]Working with Comcast, local PD, and google to try and trace back the attack on our system. The IP address that comcast assigned us is not the one showing up. I have spent hours, days on trying to gain enough knowledge to trace this back (I know who it is) and wondered if anyone can help. Are there any particular logs on our devices that could give me an IP or a MAC address. I have been monitoring my comcast event and firewall logs over the past few months and noticed a great deal of the IPs go to Cloud server companies - why? I apologize for my ignorance in this area, trying to learn more bur very flustered.