NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

Legit_File's avatar
Legit_File
Aspirant
Jul 13, 2023

RAX30 Drops Connection

So I've done the run around with my ISP, got a new modem, and they swear it's not them. "The modem never loses signal", so that got me over to netgear support. Using the RAX30, I'd get random "connection errors" on games and streaming services, that would all but disconnect me. The modem, and the router, never go amber, so it thinks that it's got internet the entire time. Netgear has sent me a replacement rax30, and it is still having the same issues. While I have been told that most of the logs are superfluous, the only thing logged during these disconnects (which happen 7-10 times a day, usually in batches of 2-4 strings) are 

[DoS attack:ACK_Scan] from source: 35.241.34.106,port 443, Thursday, July 13, 2023 08:06:22
[DoS attack:ACK_Scan] from source: 37.157.3.30,port 443, Thursday, July 13, 2023 08:05:49

I'm beyond frustrated because it effectively makes streaming and gaming impossible. Any ideas on what I need to do? Or is this a "you're out of luck" kind of thing?

 

**edit My PC is wired, and everything else is wireless, all devices have the same issue.

Firmware VersionV1.0.10.94_3

7 Replies

Sort By
  • oPusBlooM's avatar
    oPusBlooM
    Aspirant
    Jul 13, 2023

    What happens if you turn off the DOS in the advanced setup?  I had a nephew running a game on his Oculus that also hit my Orbi as a DOS attack. 

     

    I do not advise this to be a normal setting.  Its just to help isolate your issue.

  • michaelkenward's avatar
    michaelkenward
    Guru
    Jul 13, 2023
    Legit_File wrote:

    So I've done the run around with my ISP, got a new modem, and they swear it's not them.

    What is that modem?

     

    While I have been told that most of the logs are superfluous, the only thing logged during these disconnects (which happen 7-10 times a day, usually in batches of 2-4 strings) are 

    [DoS attack:ACK_Scan] from source: 35.241.34.106,port 443, Thursday, July 13, 2023 08:06:22
    [DoS attack:ACK_Scan] from source: 37.157.3.30,port 443, Thursday, July 13, 2023 08:05:49

    Those IP addresses are Google and ADFORM-NET.

     

    Netgear's firmware is great at creating false reports of DoS attacks. Many of them are no such thing.

     

    Use Whois.net to see who is behind some of them – that's what I did – and you may find that they are from places like Facebook, Google, even your ISP.

     

    Here is a useful tool for that task:

     

    IPNetInfo: Retrieve IP Address Information from WHOIS servers

     

    If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem. This does not prevent the router from protecting you from the outside world.

     

    • Legit_File's avatar
      Legit_File
      Aspirant
      Jul 13, 2023
      I don't have qos on, and even with logs off, it still causes disconnects.
      The original modem was a Spectrum brand EU2251 DOCSIS 3.1
      The "new" is an Arris TM1602A.
      • michaelkenward's avatar
        michaelkenward
        Guru
        Jul 13, 2023
        Legit_File wrote:
        I don't have qos on, and even with logs off, it still causes disconnects.

        It isn't QoS that I referred to, but logging those events.

         

    • Legit_File's avatar
      Legit_File
      Aspirant
      Jul 13, 2023
      I remembered after posting that the hot fix didn't show up when you click update, so I manually upgraded it, still causing issues.