Cisco changed the address on its own

[sapigaroman]

Cisco IE3300-8T2S with IOS XE17.6.3 changed the IP. I don't do it. This stopped production due to an address conflict

[Enes Simnica]

hello @sapigaroman based on the entry:  *Jul 30 05:37:33.690: %SYS-5-CONFIG_I: Configured from console by vty0 . This clearly shows the IP change (or config change) was made via remote access (vty0),  meaning someone logged in and changed it manually. U may want to check who owns those IPs or restrict VTY access using ACLs.

check these and let me know how it is going: https://pingmynetwork.com/academy/ccna-200-301/syslog-cisco/

https://support.huawei.com/enterprise/en/doc/EDOC1100276721/37499148/configuring-acl-based-login-control-for-the-vty-user-interface-of-aps 

-Enes

[balaji.bandi]

Do you have any Audit in Place, so you can audit and check who changed it.

also check if you have backup then change back to the original IP - based on the backup

check how to secure :

https://www.cisco.com/c/en/us/support/docs/ip/access-lists/13608-21.html