Angela the Bandwidth Bandit

Fayshun · 06-11-2006, 22:03

I updated the firmware on my router a couple of weeks ago and like a Berk I didn't check the settings afterwards. I know, I know...

Recently I installed the AOL active security monitor and much to my dismay there's another computer stealing my bandwidth, name of ANGELA, running Windows XP apparently.

I know I should sort my wireless security out but before I do, I fancy a little detective work! Any pointers? Yeah I know, Misuse of Computers Act, but yadda, yadda, it's my bandwidth.

Mods, if this isn't allowed please delete.

Messiah Khan · 06-11-2006, 22:20

Can you find the IP out and do a tracert on the IP. That might reveal something.

Mark · 06-11-2006, 22:24

It'll be an internal IP address assigned by the router, so no.

If you have/can get hold of a wi-fi 'sniffer', you can go hunting, or you can turn on the router's logs (assuming it has any) and see if the website trail gives any clues. Other than that, it's 'misuse' time I guess.

If all else fails, block the machine's mac address and see what happens next.

leowyatt · 06-11-2006, 22:25

If someone was stealing my bandwidth I'd do some poking around. Saw this article on digg, don't know if it will be any use

Will · 06-11-2006, 22:31

Ethereal is a good packet sniffer if you want one.

It's pretty easy to find out what/who it is... you can probably dig into their system if you really wanted... but we shan't go into this here

Dr. Z · 07-11-2006, 02:17

ARP poisoning is the way to go here if you want to really find out what they are using your connection for. With a built in access point/router combo there isnt really a better way.

Finding a geographical location isnt going to be easy though, her card is going to be in infrastructure mode - safe to assume she is within 2-3 houses in any direction of you though.

kaiowas · 07-11-2006, 09:55

If you happen to catch her whilst she's actually connected you can always try the old favorite of seeing if she has any shared folders set up, never know what you might find

Rich_L · 07-11-2006, 11:47

Hehe or get her IP and if she's still got Windows Messenger enable start net sending her messages like "I'm watching you"

Garp · 07-11-2006, 12:25

Simple:

find out the MAC address (Should be in the DHCP section of the routers config, alongside the IP its been assigned), then block the MAC address. If you're lucky the person won't know how to change the MAC address on their machine, if its capable of it (most aren't)

Will · 07-11-2006, 13:31

You can get 3rd party software the spoof mac addresses easily enough... but as you say I doubt they'll know how.. Besides he can just bang on an encryption key and the problem is resolved... though even 128bit WEP is fairly easy to crack now days as long as you've syphened off enough data.

06-11-2006, 22:03	#1
Fayshun Rocket Fuel Join Date: Jun 2006 Location: Adrift in the Orca Posts: 6,845	Angela the Bandwidth Bandit I updated the firmware on my router a couple of weeks ago and like a Berk I didn't check the settings afterwards. I know, I know... Recently I installed the AOL active security monitor and much to my dismay there's another computer stealing my bandwidth, name of ANGELA, running Windows XP apparently. I know I should sort my wireless security out but before I do, I fancy a little detective work! Any pointers? Yeah I know, Misuse of Computers Act, but yadda, yadda, it's my bandwidth. Mods, if this isn't allowed please delete. __________________ We must move forward not backward, upwards not forward, and always twirling, twirling, twirling...

06-11-2006, 22:20	#2
Messiah Khan Long Island Iced Tea Join Date: Oct 2006 Posts: 181	Can you find the IP out and do a tracert on the IP. That might reveal something. __________________

06-11-2006, 22:25	#4
leowyatt Chef extraordinaire Join Date: Jul 2006 Location: Infinite Loop Posts: 11,143	If someone was stealing my bandwidth I'd do some poking around. Saw this article on digg, don't know if it will be any use __________________ "Dr Sheldon Cooper FTW!"

06-11-2006, 22:31	#5
Will BBx woz 'ere :P Join Date: Jan 1970 Posts: 2,147,487,208	Ethereal is a good packet sniffer if you want one. It's pretty easy to find out what/who it is... you can probably dig into their system if you really wanted... but we shan't go into this here __________________ *No No!*

07-11-2006, 02:17	#6
Dr. Z I'm going for a scuttle... Join Date: Jul 2006 Posts: 2,021	ARP poisoning is the way to go here if you want to really find out what they are using your connection for. With a built in access point/router combo there isnt really a better way. Finding a geographical location isnt going to be easy though, her card is going to be in infrastructure mode - safe to assume she is within 2-3 houses in any direction of you though. __________________

06-11-2006, 22:24	#3
Mark Screaming Orgasm Join Date: Jul 2006 Location: Newbury Posts: 15,194	It'll be an internal IP address assigned by the router, so no. If you have/can get hold of a wi-fi 'sniffer', you can go hunting, or you can turn on the router's logs (assuming it has any) and see if the website trail gives any clues. Other than that, it's 'misuse' time I guess. If all else fails, block the machine's mac address and see what happens next.

07-11-2006, 09:55	#7
kaiowas The Stig Join Date: Jul 2006 Location: Fightertown USA Posts: 1,458	If you happen to catch her whilst she's actually connected you can always try the old favorite of seeing if she has any shared folders set up, never know what you might find __________________ Anal Fish Porn

07-11-2006, 11:47	#8
Rich_L Dr Cocktapuss Join Date: Jul 2006 Location: Seven Sizzles Posts: 1,044	Hehe or get her IP and if she's still got Windows Messenger enable start net sending her messages like "I'm watching you" __________________

07-11-2006, 12:25	#9
Garp Preparing more tumbleweed Join Date: Jun 2006 Location: Hawaii Posts: 6,038	Simple: find out the MAC address (Should be in the DHCP section of the routers config, alongside the IP its been assigned), then block the MAC address. If you're lucky the person won't know how to change the MAC address on their machine, if its capable of it (most aren't) __________________ Mal: Define "interesting"? Wash: "Oh, God, oh, God, we're all gonna die"?

07-11-2006, 13:31	#10
Will BBx woz 'ere :P Join Date: Jan 1970 Posts: 2,147,487,208	You can get 3rd party software the spoof mac addresses easily enough... but as you say I doubt they'll know how.. Besides he can just bang on an encryption key and the problem is resolved... though even 128bit WEP is fairly easy to crack now days as long as you've syphened off enough data. __________________ *No No!*