IP Reputation Attack

[JasonJames777]

I continually get IP Reputation Attack notices from XFi Advanced Security when I Port Forward my PS4. The security reports say that source IPs from different parts of the globe are trying to access my PS4. Is this normal?

[axlp]

I been getting the same messages for my xbox and ps4 eventhough the systems are completly shut off.

[RobertWy]

Is this ethernet or wifi or both?

[axlp]

Ethernet on both devices

[RobertWy]

---

@axlp wrote:
Ethernet on both devices

---

I can't find any information about "IP Reputation Attack" that helps.

I haven't seen this on my network.

Are you running either McAfee or Norton or some other third-party virus program?

[axlp]

Yes on my PC. But I have the feeling theses warning are cause when you played multiplayer gsmes and servers from other areas are trying to communicate with you.

[R3DN3CK904]

Have the same issue plus, unauthorized access attempts on Xbox one. Do we need to be concerned or is there a way to fix this issue.world of tanks is the main game I get the warning on.

[xedious]

Just got upgraded to something at comcast and now I've gotten 80 something attacks on my Xbox one. Probably nothing but it is very annoying.

[Benzionik123 · Accepted solution]

JasonJames777

IP Reputation means that a bot or an attacker is scanning your Xfinity router ports and finds one or more of your ports is open. The scan source IP is done from a known bad reputation known IP. The Advanced Security feature manages to block it and notify you of this action.  This can occur on any connected device (ethernet / wireless LAN) which was enabled with port forwarding or configured as DMZ.

I hope that clarifies it. 

[Benzionik123]

axlp ,

IP Reputation means that a bot or an attacker is scanning your Xfinity router ports and finds one or more of your ports is open. The scan source IP is done from a known bad reputation known IP. The Advanced Security feature manages to block it and notify you of this action.  This can occur on any connected device (ethernet / wireless LAN) which was enabled with port forwarding or configured as DMZ.

The fact that your devices offline:

Does not make a difference as the port forwarding rule still exist, which is locking the IP address, and the bot/hacker can still try to peek into it.

I hope that clarifies it. 

[xedious]

It would be nice to turn the warnings off. I was getting them even after I turned port forwarding off. Isn't it near impossible to hack xbox anyway?

[Benzionik123]

xedious,

that is a good idea.  We will take this idea with our product team and see if we can add it to one of our future releases. 

[xcyKopatx]

Agreed. An option to ignore a certain notification/warning category for a certain device would be great. That the user could toggle back on via XFi devices in that device.