Re: Wi-Fi keeps dropping on all devices.

FrodoFappins · ‎2020-01-26

As of recently, Wi-Fi has been dropping for up to 5 secs at a time, 5+ times a minute. It drops all. The. Time .

It's making everything really bad to use. Streaming, gaming, everything is affected by this.

What I have tried so far:

Factory reset router..

Unplugged overnight.

Switched channels several times.

Nothing has worked so far. I simply don't know what to do at this point.

Any help is greatly appreciated!

Firmware version: V2.3.2.56

FrodoFappins · ‎2020-01-26

Logfiles:

[DumaOS] config write 'com.netdumasoftware.desktop.database', Monday, January 27, 2020 04:54:30
[admin login] from source 192.168.1.139, Monday, January 27, 2020 04:52:57
[admin login] from source 192.168.1.139, Monday, January 27, 2020 04:52:57
[admin login] from source 192.168.1.139, Monday, January 27, 2020 04:52:56
[admin login] from source 192.168.1.139, Monday, January 27, 2020 04:52:55
[DoS Attack: Ascend Kill] from source: 84.238.0.130, port 53, Monday, January 27, 2020 04:50:15
[DumaOS] DHCP lease change., Monday, January 27, 2020 04:47:35
[DumaOS] DHCP new event., Monday, January 27, 2020 04:47:35
[DHCP IP: 192.168.1.9] to MAC address f4:42:8f:b6:99:5a, Monday, January 27, 2020 04:47:35
[DumaOS] DHCP lease change., Monday, January 27, 2020 04:36:05
[DumaOS] DHCP new event., Monday, January 27, 2020 04:36:05
[DHCP IP: 192.168.1.7] to MAC address 00:04:4b:62:c2:d1, Monday, January 27, 2020 04:36:05
[DumaOS] DHCP new lease allocated., Monday, January 27, 2020 04:36:03
[DumaOS] DHCP new event., Monday, January 27, 2020 04:36:03
[DHCP IP: 192.168.1.139] to MAC address 38:78:62:c9:5c:cf, Monday, January 27, 2020 04:36:03
[Internet connected] IP address: 84.238.116.68, Monday, January 27, 2020 04:35:57
[DoS Attack: SYN/ACK Scan] from source: 58.218.213.72, port 6000, Monday, January 27, 2020 04:12:51
[DumaOS] DHCP lease change., Monday, January 27, 2020 04:06:41
[DumaOS] DHCP new event., Monday, January 27, 2020 04:06:41
[DHCP IP: 192.168.1.7] to MAC address 00:04:4b:62:c2:d1, Monday, January 27, 2020 04:06:41
[DumaOS] DHCP lease change., Monday, January 27, 2020 04:06:04
[DumaOS] DHCP new event., Monday, January 27, 2020 04:06:04
[DHCP IP: 192.168.1.7] to MAC address 00:04:4b:62:c2:d1, Monday, January 27, 2020 04:06:04
[DumaOS] DHCP new lease allocated., Monday, January 27, 2020 04:06:01
[DumaOS] DHCP new event., Monday, January 27, 2020 04:06:01
[DHCP IP: 192.168.1.138] to MAC address 38:78:62:c9:5c:cf, Monday, January 27, 2020 04:06:01
[Internet connected] IP address: 84.238.116.68, Monday, January 27, 2020 04:05:57
[DumaOS] R-App store cloud sync failed, Monday, January 27, 2020 03:55:33
[DumaOS] HTTP download failed with code '404', Monday, January 27, 2020 03:55:33
[DoS Attack: ACK Scan] from source: 52.97.147.2, port 443, Monday, January 27, 2020 03:40:30
[DoS Attack: ACK Scan] from source: 52.97.147.2, port 443, Monday, January 27, 2020 03:40:25
[DoS Attack: ACK Scan] from source: 52.97.147.2, port 443, Monday, January 27, 2020 03:40:23
[DoS Attack: ACK Scan] from source: 52.97.147.2, port 443, Monday, January 27, 2020 03:40:21
[DoS Attack: ACK Scan] from source: 52.97.147.2, port 443, Monday, January 27, 2020 03:40:21
[DoS Attack: ACK Scan] from source: 52.97.147.2, port 443, Monday, January 27, 2020 03:40:20
[DoS Attack: ACK Scan] from source: 52.97.147.2, port 443, Monday, January 27, 2020 03:40:20
