M

Tuesday, September 3rd, 2024 7:04 PM

Closed

Xfinity Sign In Activity Showing IP addresses and log in attempts that I did not make

I have been trying to talk with the xfinity security service and any customer service that will listen but none of them have been able to help or follow up. I am seeing log in attempts made from strange IP addresses on my xfinity email account. I have had my account compromised by the security reps and changed my password a dozen times. These log in attempts keep coming up from IP addresses that are not me. I did not initiate these log in attempts. I already have 2FA on my account which is why it doesn't make sense that someone else could be logging in as I never received any notification from the 2FA that someone even tried to log in. Could this be an error on xfinity? Even today after changing my password immediately I see these strange log ins. 

Official Employee

 • 

2.7K Messages

11 months ago

Hi there,

millea540. Im sorry to hear that you are seeing these unauthorized log in attempts. I understand how this can be concerning. Are you beung sent a text message or email with the 2FA during the same time these events happened? 

 

5 Messages

@XfinityAirelle​ no, these log in attempts did not trigger my 2fa for my phone or alternate email.

Official Employee

 • 

2.7K Messages

@millea540 Thanks for letting us know! I do believe these are failed log in attempts. However, you will definitely want to report something like this to our Customer Security Assurance (CSA) Team. They are available from 8:00am - 12:00am EST, 7 days a week, by calling 1-888-565-43298. You can also submit a report online by visiting https://internetsecurity.xfinity.com/help/report-abuse

I am an Official Xfinity Employee.
Official Employees are from multiple teams within Xfinity: CARE, Product, Leadership.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Please, mark a reply as the Accepted Answer.tick

5 Messages

I have submitted reports and spoken to multiple members of the CSA team. With promises of following up which never happened. No explanation was ever given, and why would this page be showing failed sign in attempts when they look no different than the successful sign in attempts that show up when I do actually log into my account? This will lead to a lot of confusion and potentially panic for some. This is something that should be escalated and addressed by whoever heads up the security assurance team....

Official Employee

 • 

1.9K Messages

I would be able to escalate that issue from here for you @millea540. Please send me a direct message with the full name and complete address for your account. 

To send a direct message [private message]:

   Click the "Direct Message" icon or  https://forums.xfinity.com/direct-messaging

   Click the "New message" (pencil and paper) icon

   The "To:" line prompts you to "Type the name of a person". Instead, type "Xfinity Support" there.

   - As you are typing a drop-down list appears. Select "Xfinity Support" from that list.

   - An "Xfinity Support" graphic replaces the "To:" line.

   Type your message in the text area near the bottom of the window

   Press Enter to send it

I am an Official Xfinity Employee.
Official Employees are from multiple teams within Xfinity: CARE, Product, Leadership.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Please, mark a reply as the Accepted Answer.tick

5 Messages

I have submitted the direct message. I look forward to hearing from you. 

Visitor

 • 

7 Messages

11 months ago

I've been seeing the same thing for several weeks now and apparently a lot of customers are seeing it, as well.   My sign-in activity log is averaging 10-15 new entries each day, most occurring in the middle of the night.

I called Xfinity's Customer Security Assurance (CSA) hot-line earlier today and was on the phone for an hour and a half...transferred to 5 or 6 other departments for the duration, all which appeared to be in a foreign country.

I asked whether technical support or software development or ? could please look into the possibility that the "logging level" for the sign-in activity had mistakenly and recently been set too high, hence customers are now seeing both successful log-ins and failed attempts .   

The last person in the CSA department said that some customers want to see the attempted log-in entries...and left it at that :(

I doubt my question whether the logging level might have been modified will ever get sent up the chain. 

forum icon

New to the Community?

Start Here