Visitor

 • 

4 Messages

Monday, April 18th, 2022 10:01 PM

Closed

Getting attacked by this mac computer --> look at mac address?

FW.IPv6 INPUT drop , 60630 Attempts, 2022/4/18 16:56:06 Firewall Blocked
FW.IPv6 FORWARD drop , 2158 Attempts, 2022/4/18 16:56:06 Firewall Blocked
FW.IPv6 INPUT drop , 38947 Attempts, 2022/4/17 18:58:00 Firewall Blocked
FW.IPv6 FORWARD drop , 2312 Attempts, 2022/4/17 18:58:00 Firewall Blocked
FW.WANATTACK DROP , 2 Attempts, 2022/4/17 15:58:00 Firewall Blocked
FW.IPv6 INPUT drop , 35605 Attempts, 2022/4/16 18:58:00 Firewall Blocked
FW.IPv6 FORWARD drop , 1876 Attempts, 2022/4/16 18:58:00 Firewall Blocked
FW.IPv6 INPUT drop , 71864 Attempts, 2022/4/15 18:58:00 Firewall Blocked
FW.IPv6 FORWARD drop , 2029 Attempts, 2022/4/15 18:58:00 Firewall Blocked
Device MAC:E8:61:7E:52:87:E1 , 613 Attempts, 2022/4/15 16:58:01 Device Blocked
Device MAC:14:C9:13:D6:8B:4C , 15 Attempts, 2022/4/15 16:58:01 Device Blocked
FW.IPv6 INPUT drop , 32179 Attempts, 2022/4/14 18:58:00 Firewall Blocked
FW.IPv6 FORWARD drop , 1649 Attempts, 2022/4/14 18:58:00 Firewall Blocked
FW.IPv6 FORWARD drop , 2690 Attempts, 2022/4/13 18:58:00 Firewall Blocked
FW.IPv6 INPUT drop , 114703 Attempts, 2022/4/13 18:58:00 Firewall Blocked
FW.IPv6 INPUT drop , 61528 Attempts, 2022/4/12 18:58:00 Firewall Blocked
FW.IPv6 FORWARD drop , 1681 Attempts, 2022/4/12 18:58:00 Firewall Blocked
FW.IPv6 FORWARD drop , 1643 Attempts, 2022/4/11 18:58:00 Firewall Blocked
FW.IPv6 INPUT drop , 155088 Attempts, 2022/4/11 18:58:00 Firewall Blocked
FW.WANATTACK DROP , 32 Attempts, 2022/4/11 08:58:00

This conversation is no longer open for comments or replies and is no longer visible to community members.

Oldest First
Selected Oldest First

Visitor

 • 

4 Messages

4 years ago

what does this mean? My XFINITY internet was hacked around April 4th. Xfinity is yet to respond. I have contacted Xfinity customer service via app, called customer service every day, and even use Xfinity twitter customer agent. It's been more 2-3 weeks and I have yet to receive any help. I'm looking at my xfi gw logs and I'm seeing this. 

gd.info IGD_pii_add_portmapping_entry: desc 98:9308 to 9308 (UDP), ext_port 9308, int_port 9308 2022/4/12 09:46:41 Notice
 Add Port mapping :9308 to 98:9308 2022/4/12 09:46:40 Notice
IGD[17009]: igd.info IGD_pii_add_portmapping_entry: desc 98:9308 to 9308 (UDP), ext_port 9308, int_port 9308 2022/4/12 09:46:40 Notice
[IGD][13905]: Add Port mapping :3659 to .98:3659 2022/4/11 14:33:30 Notice
IGD[13905]: igd.info IGD_pii_add_portmapping_entry: desc EA Tunnel, ext_port 3659, int_port 3659 2022/4/11 14:33:30 Notice
[IGD][13905]: Add Port mapping :9308 to 98:9308 2022/4/11 14:32:44 Notice
[IGD][13905]: Add Port mapping :9308 to 98:9308
Note: This comment was created from a merged conversation originally titled Port mapping

Visitor

 • 

4 Messages

@user_b08079​ you dont know how to read? 

Official Employee

 • 

553 Messages

4 years ago

Hello @user_b08079, thanks for reaching out for help on our forums! We have a dedicated support team that specializes in internet security concerns that can be reached at 1-888-565-4329. Hope that helps! 

Gold Problem Solver

 • 

27.4K Messages

4 years ago

Getting attacked by this mac computer

Note that in this case, "MAC" does not refer to a Macintosh computer, it's an acronym for "Media Access Control", the hardware address of all sorts of devices used in networking. See https://en.wikipedia.org/wiki/MAC_address.

The MAC addresses you posted belong to companies that make networking components used in many devices, and it is generally not possible to identify the particular device unless it is in your possession. The remaining log entries appear to represent routine firewall and router activity that have little meaning.

Problem Solver

 • 

736 Messages

4 years ago

Of the two MAC addresses shown in your first list, one is a Liteon device (probably an HP computer/laptop0, and the other is an LG device, probably a TV or perhaps a cell phone. 

forum icon

New to the Community?

Start Here