TECHIES, I need some IP log help please...

[TermedPS]

I rent space from my landlord.

He had a static IP address...one of my accounts was suspended at this location.
This was BEFORE I joined this site so I never wrote down the static IP address.

He said he "changed" his service and may now be a dynamic ip.

Is there any way to see an "IP LOG" of some sort on my pc?

Then I could see if the IP in fact has changed.

If not, is there a way to check what the previous IP addy was in some other way?

Thanks in advance...

PS: I would try unplugging the cable modem, but his entire network is on it
so I'd rather not "pull the plug" and get a nightmare without knowing anything about networks.

Unless you already had something implemented for reading and logging the IP, you won't be finding a log of previous IPs.

Best way for you to be certain right now is to visit IP Burger - What is my IP Address? Find Your IP Address! then change the router mac address, then unplug the cable modem for 5-20 seconds, plug it back in and visit IP Burger - What is my IP Address? Find Your IP Address! again to SEE that the IP did change.

Don't be too quick to take his word for the service change. He's biased by his desire to get your money in his wallet continually. Might say anything, just to keep you thinking you are content.

[TermedPS]

I would need to get access to his server or an admin pc for that.

The main problem is that I'm no techie so I don't want to mess with this network at all.

Q: If I simply unplugged his cable modem and replugged it in, would do any harm to his network? I was thinking doing just that.

Thanks for the reply.

To change mac, you don't need access to the server or admin pc. Just the router.

Unplugging and replugging without changing the mac won't accomplish anything. You will still have the same IP when you come back up.

It wouldn't do any harm.

[TermedPS]

Sorry for the newb techie Q's, but how do I get access to the router?

I did a search and found this on the boards..
================

Quote:
What you need to do is change the MAC ID for the ROUTER ONLY. The reason why people still get the same IP is because of this. The original MAC ID is located on the bottom of the router so there is no need to copy or write it down if you ever want to revert back to it later.

The first step is to connect your Ethernet cable from your computer to the router so they can communicate and adjust settings. You do not need to do anything with the cable modem at this time. It will be towards the end.

Open up IE (internet explorer) or Firefox and type in your router address, mine is 192.168.0.1 if you don't know it then look in your router manual or cd that came with your router. Or goto the Run command and type in "cmd" and the ipconfig/all and you will see you router address.

Enter your login name/password if you have it set, mine is "admin" which is default. Now the menus is different for each router company. Just find the option that says MAC ADDRESS and click on it or click on manual settings and you should see your MAC ADDRESS. It looks like 6 boxes with 12 numbers and letters in sets. For example 01-5d-b2-42-f1-65

Now you want to change the MAC ADDRESS by doing the following.
Leave the first box the same. You only have to change the other boxes with numbers from 0-9 and letters from a-f but keeping the letters and numbers in the same position and only changing the value for example 01-4b-c5-31-a3-45

After you have replace them click on save settings or apply settings.
You will lose internet connection at this time. Now the final step is to unplug your router and your cable modem for about a minute or so and plug it back in. give it couple minutes to initialize and check your ip at ipchicken.com

You now have a new IP address. Repeat the process to get a new IP address through your router.
==========================

Q: Is that the correct way?

My setup:

I use wireless to connect to their wireless router - am not plugged into their network. Their workstations are all hardwired with cat5's.

Q: Can I do this on my pc although I am not on their network or do I need to change the mac addy through one of their networked workstations?

I could already see my landlord going ballistic if I crash his network somehow.

Thanks again for your help.

[TermedPS]

PS: Would changing the router's mac addy affect his network in any way?

Thanks again.

It helps a lot if we know what hardware is being discussed. Basically, brand and model of router. Is it Linksys, DLink, Netgear, Asus, Motorola?

You don't have to be part of his network. If you are getting signal from the router, you are able to connect to it. Probably. There is the possibility that he has it configured in a manner which does not permit setup changes to be made via wireless or remote internet.

Would it be a problem for his network if and when you make the change? Only for the time while rebooting the cable modem. UNLESS he has some very customized options for specific applications he uses. The standard normal settings that would commonly be used for his WAN are very unlikely to upset anything he does. Keep a record of the settings before you change them, in the event you might need to restore them.

