SMB:BruteForce Detected by Intrusion Prevention

[tmadoc1965]

Note: Please do not post Personally Identifiable Information like email address, personal phone number, physical home address, product key etc.

Issue abstract: Lately, Norton almost daily reports SMB:BruteForce detected by Intrusion Prevention. Right before that is Remote Access Protection added IP [IPv6_address] to the Blocked list. I have no way of determining where this is coming from. We do use file sharing on my PC for our home network. Since the addresses are all IPv6 I just disabled IPv6 on my NIC as I’m not sure that I need it.

Detailed description: See above

Product & version number: Norton 360 24.12.9725

OS details: Windows 11 [recently upgraded from 10]

What is the error message you are seeing? Described above

If you have any supporting screenshots, please add them:

[bjm]

I’ve been reading users messages regarding SMB:BruteForce here

• Constant SMB:BruteForce attacks
• Incoming connection blocked. This is one of my workstations
• SMB:BruteForce
• Norton blocks file sharing due to samba smb but smb is disabled
• Repeated alerts titled as "Incoming connection blocked, SMB:BruteForce"
• V24 update killed File and Printer Sharing across my network

What is a brute force attack? [here]

fwiw ~ this process [here] works for me to reach:
Norton support via Social Support | Chat | Phone [here]

[tmadoc1965]

Thank you @bjm I saw some of these others as well. Wondering if it’s related to Win11 upgrade, which I just did last week before this started. Maybe some change in how Norton works. I may try the support link you shared. Thanks for the info!