Nighthawk XR500 DOS attacks and losing connection

[md_73]

hi.  I have a Nighthawk XR500 on firmware v2.3.2.56.  I see in the logs lots of DOS attacks and the router continually loses its connection for 2-30 seconds.  I have tried to include a screen shot of most recent log.  I've read through some of the posts here indicating that the attacks are not real, however, the log entries correspond with my loss of connectivity which makes working from home quite difficult.  Any suggestions would be greatly appreciated.

In the event the log sceen capture does not appear, this is sample lines from the file:

[DoS Attack: ACK Scan] from source: 52.96.66.165, port 48931, Wednesday, September 09, 2020 13:44:47
[DoS Attack: ACK Scan] from source: 52.96.66.165, port 48931, Wednesday, September 09, 2020 13:44:46
[DoS Attack: ACK Scan] from source: 52.96.66.165, port 48931, Wednesday, September 09, 2020 13:44:45
[DoS Attack: ACK Scan] from source: 52.96.66.165, port 48931, Wednesday, September 09, 2020 13:44:44
[DoS Attack: ACK Scan] from source: 52.96.66.165, port 48931, Wednesday, September 09, 2020 13:44:43
[DoS Attack: ACK Scan] from source: 52.96.66.165, port 48931, Wednesday, September 09, 2020 13:44:42
[DoS Attack: ACK Scan] from source: 52.96.66.165, port 48931, Wednesday, September 09, 2020 13:44:41
[DoS Attack: ACK Scan] from source: 52.96.66.165, port 48931, Wednesday, September 09, 2020 13:44:40
[DoS Attack: ACK Scan] from source: 52.96.66.165, port 48931, Wednesday, September 09, 2020 13:44:39
[DoS Attack: ACK Scan] from source: 52.96.66.165, port 48931, Wednesday, September 09, 2020 13:44:38

[DoS Attack: ARP Attack] from source: 73.74.4.1, Wednesday, September 09, 2020 13:35:15
[DoS Attack: ACK Scan] from source: 104.16.184.152, port 443, Wednesday, September 09, 2020 13:34:05
[DoS Attack: ACK Scan] from source: 52.96.79.133, port 28648, Wednesday, September 09, 2020 13:33:50
[DoS Attack: ACK Scan] from source: 52.96.79.133, port 28648, Wednesday, September 09, 2020 13:33:49
[DoS Attack: ACK Scan] from source: 52.96.79.133, port 28648, Wednesday, September 09, 2020 13:33:48
[DoS Attack: ACK Scan] from source: 52.96.79.133, port 28648, Wednesday, September 09, 2020 13:33:47
[DoS Attack: ACK Scan] from source: 52.96.79.133, port 28648, Wednesday, September 09, 2020 13:33:46
[DoS Attack: ACK Scan] from source: 52.96.79.133, port 28648, Wednesday, September 09, 2020 13:33:45
[DoS Attack: ACK Scan] from source: 52.96.79.133, port 28648, Wednesday, September 09, 2020 13:33:44
[DoS Attack: ACK Scan] from source: 52.96.79.133, port 28648, Wednesday, September 09, 2020 13:33:43
[DoS Attack: ACK Scan] from source: 52.96.79.133, port 28648, Wednesday, September 09, 2020 13:33:42
[DoS Attack: ACK Scan] from source: 52.96.79.133, port 28648, Wednesday, September 09, 2020 13:33:41

[Netduma-Fraser]

All of those entries are from a Microsoft IP bar two which are Comcast & Cloudflare so it is highly unlikely they're resulting in that behavior. Upgrade to the beta firmware here and see if you still get the disconnects: https://community.netgear.com/t5/Nighthawk-Pro-Gaming-DumaOS-3-0/New-firmware-XR500-V2-3-2-104-DumaO...

[md_73]

Hi.  Based on the link you sent for the Beta firmware, should I be installing this firmware or does it need more testing?  In reading the thread there, it seems as though the Beta firmware should not be used.

[Netduma-Fraser]

It has been removed at the moment so not possible to install it, we should have a new firmware soon though that will hopefully resolve the issues.