Repeated alerts titled as "Incoming connection blocked, SMB:BruteForce"

Hello,

In the recent weeks, I’ve been constantly recieving alerts from Norton saying that Norton has blocked an attempt to connect to my computer using File and Printer sharing. It says the following: threat name: SMB:BruteForce. Attacker IP changes over days, but usually attempts during the same day come from a similiar IP.

I don’t have a router, my connection comes straight from wall socket via an ethernet cable, and this computer does not have wifi access at all. I live alone and there’s no other users in my network. This is a private home network, so there should be no other users than myself.

Do you have any idea what is this about and how to stop these attempted attacks? I already disabled file and printer sharing from control panel but the same problem keeps persisting, the connection attempts keep coming several times a day whenever I’m connected to Internet.

Thank you in advance.

do you use a modem?
how does your ISP provide internet?

Hey.

It’s a 100 MB/s broadband connection. I don’t have a physical modem at all in my house, the ethernet cable comes straight from the wall socket. I just plug that in my PC and I have internet connection. I live in a condo apartment, all households within the same condo have internet from the same ISP. The apartment organization has a deal with the ISP to provide internet access to the whole building. I don’t know how it technically works, possibly the apartment organization has a common modem somewhere. Is this a risk? Would it bring extra safety from these sort of attacks if I place a router between the wall socket and my PC?

Hello @Juha-PekkaMauriOlavi

Lets ask @SoulAsylum

Are you US?
And you have internet access behind a password?
Sounds like you’d benefit from being behind your own router.
Maybe, ask neighbors &or condo management what’s doable.

Although, I don’t know whether adding a router will sort Norton…since, I’ve been reading users messages regarding SMB:BruteForce.

What is a brute force attack? [here]

fwiw ~ this process [here] works for me to reach:
Norton support via Social Support | Chat | Phone [here]

Hello @Juha-PekkaMauriOlavi
Please post progress

Hello, and thanks for the help so far.

I live in Finland. My connection is not password protected, but my computer is. I might consider getting a password protected router and see if it helps. I tried connecting to internet by sharing a connection to my computer from my mobile phone, and there was no attacks. So apparently the attacker is only targeting the broadband connection.

sure was thinking you’d register for internet service and gain access behind a password.
so, you can only gain access when wired?
and if you want your machine in another room… away from the wall outlet?
are there outlets in other rooms?

wired? since your machine does not WiFi access

Can you speak to/ask the ISP?

Yes, this is regular desktop PC (no laptop) that’s located in the same room with the wall outlet, not necessary to move it around. I have a long ethernet cable that I also use for my Playstation in another room.

I used my mobile phone with an USB cable and shared the internet connection that way.

I will contact my ISP to see if they are aware of such problems in their networks.