Community Forum

IP reputation attacks after Advanced Security was rolled out

Frequent Visitor

IP reputation attacks after Advanced Security was rolled out

Last week I received the automatic upgrade to Advanced Security that was rolled out to many customers. Since then I have been getting several XFi notifications about an IP reputation attack (similar to another customer who recently posted here) coming from Russia and Germany via our Dish Network hopper. They were all blocked, but I’d like to know how to prevent it. I called Dish and they were unable to help. I called Xfinity tech support and was given a couple of options, none of which resolved it. Here is what I tried:

1. Restarted the Dish receiver AND my Xfinity Gateway modem.
2. Changed my network SSID and password.
3. Checked for open ports through XFi. There were none on any of my devices.

I’m also wondering if these attempted attacks have been going on for a while, and only now are we becoming aware of them since getting Advanced Security. It’s nice to know AS is blocking the intrusions but also unnerving to get daily notifications about them. Saying “Action required! Danger! Threats!...”

I know I’m not the only one having these issues. Any suggestions would be greatly appreciated. Thanks!
Frequent Visitor

Re: IP reputation attacks after Advanced Security was rolled out

Also wanted to point out that I paused my device (hopper) that is connected to my home WiFi. That didn’t help. I still get notifications about the attempted attacks.
Official Employee

Re: IP reputation attacks after Advanced Security was rolled out

jwmissionbay -- I'm happy to take a look at your account to review and can let you know when I have additional information.  Thank you outlining the steps you have already taken.  You mentioned pausing the device, but still receiving notifications -- do you know what time you had paused the device?  


I am an Official Comcast Employee.
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Frequent Visitor

Re: IP reputation attacks after Advanced Security was rolled out

I paused the device on the evening of Jan 13, and it stayed paused, however we still got a notification about an attempted threat on the afternoon of the 14th. Advanced Security blocked it.
Frequent Visitor

Re: IP reputation attacks after Advanced Security was rolled out

The attacks are still happening from all over Europe. The only way to stop them is by pausing my Dish Hopper on our WiFi network.. But I don’t want to do that because we watch Netflix through it and Dish needs to be able to push and retrieve updates. Another customer on this forum is having similar issues, and like him, I’m wondering how to stop these attacks and if you have any new info to share from your engineers. Also I assume this has been happening a while and we’re just now learning about it since Advanced Security was rolled out? Please advise...thank you.
New Poster

Re: IP reputation attacks after Advanced Security was rolled out

Hello! We are experiencing the same thing with multiple threats over the past 48 hours. Part of the recommended process to “fix” the problem is to close open ports on my Dish device. I can’t find where I would do this or know why there are multiple ports open. If you are able to explain what is happening and how I can fix it so we can continue to use Dish and WiFi together, I would be appreciative.
Frequent Visitor

Re: IP reputation attacks after Advanced Security was rolled out

Hi KJMoss, unfortunately we weren’t able to figure out the port issue on our Hopper. Dish customer service said there weren’t any open ports on our system. For now, we just have to disable WiFi on the Hopper when we don’t need it (to avoid the attacks and notifications) then temporarily enable it when we want to watch Netflix. It doesn’t look like there is much we can do at the moment.
New Poster

Re: IP reputation attacks after Advanced Security was rolled out

Well, poo. Thanks for your help. I guess we will just turn everything off before bed each night since most of our attacks seem to be happening between 1am and 4am.