[DumaOS] DHCP lease change., Monday, January 27, 2020 03:36:10
[DumaOS] DHCP new event., Monday, January 27, 2020 03:36:10
[DHCP IP: 192.168.1.7] to MAC address 00:04:4b:62:c2:d1, Monday, January 27, 2020 03:36:10
[DumaOS] DHCP new lease allocated., Monday, January 27, 2020 03:36:06
[DumaOS] DHCP new event., Monday, January 27, 2020 03:36:06
[DHCP IP: 192.168.1.137] to MAC address 38:78:62:c9:5c:cf, Monday, January 27, 2020 03:36:06
[Internet connected] IP address: 84.238.116.68, Monday, January 27, 2020 03:35:58
[DoS Attack: SYN/ACK Scan] from source: 138.201.72.117, port 80, Monday, January 27, 2020 03:34:38
[DoS Attack: TCP/UDP Chargen] from source: 146.88.240.4, port 42062, Monday, January 27, 2020 03:31:52
[DumaOS] DHCP lease change., Monday, January 27, 2020 03:06:01
[DumaOS] DHCP new event., Monday, January 27, 2020 03:06:01
[DHCP IP: 192.168.1.136] to MAC address 38:78:62:c9:5c:cf, Monday, January 27, 2020 03:06:01
[Internet connected] IP address: 84.238.116.68, Monday, January 27, 2020 03:05:57
[DoS Attack: ACK Scan] from source: 52.97.178.98, port 443, Monday, January 27, 2020 02:45:06
[DoS Attack: ACK Scan] from source: 52.97.178.98, port 443, Monday, January 27, 2020 02:45:04
[DumaOS] DHCP lease change., Monday, January 27, 2020 02:36:03
[DumaOS] DHCP new event., Monday, January 27, 2020 02:36:03
[DHCP IP: 192.168.1.136] to MAC address 38:78:62:c9:5c:cf, Monday, January 27, 2020 02:36:03
[Internet connected] IP address: 84.238.116.68, Monday, January 27, 2020 02:35:57
[DoS Attack: RST Scan] from source: 140.143.255.207, port 443, Monday, January 27, 2020 02:34:12
[DumaOS] DHCP lease change., Monday, January 27, 2020 02:27:50
[DumaOS] DHCP new event., Monday, January 27, 2020 02:27:50
[DHCP IP: 192.168.1.6] to MAC address 6c:ad:f8:6f:92:77, Monday, January 27, 2020 02:27:50
[DoS Attack: SYN/ACK Scan] from source: 139.99.22.195, port 6603, Monday, January 27, 2020 02:22:11
[DumaOS] DHCP lease change., Monday, January 27, 2020 02:06:03
[DumaOS] DHCP new event., Monday, January 27, 2020 02:06:03
[DHCP IP: 192.168.1.136] to MAC address 38:78:62:c9:5c:cf, Monday, January 27, 2020 02:06:03
[Internet connected] IP address: 84.238.116.68, Monday, January 27, 2020 02:05:57
[DoS Attack: ACK Scan] from source: 52.97.190.2, port 443, Monday, January 27, 2020 01:52:43
[DoS Attack: ACK Scan] from source: 52.97.190.2, port 443, Monday, January 27, 2020 01:52:41
[DumaOS] DHCP new lease allocated., Monday, January 27, 2020 01:46:59
[DumaOS] DHCP new event., Monday, January 27, 2020 01:46:59
[DHCP IP: 192.168.1.136] to MAC address 38:78:62:c9:5c:cf, Monday, January 27, 2020 01:46:59
[DumaOS] DHCP lease change., Monday, January 27, 2020 01:44:31
[DumaOS] DHCP new event., Monday, January 27, 2020 01:44:31
[DHCP IP: 192.168.1.135] to MAC address 38:78:62:c9:5c:cf, Monday, January 27, 2020 01:44:31
[DumaOS] DHCP lease change., Monday, January 27, 2020 01:36:02
[DumaOS] DHCP new event., Monday, January 27, 2020 01:36:02
[DHCP IP: 192.168.1.135] to MAC address 38:78:62:c9:5c:cf, Monday, January 27, 2020 01:36:02
[Internet connected] IP address: 84.238.116.68, Monday, January 27, 2020 01:35:57
[DumaOS] DHCP lease change., Monday, January 27, 2020 01:32:14
[DumaOS] DHCP new event., Monday, January 27, 2020 01:32:14
[DHCP IP: 192.168.1.8] to MAC address a4:67:06:8d:4c:12, Monday, January 27, 2020 01:32:14
