Upnp

I have had 5 phones hacked in 2 years still on going. I have changed my router/modem 4 times recently. I understand through my own research that the upnp is compromised. Im not sure how this happens, but I am sure it appears its coming from my router via upnp that I disabled but still the router is accessed. All devices are turned off except two phones and iPad all which or new or factory reset ! I have alerted security of comcast who seem to not be sure of what I am talking about. Does anyone know how to configure the router that has max security on it so this will quit happening. Are am I wrong that all the alerts on a account come right back to router... upnp that is disabled but still is being used. Why doesn't Comcast know about this issue? Thank you.