Reply
Highlighted
Aspirant

R7900P rebooted itself and changed its default SSID from NETGEAR65 to NETGEAR

Why did the router restart itself suddenly? It has been 5 days since the last reboot. 

Why did the router change SSID from NETGEAR65 (factory default) to NETGEAR?

===

Are there any logs or clues to discover what is happening? 

 

The logs found in the Netgear Genie only show status since the reboot and not what happened before the reboot. Is there another location for older logs? 

===

[DHCP IP: (10.0.0.6)] to MAC address E0:94:67:62:1E:89, Thursday, Jan 10,2019 12:59:21
[DoS attack: ACK Scan] from source 104.237.191.1,port 443 Thursday, Jan 10,2019 12:59:05
[DoS attack: ACK Scan] from source 216.17.8.165,port 443 Thursday, Jan 10,2019 12:55:39
[DoS attack: ACK Scan] from source 151.101.2.110,port 443 Thursday, Jan 10,2019 12:55:28
[DoS attack: ACK Scan] from source 172.217.3.5,port 443 Thursday, Jan 10,2019 12:55:17
[DoS attack: ACK Scan] from source 172.217.11.238,port 443 Thursday, Jan 10,2019 12:55:17
[DoS attack: ACK Scan] from source 172.217.3.5,port 443 Thursday, Jan 10,2019 12:55:16
[DoS attack: ACK Scan] from source 172.217.11.238,port 443 Thursday, Jan 10,2019 12:55:15
[DoS attack: ACK Scan] from source 13.89.217.116,port 443 Thursday, Jan 10,2019 12:54:58
[DoS attack: ACK Scan] from source 52.165.170.112,port 443 Thursday, Jan 10,2019 12:54:56
[DHCP IP: (10.0.0.6)] to MAC address E0:94:67:62:1E:89, Thursday, Jan 10,2019 12:54:56
[DoS attack: ACK Scan] from source 172.217.11.227,port 443 Thursday, Jan 10,2019 12:54:38
[DoS attack: ACK Scan] from source 172.217.11.238,port 443 Thursday, Jan 10,2019 12:54:37
[DoS attack: ACK Scan] from source 172.217.11.227,port 443 Thursday, Jan 10,2019 12:54:36
[DoS attack: ACK Scan] from source 172.217.11.238,port 443 Thursday, Jan 10,2019 12:54:36
[DoS attack: ACK Scan] from source 172.217.3.14,port 443 Thursday, Jan 10,2019 12:54:19
[DoS attack: ACK Scan] from source 172.217.11.227,port 443 Thursday, Jan 10,2019 12:54:11
[DoS attack: ACK Scan] from source 172.217.2.3,port 443 Thursday, Jan 10,2019 12:53:43
[DoS attack: ACK Scan] from source 13.91.60.30,port 443 Thursday, Jan 10,2019 12:53:38
[DoS attack: ACK Scan] from source 40.114.95.106,port 443 Thursday, Jan 10,2019 12:53:37
[Time synchronized with NTP server] Thursday, Jan 10,2019 12:53:33
[DoS attack: ACK Scan] from source 162.222.45.120,port 4282 Thursday, Jan 10,2019 12:53:17
[DoS attack: ACK Scan] from source 172.217.11.238,port 443 Thursday, Jan 10,2019 12:53:03
[DoS attack: ACK Scan] from source 52.173.28.179,port 443 Thursday, Jan 10,2019 12:52:54
[DoS attack: ACK Scan] from source 72.215.59.36,port 443 Thursday, Jan 10,2019 12:52:54
[DoS attack: ACK Scan] from source 52.173.28.179,port 443 Thursday, Jan 10,2019 12:52:53
[DoS attack: ACK Scan] from source 162.95.148.131,port 443 Thursday, Jan 10,2019 12:52:49
Model: R7900|Nighthawk X6 AC3000 Tri-Band WiFi Router
Message 1 of 3

Accepted Solutions
Highlighted

Re: R7900P rebooted itself and changed its default SSID from NETGEAR65 to NETGEAR

Greetings,

There is nothing abnormal in your logs.  However, I have one question.  Are you intentionally using a 10.0.0.x IP range?

