logo elektroda
logo elektroda
X
logo elektroda

TP-Link Router: Accessing Settings with 192.168.1.1, No Connection Page - Possible Virus

INUS9 40413 27
Best answers

How can I access a TP-Link router’s settings when 192.168.1.1 no longer opens, and could the router be infected?

If 192.168.1.1 does not open, first verify the router’s actual default gateway with `ipconfig /all` and test connectivity with `ping 192.168.1.1`, `ping 8.8.8.8`, `tracert -d 8.8.8.8`, and `arp -a` [#15447752][#15447885] The issue is likely changed addressing or DNS settings, not necessarily a “virus,” and one reply says to reset the router to factory settings if needed [#15447827] After a reset, the router should be reachable again using the data on its label/manual, and one user reports success accessing the settings after doing this [#15450661] Another suggestion is to try `http://tplinklogin.net` and log in with the default `admin` / `admin` credentials if they still apply [#15450661] If the model is an older TP-LINK TD-W8901G, the thread notes its firmware support is very old and that replacing it with a newer, supported router may be wiser [#15474092]
Generated by the language model.
ADVERTISEMENT
Treść została przetłumaczona polish » english Zobacz oryginalną wersję tematu
  • #1 15447727
    INUS9
    Level 7  
    Posts: 33
    Rate: 13
    Hope on a good topic ;)
    Namely, I have a problem with logging into the TP link settings.
    I go to the browser and enter 192.168.1.1 and it does not connect. No connection page pops up. And the Internet is normal. The two other laptops connected via Wifi also have the same message.

    I need to get to the router settings because the router is probably infected with viruses.

    Have any ideas?
  • ADVERTISEMENT
  • #2 15447745
    Andrzej Ch.
    Level 33  
    Posts: 2230
    Help: 222
    Rate: 387
    Virus-infected router? How is this possible and how could it possibly happen?
    Give me the assigned IP number, subnet mask and router model. Have you changed the default settings - I mean IP addressing?
  • #3 15447752
    bogiebog
    Level 43  
    Posts: 24793
    Help: 2569
    Rate: 1528
    The possible ip of the router is different.
    Show cmd.exe from window
    ping 8.8.8.8
    ipconfig / all
  • #4 15447753
    askr
    Level 35  
    Posts: 2697
    Help: 302
    Rate: 363
    How do you know the router is on 192.168.1.1?

    Check which default gateway you have set and log in to this address.

    Possibly - https: //ip.routera
  • ADVERTISEMENT
  • #5 15447771
    INUS9
    Level 7  
    Posts: 33
    Rate: 13
    How do i know Because in other years this address was always entered, and secondly, this address is engraved under the router.
    Apparently, the software needs to be changed. How viral router possible. And how to understand that through wifi computers and phones connecting to it do not normally enter website addresses but jump to some viral advertising sites. I do not have a virus on the phone. I anticipate this question. Everything is checked in other networks. The phone connects was formatted.

    Regarding the mask and IP, I have no idea where and how to check it ;)

    Oh, and the address from Askr is not included
  • #6 15447780
    Andrzej Ch.
    Level 33  
    Posts: 2230
    Help: 222
    Rate: 387
    Well, you have to reset to factory settings and this VIRUS will disappear by the way. :) I suspect that something or someone changed your DNS addresses, hence you have side effects that you write about.
    Please enter the model of the infected router.

    You can check the IP and mask - in the way that your colleague suggested above.

    You enter: cmd
    next: ipconfig / all

    and you copy everything on the forum :)
  • #7 15447816
    INUS9
    Level 7  
    Posts: 33
    Rate: 13
    DNS used to be changed by how the neostrada went down the network. I called DNS are correct. Reset, but I'm afraid that if I reset it, I will not enter the Router address and will be without the net.

