Hacking my 3GIG ???

[Cyberpred]

One of my Clients who i set up for adsl with a dlink 500g reached their 3gig limit for the first time over Jan. So they asked me to check that no one had any peer to peer software on their PC at work.

I found none so then checked their userstats on line and found that there was a 4gig upload over a weekend (friday - saturday). The Funny thing is that the client was oversees at the time. I then contacted by ISP who but me on to TELKOM adsl help.

They say that someone must of hacked into my modem and then "stole" my 3gig limit by using my ADSL modem.

Question 1: HOW THE [!] DID THEY DO IT?
Question 2: I did not change the ADSL router password (my fault)[:I] but would they not need my adsl isp password (ISP fault)[!]?
Question 3: how do I stop it happing again?
Final Question: Should TELKOM be able to monitor this crime or stop it?

 

[freeek]

Hi.

My bro-inlaw had the same problem many times. It might not be that someone hacked into your account. It's virus's. certain virus are structured to send files to others. mydoom is one of them which sends something to microsoft.com constantly. Think about it this way the virus can send so many little attacks coz its on broadband.

This sucks and isp should not count this as part of your bandwadith. It just sucks!

..- dot dot dash

 

[Cyberpred]

I did check for virus's and the PC's were clean. Even if it was a virus I still thing 4gig in one session is a bit much for a virus upload.

 

[DLinkSA]

Dear All,

I've you are running a DSL-500G/504G please change your default passowrd under admin and user config, also go to services and IPFiltering and disable Public Default Action: as well as DMZ Default Action: and go and change the Security Level: from none to either medium or high or so.

Any further questions please phone me on 012 665 2165 and ask for Technical support on ADSL.


Best Regards,
Herman Janse van Vuuren
Tech Support
D-Link South Africa

 

[HR]

<blockquote id="quote"><font size="1" face="Verdana, Arial, Helvetica" id="quote">quote:<hr height="1" noshade id="quote"><i>Originally posted by DLinkSA</i>
<br />Dear All,

I've you are running a DSL-500G/504G please change your default passowrd under admin and user config, also go to services and IPFiltering and disable Public Default Action: as well as DMZ Default Action: and go and change the Security Level: from none to either medium or high or so.

<hr height="1" noshade id="quote"></blockquote id="quote"></font id="quote">

Does this apply to telkom router pots as well?

 

[Andre]

<blockquote id="quote"><font size="1" face="Verdana, Arial, Helvetica" id="quote">quote:<hr height="1" noshade id="quote"><i>Originally posted by HR</i>
Does this apply to telkom router pots as well?
<hr height="1" noshade id="quote"></blockquote id="quote"></font id="quote">

Yes, change the admin password right away. Disable the Telnet users too while you are at it.

 

[SuperWedgie]

Have you checked the log for the SMTP server, I came into work one monday to find that our server had been busy selling viagra all weekend. We had unwillingly sent out over 30000 spams.