[GreenBean]

^^^Might this be going out of Termed's ability to work his stealth account? Why not have a check done of his current IP usage?
I checked his log here and this is what I found:
nb: the numbers are not his actual IP numbers but I am showing the pattern.

123.45 xx xxx
123.45 xx xxx
123.45 xx xxx
123.45 xx xxx
123.45 xx xxx

Numbers xx xxx differe with each sign on. Now unless I am incorrect, this suggests a dynamic IP. Therefore Termed should be OK for stealth usage.
Comments?

He could very well BE so lucky.

I suggest a log be kept over a few days. IP Burger - What is my IP Address? Find Your IP Address! every hour and write it down. See what the data says.

[GreenBean]

^^^Agreed. That will be a good solution to keep that log.

To change the mac address is a bit daunting. From my pov, I just would avoid doing it.

Changing mac is actually easier than it seems. The breakdown is like this:

Log into router via web browser.
ROUTER <---- clicky clicky for most of you
login/pw - admin admin or admin password or root root or <blank> admin (my favorite)
navigate to WAN MAC address (usually in admin tab, depends on make/model/firmware-version)
Change last 2 pairs - if MAC is 00:14:25:64:48:01 then just change the 48:01 part (can be digits or letters a-f, I like FA : DE 'cuz its a word)
Save settings
Reboot modem

If you aren't 192.168.1.1, try viewing the status of your connection in network settings. find out your local ethernet ip address. Your router is usually going to be the same IP as your ethernet IP but change the last digit to 0 or 1 and paste the entire address into your browser.
Use THIS LIST if you aren't admin admin

If you are still stuck and I have the time, you can invite me to hack my way into your system and walk you through it for your own education. Sometimes I charge the cost of a GOOD 6 pack. Sometimes I do it as a favor. And NEVER without permission from the owner of the router.

[TermedPS]

Originally Posted by GreenBean

^^^Might this be going out of Termed's ability to work his stealth account? Why not have a check done of his current IP usage?
I checked his log here and this is what I found:
nb: the numbers are not his actual IP numbers but I am showing the pattern.

123.45 xx xxx
123.45 xx xxx
123.45 xx xxx
123.45 xx xxx
123.45 xx xxx

Numbers xx xxx differe with each sign on. Now unless I am incorrect, this suggests a dynamic IP. Therefore Termed should be OK for stealth usage.
Comments?

GB,

I am currently not in my office. I'm running a dsl here, and therefore the ips will be different. Sorry but I should have mentioned that.

[TermedPS]

Originally Posted by GreenBean

^^^Agreed. That will be a good solution to keep that log.

To change the mac address is a bit daunting. From my pov, I just would avoid doing it.

Yes, I am no means a tech, so "daunting" would be an understatement.
HOWEVER, I'm a fast learner!

[GreenBean]

OK, all is not lost. When you signed up for this forum did you use your home computer? 'Cos the info I can check says that it is on a dynamic IP.

[TermedPS]

Originally Posted by vicvelcro

It helps a lot if we know what hardware is being discussed. Basically, brand and model of router. Is it Linksys, DLink, Netgear, Asus, Motorola?

You don't have to be part of his network. If you are getting signal from the router, you are able to connect to it. Probably. There is the possibility that he has it configured in a manner which does not permit setup changes to be made via wireless or remote internet.

Would it be a problem for his network if and when you make the change? Only for the time while rebooting the cable modem. UNLESS he has some very customized options for specific applications he uses. The standard normal settings that would commonly be used for his WAN are very unlikely to upset anything he does. Keep a record of the settings before you change them, in the event you might need to restore them.

Router = Linksys, but I don't know the model #. I will get this tomorrow.

Re- changing the mac from my workstation, at a minimum, I will see if I can get to the router with the standard 192.168.1.1

Beyond checking to see if I can get to the router settings, I will update here before doing anything.

Thanks again for all the help folks!

PS: A six pack = no prob!

[TermedPS]

Originally Posted by GreenBean

OK, all is not lost. When you signed up for this forum did you use your home computer? 'Cos the info I can check says that it is on a dynamic IP.

Yup, I signed up under this computer and location.
But I have logged in from my office too.

