8 Replies - 2173 Views - Last Post: 07 September 2012 - 10:34 AM

#1 Eric115  Icon User is offline

  • coderさん
  • member icon

Reputation: 63
  • View blog
  • Posts: 696
  • Joined: 19-January 09

Stolen Bandwidth

Posted 06 September 2012 - 06:34 AM

Hi all,
Normally I don't have networking issues, but I am at a loss to what is happening at the moment, so here I am asking for your expert advice.
Lately I have been having a problem with my internet bandwidth, a few days before the reset date each month, we would get a letter saying that we have reached 80% of our bandwidth usage (sometimes more), which would have been extremely unlikely. We were on a 10Gb on-peak/unlimited off-peak internet plan, and the only time we downloaded anything was after 8pm (which was off peak in the contract), we were very careful with our downloads before the unlimited, including youtube and things like that. We checked our internet usage records and we found that our heaviest internet usage was at something like 2am in the morning, when every computer in the house was off, the only thing that should have been on the network was a Tivo (which shouldn't have been downloading anything more than 1mb a day). To make sure our wireless was secure, I added a white-list, we have always had a WEP-key on it (not the best encryption, I know, but enough for what we needed, or so I thought), even after adding a white-list, we would still regularly get these from our provider. We called our provider and changed our internet line password, so that no one was "hi-jacking the line" as they put it. So about two weeks ago, we changed internet providers, got a new modem and began using a WPA password. Just two weeks later (today) we got a letter saying that we had used 16GB of our download plan (new plan has more downloads than previous). There is NO POSSIBLE way that we used it, I am pretty sure our neighbors are not on our network, as I check regularly to see who is using the network and I have never seen any devices or traffic that I wouldn't expect to see. We changed our internet line password and are now with a different internet provider. I cannot for the life of me figure out where all our bandwidth is going!
Any help is greatly appreciated. Thanks in advance.

Is This A Good Question/Topic? 0
  • +

Replies To: Stolen Bandwidth

#2 modi123_1  Icon User is online

  • Suitor #2
  • member icon



Reputation: 9201
  • View blog
  • Posts: 34,575
  • Joined: 12-June 08

Re: Stolen Bandwidth

Posted 06 September 2012 - 06:40 AM

Logs.. lots of them. WEP was never really intended to be super secure, right? It was to provide 'about as good enough security as local ethernet cabling'...

WPa2 and a long string is appropriate.

What sort of wifi router are you using? Is it something you can flash it with say Tomato and get better bandwidth monitoring?

http://www.polarcloud.com/tomato
Was This Post Helpful? 1
  • +
  • -

#3 jimblumberg  Icon User is offline

  • member icon


Reputation: 4071
  • View blog
  • Posts: 12,557
  • Joined: 25-December 09

Re: Stolen Bandwidth

Posted 06 September 2012 - 07:05 AM

Also your router may allow you to setup wireless MAC filters so that only the computers you setup can use the wireless connection. You may also want to think about turning off the SSID broadcast, after changing your wireless network name.

Jim

This post has been edited by jimblumberg: 06 September 2012 - 07:06 AM

Was This Post Helpful? 1
  • +
  • -

#4 Eric115  Icon User is offline

  • coderさん
  • member icon

Reputation: 63
  • View blog
  • Posts: 696
  • Joined: 19-January 09

Re: Stolen Bandwidth

Posted 06 September 2012 - 07:06 AM

@Modi123_1 unfortunately I don't think I will be able to do that with my new router. I am using a BoB2 from iinet, it has fairly good logs, although probably not as good as something like tomato. I have a WPA2-PSK key on the router at the moment.
Thanks for your prompt reply.

