Author Topic: Network connection attempts from local machine RAS alert?  (Read 406 times)

0 Members and 1 Guest are viewing this topic.

Offline rmn

  • Newbie
  • *
  • Posts: 2
Network connection attempts from local machine RAS alert?
« on: February 20, 2021, 04:44:50 AM »
I have been getting hundreds of alerts notifying me of SMB:BruteForce Remote Access attempts.

It has been coming from another machine of mine however the attempt is listed as coming from the local link ipv6 address (fe80::...).

Attempting to access file sharing from said computer causes the alert, and the shared folders do not show up in Network. (but it has also been doing it autonomically for days with no input from the user)

When I disabled the RAS, and attempted to connect to the shared folders again, it prompted with the credential popup as it should.

Now when I turned the RAS back on, it shows one of the other computer's temporary ipv6 addresses (2601:...) instead and shows it as "allowed".

Remote access is disabled on both machines, so why is this triggering the RAS?

And how do I fix this so it will not trigger the alert? I do not see a way to allow or block connection attempts from a particular IP or range, which makes the whole thing pretty pointless afaict.

Thank you!
« Last Edit: February 20, 2021, 04:47:26 AM by rmn »

Offline Asyn

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 73621
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Win8.1 [x64] - Avast PremSec 22.1.6903.IBC [UI.690] - EEK - Firefox ESR 91.5.1 [NS/uBO/PB] - TB 91.5.1
Avast-Tools: Secure Browser 97.1 - Cleanup 21.4 - SecureLine 5.15 - Driver Updater 21.4 - CCleaner 5.89
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0