[DumaOS] DHCP lease change., Monday, January 27, 2020 01:06:11
[DumaOS] DHCP new event., Monday, January 27, 2020 01:06:11
[DHCP IP: 192.168.1.7] to MAC address 00:04:4b:62:c2:d1, Monday, January 27, 2020 01:06:11
[Internet connected] IP address: 84.238.116.68, Monday, January 27, 2020 01:05:57
[admin login] from source 192.168.1.135, Monday, January 27, 2020 00:39:39
[DumaOS] DHCP new lease allocated., Monday, January 27, 2020 00:38:53
[DumaOS] DHCP new event., Monday, January 27, 2020 00:38:53
[DHCP IP: 192.168.1.135] to MAC address 38:78:62:c9:5c:cf, Monday, January 27, 2020 00:38:53
[admin login] from source 192.168.1.134, Monday, January 27, 2020 00:38:16
[DumaOS] DHCP new lease allocated., Monday, January 27, 2020 00:38:11
[DHCP IP: 192.168.1.134] to MAC address 38:78:62:c9:5c:cf, Monday, January 27, 2020 00:38:11
[DoS Attack: SYN/ACK Scan] from source: 195.201.45.129, port 80, Monday, January 27, 2020 00:37:20
[Time synchronized with NTP server] Monday, January 27, 2020 00:36:43
[Internet connected] IP address: 84.238.116.68, Monday, January 27, 2020 00:35:57
[Internet disconnected] Monday, January 27, 2020 00:35:25
[Internet disconnected] Monday, January 27, 2020 00:35:12
[Internet connected] IP address: 84.238.116.68, Monday, January 27, 2020 00:34:35
[DumaOS] DHCP new lease allocated., Monday, January 27, 2020 00:33:51
[DumaOS] DHCP new event., Monday, January 27, 2020 00:33:51
[DHCP IP: 192.168.1.133] to MAC address 38:78:62:c9:5c:cf, Monday, January 27, 2020 00:33:51
[Internet disconnected] Monday, January 27, 2020 00:33:43
[DoS Attack: SYN/ACK Scan] from source: 185.71.66.40, port 50002, Monday, January 27, 2020 00:32:45
[admin login] from source 192.168.1.132, Monday, January 27, 2020 00:32:01
[DoS Attack: TCP/UDP Chargen] from source: 172.105.22.68, port 58241, Monday, January 27, 2020 00:31:40
[DumaOS] DHCP new lease allocated., Monday, January 27, 2020 00:31:30
[DumaOS] DHCP new event., Monday, January 27, 2020 00:31:30
[DHCP IP: 192.168.1.132] to MAC address 38:78:62:c9:5c:cf, Monday, January 27, 2020 00:31:30
[DoS Attack: SYN/ACK Scan] from source: 185.71.66.40, port 50002, Monday, January 27, 2020 00:31:24
[DoS Attack: SYN/ACK Scan] from source: 137.74.85.93, port 443, Monday, January 27, 2020 00:27:12
[DumaOS] DHCP lease change., Monday, January 27, 2020 00:25:44
[DHCP IP: 192.168.1.3] to MAC address ec:b5:fa:11:f7:b4, Monday, January 27, 2020 00:25:44
[DumaOS] Error parsing line in ARP table: 'fe80::7660:faff:fefb:3aec dev br0 lladdr 74:60:fa:fb:3a:ec REACHABLE', Monday, January 27, 2020 00:25:38
[DumaOS] Error parsing line in ARP table: 'fe80::7ad2:94ff:fe41:cfb dev br0 lladdr 78:d2:94:41:0c:fb router STALE', Monday, January 27, 2020 00:25:38
[DoS Attack: SYN/ACK Scan] from source: 185.71.66.40, port 50002, Monday, January 27, 2020 00:22:49
[DoS Attack: TCP/UDP Chargen] from source: 185.94.111.1, port 57148, Monday, January 27, 2020 00:22:10
[DoS Attack: TCP/UDP Chargen] from source: 52.73.169.169, port 45893, Monday, January 27, 2020 00:21:12
[admin login] from source 192.168.1.131, Monday, January 27, 2020 00:19:10
[admin login] from source 192.168.1.131, Monday, January 27, 2020 00:19:10
[admin login] from source 192.168.1.131, Monday, January 27, 2020 00:19:10
[admin login] from source 192.168.1.131, Monday, January 27, 2020 00:19:09
[admin login] from source 192.168.1.131, Monday, January 27, 2020 00:19:09
