U

Wednesday, March 13th, 2024 5:03 PM

Closed

help understanding Xfinity router event logs

there are several entries in my router event log that I would like to understand.   several entries such as "[Wifi 8419]: KeyPassphrase Changed" and I didn't change any password or anything at the times listed for these events.    We did change the original router password on 3/11 [18:24:07] but never again.    AND there is one entry for KeyPassphrase Changed at 3/12/2024 at 2:21:36 (2am?) while we are sleeping - not sure how that can happen?   included below table from event logs for someone  to help us analyze and explain what is really means - thank you!   

[Wifi][8419]: WiFi radio radio3 is set to UP 2024/3/12 07:21:23
[Wifi][8419]: WiFi radio radio3 is set to UP 2024/3/12 07:21:21
[Wifi][8419]: WiFi radio radio1 is set to UP 2024/3/12 07:21:15
[Wifi][8419]: KeyPassphrase Changed 2024/3/12 07:21:11
[Wifi][8419]: WiFi radio radio2 is set to UP 2024/3/12 07:21:11
[Wifi][8419]: WiFi radio radio1 is set to UP 2024/3/12 07:21:09
[Wifi][8485]: WiFi radio radio3 is set to UP 2024/3/12 02:21:45
[Wifi][8485]: WiFi radio radio3 is set to UP 2024/3/12 02:21:43
[Wifi][8485]: WiFi radio radio1 is set to UP 2024/3/12 02:21:39
[Wifi][8485]: KeyPassphrase Changed 2024/3/12 02:21:36
[Wifi][8485]: WiFi radio radio2 is set to UP 2024/3/12 02:21:36
[Wifi][8485]: WiFi radio radio1 is set to UP 2024/3/12 02:21:34

Official Employee

 • 

2K Messages

6 months ago

@user_dsk_9876 Hi there! The password change was likely logged during our overnight updates which happen around 2am. 😊

5 Messages

but there are multiple entries like this [not just 2am]

Official Employee

 • 

893 Messages

6 months ago

@user_dsk_9876 have you happened to check the devices connected to your network, to see if you have noticed any unknown devices: https://www.xfinity.com/support/articles/manage-wifi-devices-my-account

 

Here's another great article that shows how to personalize your home network work through the Xfinity App: https://www.xfinity.com/support/articles/personalize-customize-hnetwork-xfi. I use this to name all my devices, that way something unfamiliar sticks out right away. 

 

 

1 Message

5 months ago

I just discovered the exact same log except I do not have a KeyPassphrase changed and mine is dated 2024/4/12 and 2024/4/8.

I am wondering if it has anything to do with UPnP. I discovered last  month that an unknown device (looked like an apple tv device)

was connecting to my internet, even when I paused it. I soon discovered that my UPnP was enabled; which allows any devise like an

xbox, roku, apple tv to automatically connect to your internet if it wants to. Does not have to be in your home. i quickly disabled the UPnP.

And until these event logs have no issues. However, I have notice my phone, computer and tv lagging. so, I checked the logs and firwall

and sure enough discover the same event logs you did. and my firewall has had wannattacks and several unknown MAC addresses try to

break through the firewall. Calls to Xfinity support have been worthless and so has the Geek Squad.

 I would love to know what's up with these event logs.

Official Employee

 • 

1.1K Messages

 

Hey user_aars49, thanks for reaching out to Xfinity Support on our forums and letting us know you're having the same issue. Since you are noticing firewall attacks, have you talked to our Customer Security Assurance team for help?

 

I am an Official Xfinity Employee.
Official Employees are from multiple teams within Xfinity: CARE, Product, Leadership.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Please, mark a reply as the Accepted Answer.tick

Visitor

 • 

15 Messages

5 months ago

Had trouble replying to this post on Safari in case others have the same issue, text box shows up on Chrome. I have noticed for the past few weeks these same logs, WANATTACK and WiFi radios constantly being set to UP over and over again. My logs also show a lot of Port mapping entries and a huge long number of bytes sent and received repeating every second of each minute. I'm using an XB8 gateway if this helps.

5 Messages

idk whats going on but this is REALLY bad....


Expert

 • 

106K Messages

3 months ago

@user_pxruwx 

Please create a new topic of your own here on this board detailing your issue. Thanks. The original poster has not returned. 4-month-old dead thread is now being closed.


For future reference, it is better to submit your own post as it creates a ticket to get help, and posting on someone else's older thread can delay getting help.

forum icon

New to the Community?

Start Here