Just a has been, we've all graduated from valued IT professionals, to tolerated 'has-beens' after retirement, nice handle
I watch for anything related to the 3200 since it's our favorite model. I'm wondering, have you had any luck investigating, or tracking the location of the source/addresses of the external attacks that are displayed on this list, and are showing up so frequently? What sort of load is your router's CPU and memory exhibiting, or is the router acting sluggish or overheating? Goes without saying (but I'll say it) you probably have your router's firewall on and selected DDOS protection.
As for what these attacks represent, it's just a suggestion, you might look at the Snort blacklist to see if any of the addresses you're seeing are 'bad' addresses and block them in your router. I'm not familiar with the page in your pdf, since we don't use TM, and it looks different in the new official FW. TM seems to impact the performance for us since we run two concurrent OpenVPN tunnels, so we need every CPU cycle we canget. We're well-protected without running TM, so made the sacrifice and turned it off. Depending on where those IPs and potential attacks are from or are going (source/destination), notwithstanding my lack of comprehension looking at your pdf, even if your 3200 was a very early model, most of these units are built over there. If you're running the new USA Asus official FW, the date of manufacture shouldn't matter. The FW will overwrite whatever was on the 4outer previously, to bring it up to latest best specs.
TM is closed source and no one knows how it does what it does, so all one can do is assess what the implications and benefits are, if you like using it. TM seems to work well enough for those who like it, and when we attempted to use it, we had too much of a resource impact on the router, to justify continuing to send all of our traffic and information to a secret company that isn't transparent. It didn't offer us anything we didn't already have. TM doesn't say much and it isn't a 'bad' company. Many people insist TM performs well for them, so it comes down to whatever works for each user's perceived needs and goals. Companies dealing with security have to keep many secrets, but the more they are wiling to talk about the process, protection and benefits in real terms they offer to us when it comes to what they're doing with our data after they have it, the more I'm inclined to trust allowing that access. Every address looked at, swiped or searched from a keyboard, voice recognition on any device you have goes to TM to analyze then back to your router with their interpretation of what it means. That's a huge amount of trust you have to opt-into. It's not a 'trust no one' mentality, but just the same, I'd be more open to trust if we knew know more about how TM secretly analyzes everything we do; it's like having the NSA built into your router. That's only old IT guy paranoia piping up; every secret 'free' service has a cost, but you can never know. End of speculation
Depending on the amount of bandwidth you have, how many devices/computers are on your LAN, and the amount of useful features in your 3200 that you're using, TM can use a great deal of CPU and RAM. If you utilize a good A/V, anti-spyware, anti-malware, anti-ransom security package and regularly scan your systems, if your systems aren't compromised, then your security and your router is probably doing what it's supposed to do. The RT-AC3200 is a very good unit; many folks take a long time before they grasp or become comfortable with how powerful it is, even using with the stock FW. In time you may want to try one of the forks if you need more advanced features.
Not trying to go off the rails from your questions, but since you don't indicate if you're using OpenVPN, most VPN providers have very robust IPS firewalls and A/V in place as part of the service. Both of the VPN services we use are very active in that regard. It makes a huge difference in keeping the 'bad' stuff out of your router and systems. We haven't had any incidents of attacks for a couple of years, like may be registering in the pdf you posted.
The new latest Asus FW from December 2017 supposedly expands the3200's NVRAM to 128kb, other's have tested and confirmed this. Are you able to use multiple OpenVPN clients/configs, and if so, how many OpenVPN configs does your FW make available? Until this new release, the 3200's NVRAM was stuck at 64KB. RMerlin's release reduced the number of OpenVPN clients to only allow 2 tunnels so as not to overload the 64kbs of NVRAM. With the new official Asus FW expanding NVRAM to 128kbs, if you're not using more than one or two OpenVPN tunnels, you should have enough resources to continue using TM if you like it, as long as your router and bandwidth make the router responsive enough for your needs. Didn't intend to inundate you with irrelevant data and hope this helps. Cheers.