[DoS Attack: SYN/ACK Scan] from source: 185.71.66.40, port 50002, Monday, January 27, 2020 00:19:09
[DumaOS] DHCP new lease allocated., Monday, January 27, 2020 00:13:02
[DumaOS] DHCP new event., Monday, January 27, 2020 00:13:02
[DHCP IP: 192.168.1.131] to MAC address 38:78:62:c9:5c:cf, Monday, January 27, 2020 00:13:02
[DumaOS] DHCP lease change., Monday, January 27, 2020 00:12:33
[DumaOS] DHCP new event., Monday, January 27, 2020 00:12:33
[DHCP IP: 192.168.1.130] to MAC address 38:78:62:c9:5c:cf, Monday, January 27, 2020 00:12:33
[Internet connected] IP address: 84.238.116.68, Monday, January 27, 2020 00:07:33
[DumaOS] DHCP lease change., Monday, January 27, 2020 00:06:36
[DumaOS] DHCP new event., Monday, January 27, 2020 00:06:36
[DHCP IP: 192.168.1.130] to MAC address 38:78:62:c9:5c:cf, Monday, January 27, 2020 00:06:36
[DoS Attack: SYN/ACK Scan] from source: 185.71.66.40, port 50002, Monday, January 27, 2020 00:04:55
[DumaOS] DHCP lease change., Sunday, January 26, 2020 23:59:33
[DumaOS] DHCP new event., Sunday, January 26, 2020 23:59:33
[DHCP IP: 192.168.1.130] to MAC address 38:78:62:c9:5c:cf, Sunday, January 26, 2020 23:59:33
[DumaOS] Cloudsync Themes result 'false','All mirrors are down', Sunday, January 26, 2020 23:55:54
[DumaOS] Geo-Filter cloudsync result 'true','Geo-Filter is up to date', Sunday, January 26, 2020 23:55:30
[DoS Attack: SYN/ACK Scan] from source: 185.71.66.40, port 50002, Sunday, January 26, 2020 23:55:13
[DumaOS] DHCP lease change., Sunday, January 26, 2020 23:43:39
[DumaOS] DHCP new event., Sunday, January 26, 2020 23:43:39
[DHCP IP: 192.168.1.130] to MAC address 38:78:62:c9:5c:cf, Sunday, January 26, 2020 23:43:39
[DumaOS] DHCP lease change., Sunday, January 26, 2020 23:42:19
[DumaOS] DHCP new event., Sunday, January 26, 2020 23:42:19
[DHCP IP: 192.168.1.130] to MAC address 38:78:62:c9:5c:cf, Sunday, January 26, 2020 23:42:19
[Internet connected] IP address: 84.238.116.68, Sunday, January 26, 2020 23:37:33
[DoS Attack: TCP/UDP Chargen] from source: 89.248.174.146, port 33746, Sunday, January 26, 2020 23:31:19
[DoS Attack: SYN/ACK Scan] from source: 185.71.66.40, port 50002, Sunday, January 26, 2020 23:29:44
[Internet connected] IP address: 84.238.116.68, Sunday, January 26, 2020 23:07:32
[DoS Attack: ACK Scan] from source: 157.240.194.55, port 443, Sunday, January 26, 2020 23:02:09
[DoS Attack: ACK Scan] from source: 157.240.194.55, port 443, Sunday, January 26, 2020 23:00:07
[DoS Attack: ACK Scan] from source: 157.240.194.55, port 443, Sunday, January 26, 2020 22:58:04
[DoS Attack: ACK Scan] from source: 157.240.194.55, port 443, Sunday, January 26, 2020 22:56:01
[DoS Attack: ACK Scan] from source: 157.240.194.55, port 443, Sunday, January 26, 2020 22:53:58
[DoS Attack: ACK Scan] from source: 157.240.194.55, port 443, Sunday, January 26, 2020 22:51:55
[DoS Attack: ACK Scan] from source: 157.240.194.55, port 443, Sunday, January 26, 2020 22:50:21
[DumaOS] DHCP lease change., Sunday, January 26, 2020 22:49:01
[DumaOS] DHCP new event., Sunday, January 26, 2020 22:49:01
[DHCP IP: 192.168.1.8] to MAC address a4:67:06:8d:4c:12, Sunday, January 26, 2020 22:49:01
[DumaOS] DHCP new lease allocated., Sunday, January 26, 2020 22:48:46
[DumaOS] DHCP new event., Sunday, January 26, 2020 22:48:46
[DHCP IP: 192.168.1.130] to MAC address 38:78:62:c9:5c:cf, Sunday, January 26, 2020 22:48:46

