Jump to content

False Positive DoS Attack: ACK Scan = XR500 Disconnects(resolved)


Recommended Posts

Just picked up my XR500 and CM1000 a week ago everything is up and running great. All of my devices have their own reserved IP addresses and have no issues connecting.

The problem I seem to be having is the dos protection kicking off the internet, upload/download to the modem. I'll be gaming on my PC or my console and out of no where get a buffering symbol followed by the internet completely cutting out for 10-20 seconds  then I'll look over to the modem and see the power is still on but the upload/download lights turn off. So then I'll check out my logs and see fake dos attacks from Valve or Twitters ip address  on port 443. The time stamps of the Dos attacks line up perfectly with the disconnects. Not sure what to do but it happens about 3-5 times a day. the logs look like this.

[DoS Attack: ACK Scan] from source: 162.254.193.102, port 443, Thursday, June 18, 2020 20:49:53
[DoS Attack: ACK Scan] from source: 162.254.193.102, port 443, Thursday, June 18, 2020 20:49:52
[DoS Attack: ACK Scan] from source: 162.254.193.102, port 443, Thursday, June 18, 2020 20:49:51
[DoS Attack: ACK Scan] from source: 162.254.193.102, port 443, Thursday, June 18, 2020 20:49:50
[DoS Attack: ACK Scan] from source: 162.254.193.102, port 443, Thursday, June 18, 2020 20:49:49
[DoS Attack: ACK Scan] from source: 162.254.193.102, port 443, Thursday, June 18, 2020 20:49:48

UPDATE (20/6/20) I had a technician from my ISP come over to inspect the RG line to the house to see if there was a knick in it somewhere. He tested the line to find out it wasn't getting all the required frequencies needed to support my high speed internet. He spent the next two hours running a brand new line to my house and also installed new connectors. Since then I've had zero drops but will continue to monitor what happens.

Link to comment
Share on other sites

  • Administrators

Hey, welcome to the forum!

Usually these wouldn't disconnect the internet as they're just showing connections that have been made so glad you've managed to narrow it down to an ISP issue, do keep us updated if this changes.

Link to comment
Share on other sites

  • 4 weeks later...

1 Month Update.

Everything is up and running great with no disconnects or other issues. I also went ahead and disabled the use router as a DHCP sever and manually assigned IP's to my devices due to the lease time issue I was having. These routers are beasts once you get them dialed in. Im excited for the 3.0 update!

Link to comment
Share on other sites

  • Mags Dies changed the title to False Positive DoS Attack: ACK Scan = XR500 Disconnects(resolved)
Guest
This topic is now closed to further replies.
 Share

×
×
  • Create New...