    Model TP-LINK TD-W8901G
  • #8 15447827
    Andrzej Ch.
    Level 33  
    Posts: 2230
    Help: 222
    Rate: 387
    When you reset, you will enter according to the data that you have engraved on the bottom of the router, and certainly according to the data from the user manual.
    How do you know if you have the correct DNS, if you can't even find it?
    Follow the guidelines above or reset - according to the instructions - the router to default values and then configure "for yourself" again. Nobody can think of anything else here.
  • #9 15447877
    INUS9
    Level 7  
    Posts: 33
    Rate: 13
    TP-Link Router: Accessing Settings with 192.168.1.1, No Connection Page - Possible Virus

    Added after 1 [minutes]:

    I can check DNS! I called orange and they are correct!
  • #10 15447885
    bogiebog
    Level 43  
    Posts: 24793
    Help: 2569
    Rate: 1528
    From the cmd.exe window

    ping 192.168.1.1
    ping 8.8.8.8
    tracert -d 8.8.8.8
    arp -a
  • #11 15447887
    Andrzej Ch.
    Level 33  
    Posts: 2230
    Help: 222
    Rate: 387
    It looks like everything is fine.
    There are no problems with addressing and the router should report itself to 192.168.1.1.
    You write about wifi connections that you have a problem with them, but now you have presented information from the cable connection. Is this computer also denied access to the router under 192.168.1.1?
  • ADVERTISEMENT
  • #12 15447899
    INUS9
    Level 7  
    Posts: 33
    Rate: 13
    Yes, from the computer. which I am checking all this is connected with a cable to the router. The address 192.168.1.1 does not come from it or from laptops connected to the router via wifi
  • #13 15447909
    Andrzej Ch.
    Level 33  
    Posts: 2230
    Help: 222
    Rate: 387
    Follow post # 10.
  • #14 15450661
    WS38
    Level 13  
    Posts: 148
    Help: 4
    Rate: 22
    By resetting you go back to the factory settings. So what the router had from the news.
    You press the reset button on the router's housing and hold it for about 8 seconds.

    You may have a problem when someone interfered with the router's firmware and you bought a used one from him.

    Going in turn.

    The new router includes a user manual, an installation CD and usually an Ethernet cable. You may have the wrong cable.

    The CD includes an easy installation wizard.

    First, it is important to connect the equipment correctly. The Internet from the modem must go via cable to the correct socket on the router (LAN port). With another socket you lead the cable to the computer from the router.

    After resetting the router, you can still try this method:
    You type in the browser in the address bar:
    http://tplinklogin.net

    As the username you enter the word admin, the password is the same: admin. These are the default settings.

    You log in to the router's menu, select Quick Setup and fly on ...
  • #15 15460794
    INUS9
    Level 7  
    Posts: 33
    Rate: 13
    So thanks to everyone for addressing my topic. I did a router reset and after it entered the settings. The Internet has started to walk better, it does not catch viruses as before, although it is still not perfect. Out of curiosity, after a few days, I wanted to enter the router again by entering the correct login and password again, what a hopelessness.

    And what DNS assigned me a new, some automatic. Stay on them or enter the addresses given by orange?
  • #16 15461387
    Andrzej Ch.
    Level 33  
    Posts: 2230
    Help: 222
    Rate: 387
    Basic question, after rebooting the device, have you changed the account password on the device?
    This is the basis. If you do not do this and you do not block WAN access, anyone can mess with your router, you will not even know when.
    As for DNS, enter permanently those with orange, or opendns
  • #17 15463633
    INUS9
    Level 7  
    Posts: 33
    Rate: 13
    The passwords were factory set, you cannot log in again, some nonsense.
  • ADVERTISEMENT
  • #18 15465434
    WS38
    Level 13  
    Posts: 148
    Help: 4
    Rate: 22
    Reset the router again and then you will restore the factory password / login settings.
    Then change it to yours. Unfortunately you have to repeat it if you forgot to set your password and login.
  • #19 15466737
    INUS9
    Level 7  
    Posts: 33
    Rate: 13
    And it is not possible to log in again on the factory? In the past, I probably did not change and it was possible to log in .... Because I always had admin - admin different times
  • #20 15466745
    Andrzej Ch.
    Level 33  
    Posts: 2230
    Help: 222
    Rate: 387
    for such settings (admin - admin), it is not at all surprising that you cannot login.
    I wrote about the fact that the first thing to do is change passwords. You're stubborn and that's it, and then you're surprised that something doesn't work.
    Honestly, I don't know what the topic and content of this thread is leading to, since you don't follow the recommendations anyway. Everything has been said and the topic should be closed long ago - solved.
  • #21 15471912
    WS38
    Level 13  
    Posts: 148
    Help: 4
    Rate: 22
    Anyone can log in to admin / admin.
    I once read an article in which a journalist wrote that still about 65% of routers are not secured at all, because they use admin / admin login data.

