So an Onkyo receiver was brute forcing a server at a client

This is new. Yesterday we detected a brute force attempt coming from an interior device on the network. Turns out the device is a WiFi/bluetooth enabled Onkyo NR-TX737 receiver.

I’m not normally at a loss when it comes to an incident like this, but I don’t know what to make of this. For the time being we cut the device off the network remotely which stopped everything. We’ve found no other IOCs anywhere on the network.

But I’m not sure …

bluetooth brute brute forcing client coming cybersecurity device don incident loss network server wifi