EDIT:
@Jim,
Thanks for your response, I was using a mac-address filter on my old router but I haven't set it up on my newer router. I will set that up now. If someone was using my wireless network, how far away could the be at maximum (if they were using signal boosting equipment on their end)?
Thanks

This post has been edited by Eric115: 06 September 2012 - 07:13 AM

Was This Post Helpful? 0
  • +
  • -

#5 modi123_1  Icon User is online

  • Suitor #2
  • member icon



Reputation: 9201
  • View blog
  • Posts: 34,575
  • Joined: 12-June 08

Re: Stolen Bandwidth

Posted 06 September 2012 - 07:21 AM

If there indeed is someone tapping into your stuff then mac address filtering and not broadcasting SSIDs isn't really going to be a stop. Both are easily dealt with by a bored/determined person.

Heck - try this.. at night, when no one is up to use the router, unplug it or turn off the wifi connection. See if that stops the usage.

... and yes you can boast a signal with a pringles can or a wok. ;)
Was This Post Helpful? 0
  • +
  • -

#6 jimblumberg  Icon User is offline

  • member icon


Reputation: 4071
  • View blog
  • Posts: 12,557
  • Joined: 25-December 09

Re: Stolen Bandwidth

Posted 06 September 2012 - 07:39 AM

True and true, but the more hoops they have to crawl through the better. And I agree the best way to insure no one is using your connection is to unplug it. Unless of course they have physically connected to your "wired" connection.

Jim
Was This Post Helpful? 0
  • +
  • -

#7 modi123_1  Icon User is online

  • Suitor #2
  • member icon



Reputation: 9201
  • View blog
  • Posts: 34,575
  • Joined: 12-June 08

Re: Stolen Bandwidth

Posted 06 September 2012 - 07:47 AM

Ohhh... maybe the rats of NIHM are using it to stream videocasts. Hahaha..
Was This Post Helpful? 1
  • +
  • -

#8 Eric115  Icon User is offline

  • coderさん
  • member icon

Reputation: 63
  • View blog
  • Posts: 696
  • Joined: 19-January 09

Re: Stolen Bandwidth

Posted 06 September 2012 - 04:35 PM

Well, we turned off the router last night, so I guess we will do that for a while and check if the internet is still being burned.

Quote

maybe the rats of NIHM are using it to stream videocasts.

Lol, I am starting to believe this could be the problem at this point.
Thanks for your help, if you think of anything else let me know. I am planning to call the company either today or tomorrow to see what they have to say about it.
How long would it take someone to crack a WPA secured network? I imagined it would only take a few hours at best if someone knew what they were doing, but what do you guys think?
Was This Post Helpful? 0
  • +
  • -

#9 Lemur  Icon User is offline

  • Pragmatism over Dogma
  • member icon


Reputation: 1368
  • View blog
  • Posts: 3,445
  • Joined: 28-November 09

Re: Stolen Bandwidth

Posted 07 September 2012 - 10:34 AM

View Postmodi123_1, on 06 September 2012 - 09:21 AM, said:

If there indeed is someone tapping into your stuff then mac address filtering and not broadcasting SSIDs isn't really going to be a stop. Both are easily dealt with by a bored/determined person.

Heck - try this.. at night, when no one is up to use the router, unplug it or turn off the wifi connection. See if that stops the usage.

... and yes you can boast a signal with a pringles can or a wok. ;)


Kismet/Aircrack-NG for the SSID and MAC, while using spoofing is simple enough for most any rookie hack monkey to pull off.

You could always force authentication with Kerberos, PPK pairs, or other methods of forced authentication. The most overkill and powerful solution is to drop a routing machine in between your router and your modem/line in. Force a Transparent Proxy and login on the router to gain access, and filter all traffic from things such as torrents or otherwise.

This keeps the kids that are lying about using torrents or the kids that watch porn at 2am and try and hide it. Oh, and you won't catch them if porn is the case, crafty little devils would probably use incognito mode. Short of a keylogger or deep packet inspection you won't catch it. Either two of those could easily take up that bandwidth.
Was This Post Helpful? 1
  • +
  • -

Page 1 of 1