Telkom doing nothing about ADSL hackers

[Dr Seuss]

We have had ADSL through Telkom for about a year now, paying around a grand a month. Every month we are hacked up to 20 gigs (our cap is 3 Gigs) and are cut off without a warning e-mail or phone call.
The reason we know we were hacked, is because Telkom personnel told us so!!! They are unwilling to do anything about it.
Trying to sort it out with Telkom is out of the question - hours of calls later, we were referred to the abuse dept, who has no contact nr, just an e-mail address from whom we are still awaiting a response (for 6 months).
Anyone else had the same problem?
Telkom has also informed us that the problem is in the router, which has an open port that cannot be protected.

 

[Archi3]

Phone Telkom and ask them to change your account password, then change the password on the router, the hackers r most probably using the default password of the router to gain access and get your username and password. Change that and you should be fine! I think you can also change you ADSL password on the Telkom website, not exactly sure where.

Archi3

 

[Dr Seuss]

Been there, done that, got the T-shirt
Everytime it's the same. Telkom has even told us to report it to the police and lay charges - against whom???!!!

 

[JayT]

block inbound traffic to ports 254 and 255 on the router and disable web admin access.

You could also look at using a broadband router (not marconi) to connect the telkom router to create the connection. You'll need to set the telkom router to bridge mode though (turns the router into modem only functionality). Then from the broadband router, create a pppoe connection with your username and password. Again, block web access to the router. This should solve the open ports problem.

 

[UnUnOctium]

hmm, it could probably be an inside job, (if by we you mean a SOHO or some other business)

 

[bwana]

Telkom has also informed us that the problem is in the router, which has an open port that cannot be protected.

Spend a few hundred rand and get a better router.

 

[bekdik]

Telkom has also informed us that the problem is in the router, which has an open port that cannot be protected.

What port?

What router?

 

[JayT]

its the marconi routers and ports 254 and 255 are open

 

[Rikus]

its the marconi routers and ports 254 and 255 are open

Close it with silicone.

 

[RazorSA]

Dude,

If the password of the router is changed from the default password, then how are "hackers" supposed to actually login to your router, to get your username and password?

How are they able to target you each month? You have a dynamic IP address.

Are you sure that it is not somebody you know that is using the bandwidth?

@police charges: You just open a case of fraud. Then get on the police's ass. They will be able to determine which line (e.g. 021 714 5896) connected to the internet using YOUR ADSL username. There is your suspect. E-A-S-Y.

~R

 

[NoRulez]

Phone Telkom and ask them to change your account password, then change the password on the router, the hackers r most probably using the default password of the router to gain access and get your username and password. Change that and you should be fine! I think you can also change you ADSL password on the Telkom website, not exactly sure where.

Archi3

http://www.telkomsa.net/
On the left is a button named "Password Tool" under the "My Tools" tab. Works fine and changes are realtime.

Dude,

@police charges: You just open a case of fraud. Then get on the police's ass. They will be able to determine which line (e.g. 021 714 5896) connected to the internet using YOUR ADSL username. There is your suspect. E-A-S-Y.

~R

Telkom can also give you the number from which your account has been accessed - just phone & ask.

 

[JayT]

If the password of the router is changed from the default password, then how are "hackers" supposed to actually login to your router, to get your username and password?

You can still connect to the router even with the admin password changed. The only difference is that you cant change the details. If you right click and view source on the admin page, you can also see the password in clear text. As you can see the password and the username, the hackers can then use that account detail from any other modem/router and steal the bandwidth.

 

[stoke]

I'm doing a wittle hexxperimint ...
I am not using my teklom ADSL account till about the 20th of the month.
I wanna see how much dissapears all on it's little ownsome.

 

[w1z4rd]

Do you have an open wireless networks? or a wireless network setup with the default marconi u/p?

How do the ports 254 and 255 effect any of this?

 

[RazorSA]

You can still connect to the router even with the admin password changed. The only difference is that you cant change the details. If you right click and view source on the admin page, you can also see the password in clear text. As you can see the password and the username, the hackers can then use that account detail from any other modem/router and steal the bandwidth.

Dude, WHAT router are you using ??? This sounds like a pathetic model to me that you can still view all of the details, just not change stuff....

 

[JayT]

ports 254 and 255 are part of the telnet access which also shows the username and password.

RazorSA, I don't use marconi The problem is the marconi routers which telkom is handing out like there is no tomorrow.

 

[Dr Seuss]

I'm gonna reveal my absolute lack of knowledge when it comes to this stuff - I've passed the info on to my better half who would know what to do with it!
Thanks very much for the tips - it just is not worth the srtess of contacting telkom to sort it out. I just end up abusing the poor innocent person on the line out of sheer frustration. Telkom has given me no indication that they might be able to trace these guys - perhaps I was just speaking to the wrong person?

 

[crafter]

Is there no Firmware update for the router to fix the problem?

 

[guest2013-1]

First step, get a Web Africa account
Second step, cancel Telkom

Fine, you won't be soft capped, but you have the ability to make your line "DSL Secure" meaning, when that is turned on on Web Africa's side ONLY you (using your ADSL line) would be able to connect with your user name and password because it's based on the port number telkom assigns you at the DSLAM

If thats too technical for you, basically, you lock your account into only accepting your user name and password on your line and won't be able to use it anywhere else unless YOU allow it.

Thats the most secure you'll get...