[GH-ISSUE #572] Random Agents Appearing #2309

Closed
opened 2026-03-14 03:31:32 +03:00 by kerem · 3 comments
Owner

Originally created by @factulas on GitHub (Jun 11, 2021).
Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/572

Server Info (please complete the following information):

  • OS: [e.g. Ubuntu 20.04, Debian 10]Ubuntu 20.04.2 LTS
  • Browser: [e.g. chrome, safari] Chrome 91.0.4472.101 64-bit
  • RMM Version (as shown in top left of web UI): 0.6.14

Installation Method:

  • Standard
  • Docker

Agent Info (please complete the following information):

  • Agent version (as shown in the 'Summary' tab of the agent from web UI):1.5.7
  • Agent OS: [e.g. Win 10 v2004, Server 2012 R2] Multiple

Describe the bug
Having ghost connections to agents that I never added.

To Reproduce
Agents randomly appear
Expected behavior

Screenshots
picture

Additional context
Add any other context about the problem here.

Originally created by @factulas on GitHub (Jun 11, 2021). Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/572 **Server Info (please complete the following information):** - OS: [e.g. Ubuntu 20.04, Debian 10]Ubuntu 20.04.2 LTS - Browser: [e.g. chrome, safari] Chrome 91.0.4472.101 64-bit - RMM Version (as shown in top left of web UI): 0.6.14 **Installation Method:** - [X] Standard - [ ] Docker **Agent Info (please complete the following information):** - Agent version (as shown in the 'Summary' tab of the agent from web UI):1.5.7 - Agent OS: [e.g. Win 10 v2004, Server 2012 R2] Multiple **Describe the bug** Having ghost connections to agents that I never added. **To Reproduce** Agents randomly appear **Expected behavior** **Screenshots** ![picture](https://user-images.githubusercontent.com/9405782/121733160-23059780-cac1-11eb-8fbc-702c3711b2db.png) **Additional context** Add any other context about the problem here.
kerem closed this issue 2026-03-14 03:31:38 +03:00
Author
Owner

@dinger1986 commented on GitHub (Jun 11, 2021):

This is a fairly common issue which is attributed to AV doing sandboxed installs.

Plenty about it in the discord channels and other opened and now closed issues.

<!-- gh-comment-id:859766557 --> @dinger1986 commented on GitHub (Jun 11, 2021): This is a fairly common issue which is attributed to AV doing sandboxed installs. Plenty about it in the discord channels and other opened and now closed issues.
Author
Owner

@factulas commented on GitHub (Jun 11, 2021):

Good to know, thanks. I looked an couldn't get answers. Makes perfect sense.

<!-- gh-comment-id:859769509 --> @factulas commented on GitHub (Jun 11, 2021): Good to know, thanks. I looked an couldn't get answers. Makes perfect sense.
Author
Owner

@silversword411 commented on GitHub (Jun 11, 2021):

I have built a test TRMM to put some honeypot agent installers around your network. Contact me if you'd like to have some so we can monitor

<!-- gh-comment-id:859783269 --> @silversword411 commented on GitHub (Jun 11, 2021): I have built a test TRMM to put some honeypot agent installers around your network. Contact me if you'd like to have some so we can monitor
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/tacticalrmm#2309
No description provided.