If you can check, most of my logins from the office would have been during the day and always the same ip. Most of my logins in the mornings and DEFINITELY nights (after 9pm EST) would be from here and different ips.

I'll be around. If the tips fix you right up, then good on ya.

[TermedPS]

Originally Posted by vicvelcro

Keep a record of the settings before you change them, in the event you might need to restore them.

Vic, worst case, let's say I am able to change the mac addy, and something bad should happen to his network.

If I change the mac addy back to the original, should he in theory get his network back EXACTLY as it was before I made the change?

Correct. As long as you change it back within a window of 6-24 hours (depends on provider). But if something isn't kosher (unlikely), you'll know sooner than that.

So keep track of the TIME and what the MAC and IP are before you make any changes. Then, log what those are afterward, as well.

[TermedPS]

got it, thanks again and I will report back.

[TermedPS]

Ok guys/gals...

I am at my office and I was able to log into the router.

Router = Lynksis WRT54G

Under the "setup" tab, I see the following subtabs:

Basic setup, ddns, mac address clone, advanced routing.

I'm thinking I need to get into the "mac address clone" section?
That's where I see "enable" and "disable" buttons.
Right now, it's set to "disable".

Is this where I need to change the last 2 digits?

00.14.BF.05.XX.XX

Those are the values but are grayed out due to this being "disabled".

Am I in the right section?


PS: Vic - as you mentioned,

"If you aren't 192.168.1.1, try viewing the status of your connection in network settings. find out your local ethernet ip address. Your router is usually going to be the same IP as your ethernet IP but change the last digit to 0 or 1 and paste the entire address into your browser."

Since I am wireless, I checked my wireless network connection status and the IP address is different from the router. My IP is 192.168.xx.xxx

The ip address of the router = 69.116.xxx.xx

[philly387]

Originally Posted by TermedPS

The ip address of the router = 69.116.xxx.xx

That is the address that is coming from the cable modem...the one that ebay will actually see.

check out this thread...

How To Change Ip Address With Comcast

or

[VIDEO] Easy Tutorial how to change your IP Address using a Linksys Router!

[lakeman]

Yes that is the right section to change your MAC, but to make it even easier you don't have to change the MAC unless it won't change the following way. Go to status and click disconnect. Wait about 30 seconds and click connect. Before you do that go to ipburger.com and also go there after to see if your ip changed.

[TermedPS]

Thanks folks, I'm going to wait until everyone leaves the office to try this.

I'll let you know!

[TermedPS]

Somehow, I knew this wouldn't be simple.

Lakeman, I tried disconnect and connect - no use. Also it says "DHCP Release" and "DHCP Renew" rather than connect or disconnect (if that makes any difference).

Before I go any further, I am going to call the landlord and cable company tomorrow. I think it'll be easier just to ask them if he has a static ip or not.

Turns out he also switched his pbx over to Optimum online also. So instead of the standard cable modem he used to have like most of us, now he has a Motorola "SBV5322 SURFboard" Digital Voice Modem (about 2-3x fatter than a reg modem). On the back, there are 2 pairs of 3 wire phone lines going into 2 different ports. Other than that, the other connections are the same as a standard cable modem. Coxial for cable, Cat5, power, etc...

Still, without more knowledge, I don't want to **** with his network, internet connection and now possibly his phone system too.

LMAO, I could just see it now....

Thanks folks, but for now I'd rather play it safe today.

PS: I came THIS close to unplugging the modem, but I didn't want to potentially take his ENTIRE company down. Chicken ****.

[TermedPS]

I will be here for another 15 mins, so if someone who is an expert in Telcomm/IT, can 100% say that disconnecting this modem is safe, then I will try it.

Telcomm/IT = TIT expert? Oops...is that allowed?

[lakeman]

How long did you leave it after you clicked disconnect?

If it is a cable modem, DHCP release won't do it unless you release for 6-24 hours, then renew. You need to change the MAC for in your router in order for the cable modem to re-provision a new IP.

The IP address you mentioned way up there (69.116.xxx.xx) is the WAN IP which belongs to the line itself. That is what you want changed. You local ethernet IP is also called the LAN IP and is the IP of the ROUTER. Go back to your wireless connection in your system tray. Right click, choose status, click the support tab, look at the very first number. Skip the next number and look at the one after that.



