There is a mis-feature on the ONT called "Broadcom Packet Flow Cache". It apparently speeds up TCP sessions but at the expense of allowing a large amount of then.

Lumen fortunately moved off these ONTs. However, the new Smart NIDs have their fair share of issues from what I heard. I moved out of Lumen territory so have no experience with them.