Hijacked:(

Ham

New member
Well, it seam some cheaky f***er is nicking my bandwith.

Observe:

get.php


I noticed this yesterday while my connection was being slower than normal (yes, that is possible). So pesterd my sister and she kindly informed me it had been sluggish all day. Checked the above list to find this 'williams' on the network.

Right u little s*** i think, enable MAC address filtering, asign one to my sis', me and the family PC & restart the router. but the bugger has magicly assigned himself an address on the router restart. Deleted that, but hes still there!

And since hes been there my upload speed keeps falling. Normaly 288kbps, yest it fell to 129 and today i come home to find 90.

So a few things:

Does DHCP assign MAC addresses? If so would disabling it be good?

Any way i can kick this bugger?
 
Ham said:
So a few things:

Does DHCP assign MAC addresses? If so would disabling it be good?

Any way i can kick this bugger?

Are you sure your PC isn't having a split personality moment? :P

Nah, best thing is to enable WPA, and MAC addresses are in the adapter, not assigned, so in theory you should be able to limit it to your own mac addresses, but they can be spoofed.

Dave
 
Im thinking i may have a virus. The only computer with power going thru it in the house is mine.

With wireless disabled, the WPA on when the wireless is enabled.

Pulled the plug out the router, reconnect & it registers him and not me, then a few minutes later i appear on the list.

WTF!!!
 
try connecting to the machines C:

\\192.168.2.5\c$

See if it'kll let you on and have a browse around. If it turns out that it is a hijacker, wipe out all the files on his C:
 
name='Ham' said:
I take it i put this into windoze explorer?

yea, If it asks for a password try either William, or Administrator as the username :) (just a guess on the first one)
 
search google for a program called lanspy and then run it on his ip address. will tell you lots of information about his machine.
 
If u can get on to his rig, we can even have some fun and pop out his CD drive. That should freak the f**ker out ;)
 
Well after a annoyed few hrs im back online. Had to hard reset the router to get back on after it decided none of my computers were worthy of connecting to it.

The masked thief is gone from my DHCP list.

Now i start hunting for a new router as this is a plain pos and now my dad agrees.
 
Not to make a comment just to make you feel better, but often when engineers do work on a local level, things like this can happen. The name coming up in the list can sometimes just be a ghost of things that have happened. Particularly if you at the same time get a feeling like your bandwidth is hijacked.

What happens is something to the effect of: engineer comes in, allocates a % of your areas bandwidth to a name (random); the work getting done happens on the newly created name, whilst yours retains it`s integrity but at a lower bandwidth, then when the work is done it should be cleared up and all goes back to normal. What they don`t realize, or don`t appreciate, is that alot of routers don`t seek to renew names and clear them if they no longer exist, a reset of the router will do this usually. Alot of ISPs will just cut all their customers off instead of doing this, then fix em back up after, which can also need a router reset to get a proper IP and not one the modem has hunted for which can be a service IP. This work can be anything from replacing/updating parts to adding nodes for new groups of customers. If they have added support for more customers, you should experience a very very very small reduction in bandwidth as you`r connected now, as all customers in your area will share a connection to a certain extent (in simple terms you all ultimately go down 1 cable, and now there`s more of you).

This is just a heads up, not necessarily what`s happened in your case.
 
Back
Top