WAN is how the world sees you. LAN is how the network sees itself. You don't have to understand any of this for it to work. You can simply do it, and figure out how it works by thinking it backward after-the-fact. Access your router using the LAN number. Change the MAC, and the cable modem will get a new WAN number after you reboot it.

As odd as it sounds, changing a number in one unit for one kind of thing causing a change to a different number in another unit entirely, well... that's how it works.

If you analyze it, it will make no sense. If you do it, it will work. Stop thinking.

http://192.168.1.1 - log in - change mac in the router - reboot the cable modem (not the router).

Done.

[TermedPS]

Originally Posted by lakeman

How long did you leave it after you clicked disconnect?

I left it for about 15 seconds.

[lakeman]

Try 60 seconds, most of the time I have to leave mine for around 30 seconds.

[TermedPS]

Originally Posted by vicvelcro

If it is a cable modem, DHCP release won't do it unless you release for 6-24 hours, then renew.
You need to change the MAC for in your router in order for the cable modem to re-provision a new IP.......

If you analyze it, it will make no sense. If you do it, it will work. Stop thinking.

http://192.168.1.1 - log in - change mac in the router - reboot the cable modem (not the router).

Done.

While I wait for the info from Cablevision,
IF I get lucky and his service is in fact dynamic,
will changing the MAC addy affect his phone system I mentioned?

Thanks for the help.

If his phone system is VOIP, it has it's own MAC that you can't change from within the router. You will only be able to mess with the MAC that belongs to the LAN/WAN portion.

If his phone is not VOIP, then definitely no worries.

Are you sure those are phone lines and not Cat5 or something else? Now I'm getting curious about that setup.

[TermedPS]

Yes Vic, I know for sure they are phone lines.
He has 5 inbound lines coming through his VOIP phone thru Cablevision.
As I said, the modem is a FAT Motorola SURFboarder - digital voice modem.

Ok. Somewhere along the way I missed the part where you said VOIP.

But it's OK, since the VOIP circuit has it's own MAC addy separate from the LAN/WAN.

Aren't you at least reassured that I was asking questions in return?

[TermedPS]

Yes!

I'll report in later. Thanks again.

[TermedPS]

Well I begged for him to call Cablevision and the ratbassturd said
ok, ok...then he gave me some weak-azz excuse about how he had
to leave early and that he would call on Monday.

So I said, F him, I changed the Mac addy and rebooted the
modem after he left. lol

But no luck...

1- The freakin' modem has a backup battery/power supply
because when I pulled the plug, the modem still had the power indicator light on.
Although the other lights went dead, power and the "battery" lights were on.

2- When I replugged the power to the modem, I couldn't get any internet connection.

3- Lakeman - I tried releasing for 30+ seconds....that didn't help.

4- When I put everything back to the way it was, internet was back and the IP was still the same.

I guess I have no choice but to wait for Monday.

Thanks again for all the help.

I'm outta here!

PS: On a COMPLETELY unrelated note, I have cheap tickets to the
Elton/Joel concert in Wrigley. LOL - I do!

It's the backup battery that is getting you. Remove that and reboot, if you can. Or unplug it and let the battery run down. Might be a few minutes, might be hours.

Or force a reboot by unconventional means. A change to the router name "Motorola" to "Notorola", save. Should reboot. Then set it back and save again. Doesn't work on all units, but does for many. One Step Zup would do it from the MIB OID panel.

I'm beginning to suspect your landlord is blowing smoke and has no idea what his connection parameters are, and understands your situation even less. Most people deem something unimportant when they don't understand. So, keep an open mind. If you can't appeal to him, try to go around him another way.

[inverser]

Hope this helps: Hacking Knowledge – Importance of Spoofing your MAC Address » Raymond.CC Blog

[TermedPS]

Ladies and Gentlemen...

We have lift-off!!!

New IP Addy!!

Now I just hope on Monday, my landlord's systems run normally.

If not, this will be my last post. LOL

Thank you for now, if I am alive on Monday, I will "Thank" properly.

Termed

PS: I decided to just "go for it" and hope nothing bad happens.

[GreenBean]

Let's expect a welcome back on Monday. Seems this has worked