logo elektroda
logo elektroda
X
logo elektroda

TP-Link Router: Accessing Settings with 192.168.1.1, No Connection Page - Possible Virus

INUS9 39081 27
ADVERTISEMENT
Treść została przetłumaczona polish » english Zobacz oryginalną wersję tematu
  • #1 15447727
    INUS9
    Level 7  
    Hope on a good topic ;)
    Namely, I have a problem with logging into the TP link settings.
    I go to the browser and enter 192.168.1.1 and it does not connect. No connection page pops up. And the Internet is normal. The two other laptops connected via Wifi also have the same message.

    I need to get to the router settings because the router is probably infected with viruses.

    Have any ideas?
  • ADVERTISEMENT
  • #2 15447745
    Andrzej Ch.
    Level 33  
    Virus-infected router? How is this possible and how could it possibly happen?
    Give me the assigned IP number, subnet mask and router model. Have you changed the default settings - I mean IP addressing?
  • #3 15447752
    bogiebog
    Level 43  
    The possible ip of the router is different.
    Show cmd.exe from window
    ping 8.8.8.8
    ipconfig / all
  • #4 15447753
    askr
    Level 35  
    How do you know the router is on 192.168.1.1?

    Check which default gateway you have set and log in to this address.

    Possibly - https: //ip.routera
  • ADVERTISEMENT
  • #5 15447771
    INUS9
    Level 7  
    How do i know Because in other years this address was always entered, and secondly, this address is engraved under the router.
    Apparently, the software needs to be changed. How viral router possible. And how to understand that through wifi computers and phones connecting to it do not normally enter website addresses but jump to some viral advertising sites. I do not have a virus on the phone. I anticipate this question. Everything is checked in other networks. The phone connects was formatted.

    Regarding the mask and IP, I have no idea where and how to check it ;)

    Oh, and the address from Askr is not included
  • #6 15447780
    Andrzej Ch.
    Level 33  
    Well, you have to reset to factory settings and this VIRUS will disappear by the way. :) I suspect that something or someone changed your DNS addresses, hence you have side effects that you write about.
    Please enter the model of the infected router.

    You can check the IP and mask - in the way that your colleague suggested above.

    You enter: cmd
    next: ipconfig / all

    and you copy everything on the forum :)
  • #7 15447816
    INUS9
    Level 7  
    DNS used to be changed by how the neostrada went down the network. I called DNS are correct. Reset, but I'm afraid that if I reset it, I will not enter the Router address and will be without the net.

    Model TP-LINK TD-W8901G
  • #8 15447827
    Andrzej Ch.
    Level 33  
    When you reset, you will enter according to the data that you have engraved on the bottom of the router, and certainly according to the data from the user manual.
    How do you know if you have the correct DNS, if you can't even find it?
    Follow the guidelines above or reset - according to the instructions - the router to default values and then configure "for yourself" again. Nobody can think of anything else here.
  • #9 15447877
    INUS9
    Level 7  
    TP-Link Router: Accessing Settings with 192.168.1.1, No Connection Page - Possible Virus

    Added after 1 [minutes]:

    I can check DNS! I called orange and they are correct!
  • #10 15447885
    bogiebog
    Level 43  
    From the cmd.exe window

    ping 192.168.1.1
    ping 8.8.8.8
    tracert -d 8.8.8.8
    arp -a
  • #11 15447887
    Andrzej Ch.
    Level 33  
    It looks like everything is fine.
    There are no problems with addressing and the router should report itself to 192.168.1.1.
    You write about wifi connections that you have a problem with them, but now you have presented information from the cable connection. Is this computer also denied access to the router under 192.168.1.1?
  • #12 15447899
    INUS9
    Level 7  
    Yes, from the computer. which I am checking all this is connected with a cable to the router. The address 192.168.1.1 does not come from it or from laptops connected to the router via wifi
  • #14 15450661
    WS38
    Level 13  
    By resetting you go back to the factory settings. So what the router had from the news.
    You press the reset button on the router's housing and hold it for about 8 seconds.

    You may have a problem when someone interfered with the router's firmware and you bought a used one from him.

    Going in turn.

    The new router includes a user manual, an installation CD and usually an Ethernet cable. You may have the wrong cable.

    The CD includes an easy installation wizard.

    First, it is important to connect the equipment correctly. The Internet from the modem must go via cable to the correct socket on the router (LAN port). With another socket you lead the cable to the computer from the router.

    After resetting the router, you can still try this method:
    You type in the browser in the address bar:
    http://tplinklogin.net

    As the username you enter the word admin, the password is the same: admin. These are the default settings.

    You log in to the router's menu, select Quick Setup and fly on ...
  • ADVERTISEMENT
  • #15 15460794
    INUS9
    Level 7  
    So thanks to everyone for addressing my topic. I did a router reset and after it entered the settings. The Internet has started to walk better, it does not catch viruses as before, although it is still not perfect. Out of curiosity, after a few days, I wanted to enter the router again by entering the correct login and password again, what a hopelessness.

