Cisco RV340W router network attacks on local computers

[leobosack]

installed a new router Cisco RV340W dual wan, connected to 2 ISP, the Internet works in 2 local networks all separately, everything is OK, each local network your white ip, firmware is the latest 1.0.03.24, almost all ports are closed in fairville
on all computers in a local network kaspersky internet security notifies network attacks, rdp bruteforce from white ip addresses, but the port 3389 is closed on all wan ports, how is this possible?

[balaji.bandi]

each local network your white ip

Can you define what is white IP, you mean Public IP address ?

 network kaspersky internet security notifies network attacks, rdp bruteforce from white ip addresses

Do you have any PAT to allow external to internal ?

is this only complaint in 1 PC or all the devices in the Lan ?

what IP address in the LAN ?

[leobosack]

yes public ip

pat active only for certain local computers only on other tcp ports 49000

[leobosack]

I understood why there are network attacks, hackers scan pat ports and then just pick up a password on rdp. thanks