ADSL 26GB data vanished

P

Purply

Expert Member
Joined
Mar 4, 2013
Messages
4,057
Reaction score
251
Location
Bellville
I was busy playing some Dota 2 on Sunday when all of a sardine I got a notification that I only have 3GB remaining on my 40GB account, which was rather odd as I checked the day before and had 28GB remaining at the time.

About an hour later my account was capped, so was forced to switch over to my secondary ISP. Upon doing so I noticed my pc/tv/cell wasn't able to connect to my WIFI anymore.

Turned off the router for about 5 minutes(even unplugged it), but still no luck. Decided to reset everything to factory default, but that also didn't solve the problem.

I then changed all the passwords and deactivated the WIFI and connected pc via cable, only then did my internet work again.

My question is, where did all my data go and why is my WIFI now broken?

Could it be due to the WIFI now being fubar that it magically ate data for pure pleasure of it, or did someone hack into it and somehow took control of who can use it? (it's disabled now, so not sure how that would work)

Checking the ISP usage console relieved that between 11am-9pm about 2.3-2.5GB was used every hour until it got capped.
 
Looks like someone managed to get on your Wifi network and downloaded a bit.

Is it a 4Meg line?
 
No, 10Meg line

Also figured that must have been it, just wondering why the WIFI is now fubar.

Will probably end up buying a new router it seems.

Would love to know how someone would hack it as it's a very unique username/password
 
Was the routers username AND password changed by you? Some people only change the password and leave the username default.

You might want to disable SSID broadcasting as well.
 
It's not your username/password that gets hacked, it's the wifi security protocol.

What do you use on your router?
This might be outdated advice already, but you should always try to at least use WPA2 or better.
 
Pienats said:
It's not your username/password that gets hacked, it's the wifi security protocol.

What do you use on your router?
This might be outdated advice already, but you should always try to at least use WPA2 or better.
Click to expand...

I know it's the WiFi that gets cracked, but how do you think the OP couldn't access the WiFi? Because the attacker accessed the router and changed the WiFi password I assume.
 
WIFI security settings have always been on WPA-PSK (TKIP) + WPA2-PSK (AES)

I never leave anything default, the router login details are unique, same goes for the WIFI password.

The username/password wasn't changed, same for the WIFI one. Only after I realised I might be hacked did I go and change everything.

Thanks for the SSID broadcasting tip, will look into that a bit more.
 
Rickster said:
I know it's the WiFi that gets cracked, but how do you think the OP couldn't access the WiFi? Because the attacker accessed the router and changed the WiFi password I assume.
Click to expand...

I understood WiFi stopped working altogether, even after changing passwords to (new) known values.
Might be that the router is just on the fritz....
 
Check your data usage on all your devices that are connected to the WiFi. You might have a glitchy app that might be in a downloading error loop. I had an issue on my old tab 10.1 with a keyboard app. It was trying to sync and ate through a few gigs while on charge.
 
Hempiz said:
Check your data usage on all your devices that are connected to the WiFi. You might have a glitchy app that might be in a downloading error loop. I had an issue on my old tab 10.1 with a keyboard app. It was trying to sync and ate through a few gigs while on charge.
Click to expand...

Not entirely sure how one would go about checking WIFI usage on pc/tv after the fact?

Cellphone was easy enough.
 
Make sure none of your devices are connected to Google Plus. I remember another thread whereby his phone used 2.8 gb of data, culprit turned out to be Google plus.

Did you've any updates scheduled perhaps like Windows updating to the latest OS or something. If you do intend to enable wifi again makmake sure you add mac address to every device.

Also change your hotspot SSID

Internet suspended
Connection lost
Suspended
Spotted you
I see you
GET OUT.

Monitor your usage.

Hope you not using that free router FON
 
RichardG said:
Make sure none of your devices are connected to Google Plus. I remember another thread whereby his phone used 2.8 gb of data, culprit turned out to be Google plus.

Did you've any updates scheduled perhaps like Windows updating to the latest OS or something. If you do intend to enable wifi again makmake sure you add mac address to every device.

Also change your hotspot SSID

Internet suspended
Connection lost
Suspended
Spotted you
I see you
GET OUT.

Monitor your usage.

Hope you not using that free router FON
Click to expand...

PC is always signed into Google Plus, but I have no way of checking bandwidth usage as I have no active monitoring tool installed, unless Windows 8.1 comes out with something pre-installed?

Will check windows update history when I get home.

Nah just the standard telkom wifi router.
 
Found this bit of information under my router logs:

DOS Attack] : 2 [FIN Scan] packets detected in last 20 seconds, source ip [185.31.19.211]. Sunday, Jun 14,2015

This occurred a few times in quick succession, must have been a brute force hack or whatever.

The good news is I have managed to get everything up and running again, all usernames/passwords changed and SSID Broadcasting disabled. I've also created a mac specific access only list for my connected devices.

Holding thumbs!

Thank you for all the valuable input :)
 
You could also swap to pure WPA2-PSK (AES) instead, it is slightly more secure than running dual. I assume you don't have ancient devices connected to the WiFi?
It might also speed it up a bit.
 
Yes indeed I've switched to WPA2-PSK(AES) only, no need for anything else :)

Don't have any issues with speed luckily.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X