahah
but u know they always work slooowly and they said he might have a virus or something. but i don't see any virus that is set to attack my computer :#!$ anyways firewall does its job. i've blocked all incoming and outgoing stuff from his ip.

MSFN Forum: netstat , netbios-ssn - MSFN Forum