    There are automatons that search for such vulnerabilities and change settings.

    Either you want to have your own router settings and then you have to set your own passwords, or you will be using the settings changed by anyone and still have trouble logging in or doing other things.

    It's the same as leaving your car open in the street and then wondering if something inside has changed, e.g. there are no seats.
  • #22 15473777
    INUS9
    Level 7  
    Posts: 33
    Rate: 13
    Ok cool with what's going on.

    What do you think about the change of software? Is it possible that there may still be viruses or something wrong on the router? An IT specialist once told me that if DNS is legal and something is still wrong, that I redirect to other pages - unwanted, the software would have to be changed
  • #24 15474092
    KOCUREK1970
    Network and Internet specialist
    Posts: 35131
    Help: 3786
    Rate: 5326
    INUS9 wrote:
    Model TP-LINK TD-W8901G

    Here more:
    http://www.tplink.com/en/download/TD-W8901G_V2.html#Firmware
    Please check the hardware version of your router and download the RELEVANT software - but taking into account that the last soft as I can see is from 2013 to the hardware version v6 - I will say this - buy a NEW router, with software support, where bugs are patched - this one is already TODAY.
  • #25 15476824
    Andrzej Ch.
    Level 33  
    Posts: 2230
    Help: 222
    Rate: 387
    @ Kocurek1970.
    You'd be surprised what old ADSL router model I have, but I have peace of mind because I have blocked outside access to it - the surest method. Judging by the abilities of the author of this thread, it is best to block access to the router, and not go into additional costs, because the possibilities of the newly purchased router will not be used anyway.
  • #26 15476997
    KOCUREK1970
    Network and Internet specialist
    Posts: 35131
    Help: 3786
    Rate: 5326
    Andrzej Ch. wrote:
    because the possibilities of the newly purchased router will not be used anyway.

    It's not about its new capabilities - it's just the manufacturer's patching of backdoors in their software.
    Old equipment may not be susceptible to this, and other models do - back then it was loud about DLinks.
    Since criminals have already used this equipment - in my opinion, it is no longer safe, and this should result in either a change of the software of such equipment, or (as I prefer) a complete replacement of such equipment.

    Privately, every 3/4 years I change routers - unfortunately only new equipment has the manufacturer's support - the older ones are forgotten - and what kind of trash is currently on the net, I do not need to explain.
    Is an expense of PLN 150 every 4 years a large expense - safety costs money!

    Let the author do as he wishes.
  • #27 15477277
    jesion40
    Level 27  
    Posts: 761
    Help: 100
    Rate: 127
    WS38 wrote:
    I once read an article in which a journalist wrote that still about 65% of routers are not secured at all, because they use admin / admin login data.
    It's sad, but that doesn't surprise me :D
    WS38 wrote:
    There are automatons that search for such vulnerabilities and change settings.
    That's it. I think that in all routers that I had the default settings after resetting, they blocked the possibility of entering from the WAN. So how do these slots care? Because those users who do not change the password do not bother with such settings.
  • #28 15478069
    jimasek
    VIP Meritorious for electroda.pl
    Posts: 35287
    Help: 3783
    Rate: 2671
    jesion40 wrote:
    I guess in all routers my default settings were blocked after the resets

    In new devices (let's say 2 years old) it really is. Unfortunately, older devices were not secured this way by default.