 

If not, the router has modified this because you have something in front of it that is performing DHCP.  Why don't you tell us about your ISP, and the hardware that is in front of your nighthawk.  Cascading routers can cause unexpected reslts/behavior.  

 

As far as instability or why the router restarted, we can only guess.  

 

Corrupt FW, Bad or incomplete flash

-Might be caused if Auto-Check and Update, Genie or Automatic update was used.  Applying an old .cfg file to a newly upgraded FW.  Manual update remains the most reliable method.

 

Power flucuations at your location

-Power surge, dip, damaged power supply?

 

The router should not randomly restart, or change its settings.  If something like this does happen, I would consider and/or investigate some or all of the above.  

 

If you have recently updated the router or allowed it to update automatically, and did not do so manually, I would start with a factory reset and configure from scratch.  If you are not intentionally using a 10.x IP scheme, this should be the first thing to check and/or fix.

 

 

 

 

~Comcast 1 Gbps/50 Mbps SB8200 > R8000P
~R8000P FW:1.4.1.62 ~R7000 FW:1.0.9.42
~R6400 FW:1.0.1.52 ~Orbi-AC3000 FW:2.5.1.8
~EX3700 FW:1.0.0.84

View solution in original post

Message 2 of 3

All Replies
Highlighted

Re: R7900P rebooted itself and changed its default SSID from NETGEAR65 to NETGEAR

Greetings,

There is nothing abnormal in your logs.  However, I have one question.  Are you intentionally using a 10.0.0.x IP range?

 

If not, the router has modified this because you have something in front of it that is performing DHCP.  Why don't you tell us about your ISP, and the hardware that is in front of your nighthawk.  Cascading routers can cause unexpected reslts/behavior.  

 

As far as instability or why the router restarted, we can only guess.  

 

Corrupt FW, Bad or incomplete flash

-Might be caused if Auto-Check and Update, Genie or Automatic update was used.  Applying an old .cfg file to a newly upgraded FW.  Manual update remains the most reliable method.

 

Power flucuations at your location

-Power surge, dip, damaged power supply?

 

The router should not randomly restart, or change its settings.  If something like this does happen, I would consider and/or investigate some or all of the above.  

 

If you have recently updated the router or allowed it to update automatically, and did not do so manually, I would start with a factory reset and configure from scratch.  If you are not intentionally using a 10.x IP scheme, this should be the first thing to check and/or fix.

 

 

 

 

~Comcast 1 Gbps/50 Mbps SB8200 > R8000P
~R8000P FW:1.4.1.62 ~R7000 FW:1.0.9.42
~R6400 FW:1.0.1.52 ~Orbi-AC3000 FW:2.5.1.8
~EX3700 FW:1.0.0.84

View solution in original post

Message 2 of 3
Highlighted
Aspirant

Re: R7900P rebooted itself and changed its default SSID from NETGEAR65 to NETGEAR

RESOLVED- Netgear article instructs to hold down the reset button for 7 seconds and that worked. 

I thought I was resetting to factory defaults by tapping the reset button, which did reboot, but didn't restore factory defaults from flash. I was concerned that the SSID was not resetting. 

 

I intended to not check for updates, but it is possible this was not set.

 

I can't discover online the 10.x IP is an issue. The router now has DHCP selected and is assigning 198.x IPs. 

Comcast ISP > Motorola surfboard modem > R7900P router > N600 AP. 

Modem and router are plugged into a UPS. 

Model: R7900P|Nighthawk X6S Smart WiFi Router with MU-MIMO
Message 3 of 3
Top Contributors
Discussion stats
  • 2 replies
  • 1536 views
  • 0 kudos
  • 2 in conversation
Announcements