    And what DNS assigned me a new, some automatic. Stay on them or enter the addresses given by orange?
  • ADVERTISEMENT
  • #16 15461387
    Andrzej Ch.
    Level 33  
    Basic question, after rebooting the device, have you changed the account password on the device?
    This is the basis. If you do not do this and you do not block WAN access, anyone can mess with your router, you will not even know when.
    As for DNS, enter permanently those with orange, or opendns
  • #17 15463633
    INUS9
    Level 7  
    The passwords were factory set, you cannot log in again, some nonsense.
  • #18 15465434
    WS38
    Level 13  
    Reset the router again and then you will restore the factory password / login settings.
    Then change it to yours. Unfortunately you have to repeat it if you forgot to set your password and login.
  • #19 15466737
    INUS9
    Level 7  
    And it is not possible to log in again on the factory? In the past, I probably did not change and it was possible to log in .... Because I always had admin - admin different times
  • #20 15466745
    Andrzej Ch.
    Level 33  
    for such settings (admin - admin), it is not at all surprising that you cannot login.
    I wrote about the fact that the first thing to do is change passwords. You're stubborn and that's it, and then you're surprised that something doesn't work.
    Honestly, I don't know what the topic and content of this thread is leading to, since you don't follow the recommendations anyway. Everything has been said and the topic should be closed long ago - solved.
  • #21 15471912
    WS38
    Level 13  
    Anyone can log in to admin / admin.
    I once read an article in which a journalist wrote that still about 65% of routers are not secured at all, because they use admin / admin login data.

    There are automatons that search for such vulnerabilities and change settings.

    Either you want to have your own router settings and then you have to set your own passwords, or you will be using the settings changed by anyone and still have trouble logging in or doing other things.

    It's the same as leaving your car open in the street and then wondering if something inside has changed, e.g. there are no seats.
  • #22 15473777
    INUS9
    Level 7  
    Ok cool with what's going on.

    What do you think about the change of software? Is it possible that there may still be viruses or something wrong on the router? An IT specialist once told me that if DNS is legal and something is still wrong, that I redirect to other pages - unwanted, the software would have to be changed
  • #24 15474092
    KOCUREK1970
    Network and Internet specialist
    INUS9 wrote:
    Model TP-LINK TD-W8901G

    Here more:
    http://www.tplink.com/en/download/TD-W8901G_V2.html#Firmware
    Please check the hardware version of your router and download the RELEVANT software - but taking into account that the last soft as I can see is from 2013 to the hardware version v6 - I will say this - buy a NEW router, with software support, where bugs are patched - this one is already TODAY.
  • #25 15476824
    Andrzej Ch.
    Level 33  
    @ Kocurek1970.
    You'd be surprised what old ADSL router model I have, but I have peace of mind because I have blocked outside access to it - the surest method. Judging by the abilities of the author of this thread, it is best to block access to the router, and not go into additional costs, because the possibilities of the newly purchased router will not be used anyway.
  • #26 15476997
    KOCUREK1970
    Network and Internet specialist
    Andrzej Ch. wrote:
    because the possibilities of the newly purchased router will not be used anyway.

    It's not about its new capabilities - it's just the manufacturer's patching of backdoors in their software.
    Old equipment may not be susceptible to this, and other models do - back then it was loud about DLinks.
    Since criminals have already used this equipment - in my opinion, it is no longer safe, and this should result in either a change of the software of such equipment, or (as I prefer) a complete replacement of such equipment.

    Privately, every 3/4 years I change routers - unfortunately only new equipment has the manufacturer's support - the older ones are forgotten - and what kind of trash is currently on the net, I do not need to explain.
    Is an expense of PLN 150 every 4 years a large expense - safety costs money!

    Let the author do as he wishes.
  • #27 15477277
    jesion40
    Level 27  
    WS38 wrote:
    I once read an article in which a journalist wrote that still about 65% of routers are not secured at all, because they use admin / admin login data.
    It's sad, but that doesn't surprise me :D
    WS38 wrote:
    There are automatons that search for such vulnerabilities and change settings.
    That's it. I think that in all routers that I had the default settings after resetting, they blocked the possibility of entering from the WAN. So how do these slots care? Because those users who do not change the password do not bother with such settings.
  • #28 15478069
    jimasek
    VIP Meritorious for electroda.pl
    jesion40 wrote:
    I guess in all routers my default settings were blocked after the resets

    In new devices (let's say 2 years old) it really is. Unfortunately, older devices were not secured this way by default.

Topic summary

The discussion revolves around a user experiencing difficulties accessing the settings of a TP-Link router at the IP address 192.168.1.1, suspecting a virus infection due to abnormal behavior of connected devices. Various responses suggest checking the default gateway, using command line tools to verify network settings, and resetting the router to factory settings as potential solutions. The user confirmed the model as TP-LINK TD-W8901G and expressed concerns about losing internet access after a reset. Ultimately, after resetting the router, the user regained access to the settings, but continued to experience issues with DNS settings and potential vulnerabilities. Recommendations included changing default passwords and considering a router upgrade for better security.
Summary generated by the language model.
ADVERTISEMENT