Link to home
Create AccountLog in
Windows OS

Windows OS

--

Questions

--

Followers

Top Experts

Avatar of Jason Johanknecht
Jason Johanknecht🇺🇸

Norton 360 v24 blocking IPv6 SMB:BruteForce Windows 11

Norton 360 started blocking one computer in the network “SMB:BruteForce detected by Intrusion Prevention”  Along with Remote Acces Protection added IP (IPv6 of the laptop that can no longer connect to mapped drive).

 

Norton 360 v24.10.9535

All computers (Windows 11) on network are running this version of software (4 PCs).

 

I have run full scans (Norton & RogueKiller) on the laptop.  Going to try Malwarebytes next.  Nothing detected as of yet.

Zero AI Policy

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.


Avatar of Arnav SharmaArnav Sharma🇦🇺

If nothing is found, then might be worth creating an exception. And to be on safe side, would be great to check with Norton support for confirmation - if your license allows free support cases. 


Avatar of bbaobbao🇦🇺

it means Norton 360 detected that the laptop was attempting multiple failed connections to an SMB share on the network, which is a sign of a possible brute force attack. as a protective measure, Norton’s IPS flagged this as suspicious and blocked the laptop’s IPv6 address to prevent further access.

accordingly, you need to ensure that the laptop is using the correct username and password when accessing the network resources. if there was a misconfiguration or a change in credentials, it might have caused the repeated failed login attempts.

if the laptop can be trusted after running full scan against viruses and malwares, you can manually remove the block from Norton’s Remote Access Protection settings and allow it to reconnect to the mapped drive.

ASKER CERTIFIED SOLUTION
Avatar of Jason JohanknechtJason Johanknecht🇺🇸

ASKER

Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.
Create Account

Avatar of bbaobbao🇦🇺

Any additional thoughts on what may have happened?

as indicated above, it could be caused by several failed login attempts due to incorrect username and password.

Reward 1Reward 2Reward 3Reward 4Reward 5Reward 6

EARN REWARDS FOR ASKING, ANSWERING, AND MORE.

Earn free swag for participating on the platform.

Windows OS

Windows OS

--

Questions

--

Followers

Top Experts

This topic area includes legacy versions of Windows prior to Windows 2000: Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions including Windows Mobile.