My Router changed is IP address on its own?

lettuce

lettuce

lettuce

Associate
Joined
15 Oct 2007
Posts
2,186
Location
Bedfordshire, UK.
A bit of back ground info first......

I have a Linksys AC1900 Wireless router which is paired up with a virgin media SH2 router (in modem mode), I noticed yesterday that all my device connected to the router stopped connecting to the Internet and complain about dhcp being incorrect. I have static IP address setup on 99% of my device and I needed to enable dhcp setting on the devices to get the working again, I tried to connect to my linksys router with its IP address that I set but was unable to make a connection, I tried turn everything off for 20 minutes and back on but still no join.

I was finally able to get access to the router via linksys smart connect (where you can connect to the router from the Internet). I noticed that the local IP address had been changed of the router from 192.168.100.2 to something like 192.168.50.20 all by itself!!.

I never changed the IP address at all, so how the hell has this happened, I've never know anything like this and never experience it in the past with my old wireless router ( only had the linksys for about 3 weeks).....any ideas on how such a thing can happen??
 
I'd turn off any feature that allows you to connect to a router from the internet. Asking for trouble really.

I assume you changed the default username and password before enabling such feature?
 
WFT, i think its just done it again, as i can connect to the router on the ip address i assigned it!!, what the hell is going on!?
 
Could be, i done a factory reset and left it turned off for 30 minutes...lets see if it does it again.
 
K.C. Leblanc said:
Have you managed to connect yourself the wan side by mistake?

Is it set to automatically apply firmware updates?
Click to expand...

No, when I was actually able to get into the settings it was the IP address of the linksys that had changed. Yeah auto update is enabled

Steveocee said:
Are you 100% sure the SH2 is in modem mode? If it's not it could be doing this.
Click to expand...

Yeah it's defo in modem mode
 
Ok, my router has been fine for a while now, but just tonight it change its default Gateway IP address again, to 10.193.226.192

I notice this straight away as i have a static IP address setup for my PC and noticed all of a sudden that i got disconnected from the Internet and got the yellow exclamation mark on the network icon in the task bar. I loaded up command prompt and in putted ipconfig and noticed that the default gateway had changed from what i have orginally set it to!

How is this happening, if someone had managed to work out my password then surely the first thing they would do i change my password so i couldnt gain access to my router, i have run virus and malaware scanners and nothing has come back, its there any app or programs that are know to change default gateway IP's?....this is really odd
 
rotor said:
I wouldn't say faulty... I'd say hacked?
Click to expand...

Ok, if it is hacked then what do they gain by just changing the Gateway IP address, and they'd need to know what my password was to get access to the settings??

But to be on the safe side i have changed my password to login into the router settings
 
Last edited:
Hacking is done via an exploit, no need to know the admin password. If it was me, I would re-apply the latest firmware, then factory reset, then reconfigure. At the same time, a little bit of research to see if there are known exploits for your model.
 
I'd ensure the router is on the latest firmware and then factory reset it and make sure you change the password to something different than last time and see how you go!

Or possibly get it touch with linksys support to see if it is a common occurrence with your model of router due to an exploit etc
 
Last edited:
OCZxFTW said:
I'd ensure the router is on the latest firmware and then factory reset it and make sure you change the password to something different than last time and see how you go!

Or possibly get it touch with linksys support to see if it is a common occurrence with your model of router due to an exploit etc
Click to expand...

Ok, i have re-applied the firmware and done a factory reset....im guessing i should change my wireless network password also then??

The thing i cant understand is if someone has hacked the router why just change the gateway ip address and not just look to see what my wireless password is so they can gain access that way and then i would never know unless i noticed a device connected that i didnt reconsign??, them changing the gateway ip sounds alarm bells straight away!
 
Last edited:
You must log in or register to reply here.
Back
Top Bottom