Netduma_Alex · ‎2020-01-27

Sorry to hear you're having this issue. Is it just wifi that's dropping or are wired devices also having problems?

When the wifi drops, are you losing internet connection but remaining connected to the router, or are the devices actually dropped from the wifi network?

FrodoFappins · ‎2020-01-27

It's both wired and wireless connections that are dropping.

I have narrowed it down to probably being the DHCP lease being messed up.

It keeps acquiring new leases several times a min, when it's at its worst, according to my logfiles. And that is consistent with the timing of my disconnects.

A quick Google search for "XR500 DHCP Lease time" will give countless of other people posting about the exact same problem, but I haven't been able to find any solutions.

What should I do? Is there a fix or do I need a new router?

Netduma_Alex · ‎2020-01-28

I'm not sure what to suggest if you've already done a factory reset, that SHOULD clear up any issues like this, but it seems not in this case.

It's possible that this is a problem between the modem and the router. Could you try unplugging the modem from the router, and see if the DHCP issues in the logs still come up? Obviously you won't be able to connect to the internet but it might give us some insight into what's causing the problem.

FrodoFappins · ‎2020-01-28

I don't have a modem per se, I get internet straight from coax outlet in the wall

Netduma-Fraser · ‎2020-01-28

So are you using a MoCA adapter to connect the XR500? So you have no access to a modem/router interface other than the XR? Do you receive your public IP address as the WAN address in System Information?

FrodoFappins · ‎2020-01-28

Yes, connected via MoCA adapter.

No other access to modem/router, other than Duma.

Not sure about the WAN address you're asking about. It's an IP address, but I don't know "what kind"

Netduma-Fraser · ‎2020-01-28

If you type my ip into google is the IP shown there the same as the WAN IP? Could you also try setting static/reserved IPs for the devices you would notice it on and see if they still disconnect please.

FrodoFappins · ‎2020-01-28

Yes, the IP addresses are the same.

Sure, I could try that. But I need instructions on how to do so.

Netduma-Fraser · ‎2020-01-28

Okay great thanks. Heres a guide on how to do that: https://kb.netgear.com/25722/How-do-I-reserve-an-IP-address-on-my-NETGEAR-router

FrodoFappins · ‎2020-01-28

So far it seems to be working, with the static IP. Too early to conclude if it's 100% fixed by this. I will get back with an update tomorrow or perhaps a few days, so I can determine if it worked.

In the meantime, is static IP desirable? It seems like a wooden fix for a problem a lot of people are having.

I can confirm that the lease changing seems to still be taking place. But I haven't noticed any outages yet.

UPDATE:

I celebrated too soon. It is still happening. DHCP leases still changing up to 10 times per minute. Still affecting devices with static IP, bot wired and wireless

Netduma-Fraser · ‎2020-01-29

If you connect a device direct to the MoCA adapter do you experience this at all? There are no issues with using a static IP, it's perfectly fine, a lot of people use it to prevent their devices from changing IP all the time. Could you look at the Internet port on the router and see if there are any pins protruding/that it looks the same as the LAN ports?

FrodoFappins · ‎2020-01-31

If I bypass the router and connect directly to the "wall", I have no problem whatsoever.

Things I have tried since :

Hooked up to router again after, to make sure that the problem was still there. It was.

Downgraded to .32 which seems to have fixed it. Will monitor throughout the day and see if it happens.

FrodoFappins · ‎2020-01-31

Nope, downgrading to .32 did not work.

I'm at a loss here. I've never spent as much money on a router as I have on this one, and also I've never experienced more instability from a router as this one.

The downgrade worked for about an hour, then the DHCP Lease went crazy again with 10+ new leases within minutes. I disabled auto upgrade so firmware is still .32, just to be sure the DHCP hell didn't occur due to an auto update back to the latest firmware.

FrodoFappins · ‎2020-02-03

There were no problems with any of the pins. Also static IP didn't help after all.

Hooking pc up to MoCA directly resulted in no disconnecting at all. So problem must be with router

Netduma_Alex · ‎2020-02-04

Well right now i'm at a bit of a loss. I would have suggested changing various DHCP settings but you said that you have already factory reset the router. It still sounds to be like a potential problem between the modem and the router but I can't say what would solve it.

If it's a problem with the XR500 hardware you could contact Netgear directly for a replacement, however as I said I feel like the problem isn't to do with the XR500 hardware, at least not as it pertains to your exact unit.