Security & Privacy

Title: Unauthorized Access Attempts from IPs Linked to FreeBit Co., Ltd. – Need Apple Security Advice

Body:

Hi everyone,

I’m posting here because my reports to FreeBit Co., Ltd. (a Japanese ISP) were disregarded and redirected as a job application rejection (no joke). I’m not applying for a position — I’m reporting a serious network security incident.

Here’s the situation:

On May 21st, 2025 (JST), I detected multiple unauthorized access attempts targeting my private Apple-based home network.

The suspicious IP addresses were:

• 
  
• 220.150.24.***
• 
  
• 
  
• 43.244.1.**
• 
  
• → Both are registered to FreeBit Co., Ltd., according to WHOIS data.
• 
  

Observed behaviors include:

• 
  
• MAC address spoofing attempts
• 
  
• 
  
• Frequent disassociation/reassociation patterns
• 
  
• 
  
• Broadcast deauthentication (ff:ff:ff:ff:ff:ff)
• 
  
• 
  
• Suspicious IPv6 packets from ffff::10.0.1.2
• 
  
• 
  
• Log entries tied to pcscd and unknown Ethernet authentication
• 
  

All logs, timestamps, MACs, and device IDs are retained.

This may indicate a misconfigured or compromised FreeBit user, or worse, internal abuse.

I am using Apple AirPort routers + macOS devices (Mojave and earlier).

Does anyone know if these kinds of attacks are common in Apple Wi-Fi environments?

Any advice on mitigation or escalation (aside from JPNIC, which has been notified) would be welcome.

Sincerely,

Mark

(Network Administrator – BLACKPEARL Infrastructure / NoobDNA Project)

[Edited by Moderator]