Jump to content

SMB.Attack.Bruteforce


Recommended Posts

Again  SMB.Attack.Bruteforce started in many systems 

 

What is the permanent  solution for this issue?

No one is  giving us permanent solution steps in many systems even after windows up to date  SMB.Attack.Bruteforce events repeated.

Please find attached excel file for the same

 

smb15.zip

Edited by Paneliya Mehulkumar
Link to comment
Share on other sites

  • Administrators

You can create your own rules with increased number of invalid SMB login attempts here if you accept it in your network and don't mind it from the security point of view:

image.png

 

 

Link to comment
Share on other sites

  • Most Valued Members
2 hours ago, Paneliya Mehulkumar said:

Again  SMB.Attack.Bruteforce started in many systems 

 

What is the permanent  solution for this issue?

No one is  giving us permanent solution steps in many systems even after windows up to date  SMB.Attack.Bruteforce events repeated.

Please find attached excel file for the same

 

smb15.zipUnavailable

If it's coming from LAN then it indicates that this PC is infected and trying to pass

If it's coming from WAN then it indicates that this PC is under attack from internet and the firewall that protects it isn't working properly (hardware firewall)

If you have to accept SMB from outside , it's better to whitelist for specific IPs to access and rest to be blocked.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...