Hacking ADSL accounts?

[atkins]

I have a situation where we think that someone is using our ADSL account (with Storm) to use the internet. I was wondering whether anyone else is having similar questions.

After staying within 3Gb for 10 months, our office finished the 3Gb on August 19. So, bought a 5Gb account. Come 19 Sept, the 5 Gb was gone. So, in desperation, bought a 10Gb account. Two-and-a-half days later the new (extra) 10Gb was gone!!

Anyone else out there? Does this sound a little like the telephone technician making calls from the top of a phone pole (except that user names and passwords are much easier to distribute than phone poles)?

 

[bwana]

Have you changed the default password on the router?

Got anyone in the office downloading torrents? Before you say no - are you sure?

 

[.geek]

Have you changed the default username and password on your router (assuming you use a router)?

Also, have you changed the passwords your ISP assigned you (assuming they assigned you a password and you couldn't specify it yourself)?

 

[mancombseepgood]

What about...

Virus? mass mailing worm? This kind of bandwidth may just be cos of a worm...

 

[atkins]

We have 5 users with fair use of email (files of 1mb sent each day), and one of us uses the net heavily. Fair amount of downloads. We also use Skype for maybe an hour per day. But, at about 50K/sec (on a 512 line), 10 Gb would take 55 hours non-stop.

We figured that taking 19 days to use 5 Gb (which we felt was above our own browsing, mail, etc) does not square with then taking two days to slurp up 10Gb.

Have changed password and the ISP has given us back our bandwidth while they investigate. I have also downloaded the SASA ADSL stats analyser to watch and see if extra connections are used. Will also double-check virus, worm issues.

 

[mancombseepgood]

Yeah, change pw is a must. Also, always good to keep tabs on stats on a daily basis if you are admin. Mass mailing worms are not as common as they used to be, but they sure do chew bandwidth. As you can imagine, your connection to your host SMTP server is pretty much direct and gets priority, so these things can send gigs in a day. Hope you get it sorted!
BTW, what kind of routing do you use?

 

[Nokkie]

man i wish i had your speed 10gigs in 2 days

 

[mancombseepgood]

You could... just email yourself again and again

 

[edc]

Someone is using your account, change the password on the router, then change your ISP password, one of your employees are probably using the account also. Monitor the PCs for p2p programs or games.

 

[bwana]

Someone is using your account, change the password on the router, then change your ISP password, one of your employees are probably using the account also. Monitor the PCs for p2p programs or games.

He might have figure that out by now - the thread was from September.

 

[Riq]

roflol