U

Visitor

 • 

4 Messages

Wednesday, February 16th, 2022 9:56 AM

Closed

Port mapping

In the admin tool for Xfinity gateway. In system files there is 65 pages of alerts where port mapping has been added to IP address that is my cell phone. I used wifiman app to trace my phone for open ports and there is currently 39 ports open and gave been constantly changing staying at 39.   What is going on with this. ? 

Problem Solver

 • 

1.5K Messages

3 years ago

I don't know what your wifiman app is showing you.  Perhaps apps phoning home, or active state connections.  Higher Port numbers > 40,000 usually if that's the case.  Not the same thing as running a service on a port, it's a connection.

There's also a ton of maulware in the app stores these days too.  One of the Many reasons of why the phone is the least secure device you own.  

Try a port scan from something else on your network.  nmap.org has a pretty standard linux tool for this.  Lots of options and tutorials for it online.  Available as a windows binary too.  It's free.  You'll catch port 62078 on an iPhone.  That's the sync port.  No ports should be open.  Open|filtered in the final nmap display 'could' possibly be OK and that's what you'll see with an iPhone.  You're going to want to know what other ports are though, and find out why they are there.

Try a few different scans.  Remember to keep your phone from going to the lock screen while scanning.  Maybe something like this (there are a lot of options):

nmap -vv -sN -p- [phone ip address]

nmap -vv -sA -p- [phone ip address]

For the gateway, yep.  Super suspicious.  If you didn't make the port mapping/port forwards, they shouldn't be there, Xfinity equipment or not.  I'd delete the Xfinity app on the phone if you are using that, shut the phone off, then use the reset button on the gateway to factory default it or do a 'factory reset'. 

When it comes back up, change the default gateway password, and wireless password and your Xfinity password using something OTHER than the phone. Leave that phone off until you do that. 

https://www.xfinity.com/support/articles/troubleshooting-your-cable-modem/

Doesn't mean your phone still won't be suspect, rooted or jailbroken still, and should be investigated,  but it will have a lot harder time connecting to your gateway settings or Xfinity account then.  Don't use your Xfinity password on it.

(edited)

Visitor

 • 

4 Messages

3 years ago

I was not alerted that I had a response for my query.   I have done a open port scan ony phone from other apps besides wifi man. They all are revielling that there is averagely 39 open ports on my phone and they are constantly changing from day to day.  To me this seems to coinside with the alerts I'm getting in the admin tool for the port mapping. My devices all have been acting strange for over six months. I need to know what I can do to find out exactly what is going on. Im pretty sure I know who would have hacked into my devices and it's just not my own but my father's as well.  How or where can I get forensic evidence of this it's gone too far .   I do appreciate your response and any help would be most appreciated.   Thank you 

 

Visitor

 • 

4 Messages

3 years ago

Just to add I have already factory reset my gateway a couple different times and changed the password.  I think they had already wormed holed in and resetting doesn't do any good at this point. All my devices have open ports that they shouldn't have. If I can  I'll attach screenshots of the ports.  They are mostly all very high numbered

Visitor

 • 

4 Messages

3 years ago

Still having this issue if someone would help thank you 

Official Employee

 • 

2K Messages

Thank you for reaching out to our community forum about your port forwarding questions, @user_6309eb! For security reasons we're unable to help with port forwarding and you can find all the information you need here. If you have one of our xFi modems, you can view potential network threats and devices that connect to your network through the xFi app

I am an Official Xfinity Employee.
Official Employees are from multiple teams within Xfinity: CARE, Product, Leadership.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Please, mark a reply as the Accepted Answer.tick
forum icon

New to the Community?

Start Here