GRRRR Some one downloading on my WEP connection

[Jay]

I should have put WPA on but never got arround it. I found my internet connection was so so slow so I looked at my DHCP and there was another PC....

Some git has hacked my WEP and then used my connection to download!!

Does any one have any idea how I can find out who they are and how long they have been doing this?

I am a bit P'd off at the moment!

ps

thinking back I have been complaining about a slow 20mb connection for AGES I have only been getting about 5meg from it for about 6 months and I haven't checked my DHCP for longer than that. I just did a speed test and get about 13meg from my connection

[dave87]

Heh, the joys of WEP.

Not suggesting you do this, but see if he's got any shared files...

[Agent]

Now thats annoying.
What router are you using? Does it have syslog support so you can monitor whats being viewed/downloaded over it? That could really help in finding out who it is (forums being visted, sites, username/password in HTTP POST headers, any unencrypted data etc...)

[Jay]

I use a WRT54G

I don't want to allow them back on but I could setup a Squid server. I am just worried about what it is they are using my connection for? Maybe they are cheap arses or maybe they are pedos...

I can't take the risk but I really want to find them and chop their fingers off.

[Agent]

Depends if you want to spend the time setting a honeypot up
Could be a nice project.

And cut their fingers off? Just contact the police with evidence that its been hacked. There have been a few convictions recently for it

edit -
Laptop user convicted of illegal Wi-Fi use - ZDNet UK
Midlands police cuff war driving duo | The Register

hacking the WEP key would be far more serious though I'd imagine that just piggybacking.

[TheAnimus]

how old is the lease? you sure you didn't late a mate who came round with a laptop/mobile check their mail or something?

its unlikely anyone would bother to crack WEP, plenty of un-secured ones about.

so odds are they're an immediate neighbour

[Agent]

how old is the lease? you sure you didn't late a mate who came round with a laptop/mobile check their mail or something?

its unlikely anyone would bother to crack WEP, plenty of un-secured ones about.

so odds are they're an immediate neighbour

Doesn't explain the huge speed increase though?
Un-secured depends where you live. There is only secured around here (Probably because I've set 3 of them up though )

[Jay]

I know it will be some one living near me. They are all secure on WPA so I was asking for trouble, just that my SUSE setup will not work with WPA. Just did another speed test, 0.5mb! I think Telewest are having trouble as well as some git downloading. I expect they will have been torrenting


My DHCP is set for 24 hour lease so it won't tell me anything.

[cougarslam]

wpa just takes 30 seconds longer to crack not really anymore secure.

best thing to do is to put a mac address limit in (only allows pcs with specd mac addresses on)

maybe limit dhcp accounts to amount of pcs you own but then if they forge your mac they could connect and stop you from doing so.

maybe packet sniff them see what info you can get and pass it on to the relevant authorities or post it on the net (prob not legal so i cannot condone this)

[kasavien]

Just out of interest how do you check your DHCP to see who is using the connection?

[Jay]

go into your router and look at DHCP clients.

[Saracen]

I should have put WPA on but never got arround it. I found my internet connection was so so slow so I looked at my DHCP and there was another PC....

Some git has hacked my WEP and then used my connection to download!!

Does any one have any idea how I can find out who they are and how long they have been doing this?

I am a bit P'd off at the moment!

I'd be annoyed too.

May I suggest taking this seriously. All you need is for some unknown individual to be downloading terrorist manuals or kiddie porn. Guess who gets their door kicked in in the early hours by the Boys in Blue?

Okay, perhaps it's unlikely. But ......

[Jay]

should I report it to my ISP? I don't want to get into any trouble here.

[j1979]

nothing wrong with sharing, but when they dont asks its rude, and when they hack its WAR.

id just go call the bacon station, they take this stuff very very seriously, and like the post above says if they are downloading heavy stuff you need to cover your own back.

just be aware that if youve done any torrents or file sharing, you could put yourself up **** creak tho.

[SiM]

tell the cops that you think they might have been downloading illegal child porn or terrorist for dummies guides on your connection... then look out your window at 4am the next morning to see their house getting raided

[Jay]

Linux torrents only for me

I will give this a bit of thought.