Visitor
•
4 Messages
Port mapping
In the admin tool for Xfinity gateway. In system files there is 65 pages of alerts where port mapping has been added to IP address that is my cell phone. I used wifiman app to trace my phone for open ports and there is currently 39 ports open and gave been constantly changing staying at 39. What is going on with this. ?
flatlander3
Problem Solver
•
1.5K Messages
3 years ago
I don't know what your wifiman app is showing you. Perhaps apps phoning home, or active state connections. Higher Port numbers > 40,000 usually if that's the case. Not the same thing as running a service on a port, it's a connection.
There's also a ton of maulware in the app stores these days too. One of the Many reasons of why the phone is the least secure device you own.
Try a port scan from something else on your network. nmap.org has a pretty standard linux tool for this. Lots of options and tutorials for it online. Available as a windows binary too. It's free. You'll catch port 62078 on an iPhone. That's the sync port. No ports should be open. Open|filtered in the final nmap display 'could' possibly be OK and that's what you'll see with an iPhone. You're going to want to know what other ports are though, and find out why they are there.
Try a few different scans. Remember to keep your phone from going to the lock screen while scanning. Maybe something like this (there are a lot of options):
nmap -vv -sN -p- [phone ip address]
nmap -vv -sA -p- [phone ip address]
For the gateway, yep. Super suspicious. If you didn't make the port mapping/port forwards, they shouldn't be there, Xfinity equipment or not. I'd delete the Xfinity app on the phone if you are using that, shut the phone off, then use the reset button on the gateway to factory default it or do a 'factory reset'.
When it comes back up, change the default gateway password, and wireless password and your Xfinity password using something OTHER than the phone. Leave that phone off until you do that.
https://www.xfinity.com/support/articles/troubleshooting-your-cable-modem/
Doesn't mean your phone still won't be suspect, rooted or jailbroken still, and should be investigated, but it will have a lot harder time connecting to your gateway settings or Xfinity account then. Don't use your Xfinity password on it.
(edited)
0
0
user_6309eb
Visitor
•
4 Messages
3 years ago
I was not alerted that I had a response for my query. I have done a open port scan ony phone from other apps besides wifi man. They all are revielling that there is averagely 39 open ports on my phone and they are constantly changing from day to day. To me this seems to coinside with the alerts I'm getting in the admin tool for the port mapping. My devices all have been acting strange for over six months. I need to know what I can do to find out exactly what is going on. Im pretty sure I know who would have hacked into my devices and it's just not my own but my father's as well. How or where can I get forensic evidence of this it's gone too far . I do appreciate your response and any help would be most appreciated. Thank you
0
0
user_6309eb
Visitor
•
4 Messages
3 years ago
Just to add I have already factory reset my gateway a couple different times and changed the password. I think they had already wormed holed in and resetting doesn't do any good at this point. All my devices have open ports that they shouldn't have. If I can I'll attach screenshots of the ports. They are mostly all very high numbered
0
0
user_6309eb
Visitor
•
4 Messages
3 years ago
Still having this issue if someone would help thank you
1
0