Repeated alerts titled as "Incoming connection blocked, SMB:BruteForce"

[bjm]

@Juha-PekkaMauriOlavi

In the recent weeks, I’ve been constantly recieving alerts from Norton saying that Norton has blocked an attempt to connect to my computer using File and Printer sharing. It says the following: threat name: SMB:BruteForce. Attacker IP changes over days, but usually attempts during the same day come from a similar IP.

It’s a 100 MB/s broadband connection. I don’t have a physical modem at all in my house, the ethernet cable comes straight from the wall socket. I just plug that in my PC and I have internet connection. I live in a condo apartment, all households within the same condo have internet from the same ISP.

Is this a risk? Would it bring extra safety from these sort of attacks if I place a router between the wall socket and my PC?

Hello @Juha-PekkaMauriOlavi

Lets ask @SoulAsylum

Are you US?
And you have internet access behind a password?
Sounds like you’d benefit from being behind your own router.
Maybe, ask neighbors &or condo management what’s doable.

Although, I don’t know whether adding a router will sort Norton…since, I’ve been reading users messages regarding SMB:BruteForce.

• https://community.norton.com/t/constant-smb-bruteforce-attacks/357409
• https://community.norton.com/t/incoming-connection-blocked-this-is-one-of-my-workstations/262799
• https://community.norton.com/t/smb-bruteforce/262669/5
• https://community.norton.com/t/norton-blocks-file-sharing-due-to-samba-smb-but-smb-is-disabled/240372
• https://community.norton.com/t/repeated-alerts-titled-as-incoming-connection-blocked-smb-bruteforce/358968
• https://community.norton.com/t/v24-update-killed-file-and-printer-sharing-across-my-network/245438
• https://community.norton.com/t/block-all-incoming-traffic-except-for-specific-mac-addresses-and-ip/237954

What is a brute force attack? [here]

fwiw ~ this process [here] works for me to reach:
Norton support via Social Support | Chat | Phone [here]