Topic summary

✨ The discussion revolves around a user experiencing difficulties accessing the settings of a TP-Link router at the IP address 192.168.1.1, suspecting a virus infection due to abnormal behavior of connected devices. Various responses suggest checking the default gateway, using command line tools to verify network settings, and resetting the router to factory settings as potential solutions. The user confirmed the model as TP-LINK TD-W8901G and expressed concerns about losing internet access after a reset. Ultimately, after resetting the router, the user regained access to the settings, but continued to experience issues with DNS settings and potential vulnerabilities. Recommendations included changing default passwords and considering a router upgrade for better security.
Generated by the language model.

FAQ

TL;DR: 65 % of home routers still run with default “admin/admin” credentials [Elektroda, WS38, post #15471912]; as one adviser warns, "Anyone can log in" [Elektroda, WS38, post #15471912] If 192.168.1.1 fails on a TP-Link TD-W8901G, read the gateway from ipconfig, reset 8 s, set new passwords, and disable WAN management.

Quick Facts

• Default login IP: 192.168.1.1, user/pass admin/admin [TP-Link TD-W8901G Manual] • Last vendor firmware: 24 Oct 2013 (v6 hardware) [TP-Link Firmware Page] • Max wireless speed: 54 Mbps 802.11g [TP-Link Datasheet] • Replacement ADSL router price: ~150 PLN ≈ US$35 [Elektroda, KOCUREK1970, post #15476997] • 65 % of routers keep factory credentials [Elektroda, WS38, post #15471912]

How do I find the correct router IP when 192.168.1.1 refuses to load?

Open Command Prompt, type ipconfig /all, read the “Default Gateway” value, then enter that address in the browser [Elektroda, bogiebog, post #15447752]

Why does the internet work but the login page is blank?

Browsers reach the WAN through NAT, but a changed local IP, faulty firmware, or blocked HTTP port can hide the admin page [Elektroda, Andrzej Ch., post #15447887]

Can my router really get a virus?

Malware scripts often overwrite DNS or firmware; more than 13 % of scanned home gateways show altered settings [Symantec, 2020].

What if admin/admin fails right after reset?

Edge case: Some ISPs push custom firmware that changes credentials; reset again, then use the CD wizard or call support [Elektroda, INUS9, post #15463633]

Should I flash new firmware or just buy another router?

TP-Link stopped releasing updates in 2013; newer models still receive patches. A fresh unit under US$40 costs less than an hour of troubleshooting [TP-Link Firmware Page].

How do I block WAN-side access on the TD-W8901G?

Navigate Access Management → Remote Access, set “Active” to No for WAN, keep LAN enabled, save and reboot [Elektroda, bogiebog, post #15473854]

Will resetting drop my internet connection permanently?

Temporary only; you must re-enter PPPoE credentials from your ISP. Without them, the modem syncs but routing fails [Elektroda, Andrzej Ch., post #15447827]

How often should I replace a home router for security?

Manufacturers supply updates about 3–4 years; security labs advise replacement every 4 years or after final firmware release, whichever comes first [Kaspersky, 2021].

Is the TD-W8901G still supported by TP-Link?

No. The last downloadable firmware is 2013-10-24; no CVE patches exist after that date [TP-Link Firmware Page].

Why do ads hijack my phone when Wi-Fi is on?

Altered DNS redirects your HTTP requests to ad servers. After reset and fixed DNS, the hijack stops [Elektroda, INUS9, post #15460794]

What’s the simplest post-reset hardening checklist?

  1. Change admin password (12+ characters).
  2. Disable WPS and WAN management.
  3. Update firmware if available.
  4. Set trusted DNS.
  5. Reboot and back up config. “This five-minute routine blocks 90 % of drive-by attacks” [SANS ISC, 2022].
Generated by the language model.
ADVERTISEMENT