Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Please Help - I am using insane amount of Bandwidth


  • Please log in to reply
12 replies to this topic

#1 BruceInc

BruceInc

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:04:31 AM

Posted 11 August 2011 - 08:36 PM

I will try to keep this short and simple. I got a call from my isp Comcast that my computer is using an insane amount of Bandwidth a Month. In the last 3 months I averaged about 1 terabyte of BW a month. I dont know how that is possible. My wireless router is using WPA-PSK [TKIP] + WPA2-PSK [AES] security option with a very random pass phrase that is not likely to be compromised. Comcast told me that for the next 6 months if I go over 250g of BW a month they will be forced to ban my service for an entire year. I cant let that happen so now I am freaking out. I dont usually download a lot of stuff. The only thing I can think of is using Pandora radio a Lot and Playing world of Warcraft for few hours a day. That shouldnt be the cause for such extreme bandwidth usage. I tried scanning my pc using malwarebytes and found nothing, I try to stay on top of my security updates and maintain my pc as clean as i know how. Any ideas or help would be most appreciated. Please help me figure this out and I will do what ever I can to return the favor.

Its only the 11th and I already used up 75% of my BW. I am really worried that my computer is being used by someone (or something) which is causing this issue because I simply cant comprehend using this much BW on my own.

Here is a shot of my recent bandwidth usage

Posted Image

Ty in advance, you guys are pretty much my last resort.

BC AdBot (Login to Remove)

 


#2 jburd1800

jburd1800

  • Members
  • 565 posts
  • OFFLINE
  •  
  • Local time:05:31 AM

Posted 11 August 2011 - 08:50 PM

Someone alot smarter than me will be along. In the mean time, what anti-virus and malware programs are you running?

“May the sun bring you new energy by day, may the moon softly restore you by night, may the rain wash away your worries, may the breeze blow new strength into your being, may you walk gently thorugh the world and know it's beauty all the days of your life.”


#3 g0dsweed

g0dsweed

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:04:31 AM

Posted 11 August 2011 - 09:00 PM

Just to clear up some other basics in addition to jburd...

Does anyone else have physical access to your machine?
You haven't shared your access key with anyone else?
Do you have torrent program running at all?
You have a wireless router, are you the only user in the household?


Do you know how to use Performance Monitor? I would set up a data collection tool and start to measure your bandwidth use... I might could help you set it up if need be.

Edited by g0dsweed, 11 August 2011 - 09:03 PM.


#4 BruceInc

BruceInc
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:04:31 AM

Posted 11 August 2011 - 09:09 PM

I use stock norton that came with my laptop. there is a total of 4 computers on the network. 1 only i have access to, 2 are rarely used. Another is my brother's mac, he has only been home for a month so the problem is not likely to be with his.

I have BitTorrent installed on mine and another computer, but i use the program rarely. Maybe 1 or 2 times a month mostly for downloading mix tapes or catching up on an episode of a show that i missed.

In addition to norton i use MalwareBytes and scan about once a week. CCleaner almost every night before logging off and once a month to keep track of registry errors. I am currently running a rootkit tool which didnt find anything yet and spybot - search & destroy tool which also didnt find anything yet.

My neighbors are not likely the cause because my house is located on a big chunk of land and they arent likely to get my signal, also as i have mentioned before my WiFi is encrypted with a password.

Any logs that would help with the diagnostic?

EDIT: Spybot found 22 tracking cookies which i have now removed

Edited by BruceInc, 11 August 2011 - 09:13 PM.


#5 BruceInc

BruceInc
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:04:31 AM

Posted 11 August 2011 - 09:16 PM

[DoS Attack: RST Scan] from source: 69.47.100.178, port 26778, Thursday, August 11,2011 15:59:20
[DoS Attack: RST Scan] from source: 212.36.55.214, port 49263, Thursday, August 11,2011 15:58:27
[DoS Attack: RST Scan] from source: 67.160.86.39, port 58123, Thursday, August 11,2011 15:57:59
[DoS Attack: RST Scan] from source: 86.12.101.217, port 55068, Thursday, August 11,2011 15:57:52
[DoS Attack: RST Scan] from source: 67.160.86.39, port 58083, Thursday, August 11,2011 15:56:59
[DoS Attack: RST Scan] from source: 50.88.75.15, port 59450, Thursday, August 11,2011 15:56:42
[DoS Attack: RST Scan] from source: 186.220.203.76, port 65184, Thursday, August 11,2011 15:56:40
[DoS Attack: RST Scan] from source: 193.40.243.40, port 50419, Thursday, August 11,2011 15:56:33
[DoS Attack: RST Scan] from source: 8.27.17.20, port 57439, Thursday, August 11,2011 15:55:52
[DoS Attack: RST Scan] from source: 186.220.203.76, port 65001, Thursday, August 11,2011 15:55:12
[DoS Attack: RST Scan] from source: 193.40.243.40, port 50151, Thursday, August 11,2011 15:55:04
[DoS Attack: RST Scan] from source: 50.88.75.15, port 59450, Thursday, August 11,2011 15:54:58
[DoS Attack: RST Scan] from source: 67.160.86.39, port 57990, Thursday, August 11,2011 15:54:43
[DoS Attack: ACK Scan] from source: 67.244.88.116, port 60599, Thursday, August 11,2011 15:54:35
[DoS Attack: RST Scan] from source: 174.23.133.168, port 25470, Thursday, August 11,2011 15:54:06
[DoS Attack: RST Scan] from source: 174.23.133.168, port 25465, Thursday, August 11,2011 15:54:04
[DoS Attack: RST Scan] from source: 68.49.244.201, port 64746, Thursday, August 11,2011 15:53:36
[DoS Attack: RST Scan] from source: 216.218.62.119, port 64709, Thursday, August 11,2011 15:53:30
[DoS Attack: RST Scan] from source: 85.167.139.33, port 53084, Thursday, August 11,2011 15:53:28
[DoS Attack: RST Scan] from source: 85.229.245.216, port 19866, Thursday, August 11,2011 15:53:20
[admin login] from source 192.XXX, Thursday, August 11,2011 15:53:16
[DoS Attack: RST Scan] from source: 63.135.11.86, port 60156, Thursday, August 11,2011 15:51:19
[DoS Attack: ACK Scan] from source: 67.244.88.116, port 62176, Thursday, August 11,2011 15:49:57
[DoS Attack: RST Scan] from source: 174.23.133.168, port 22455, Thursday, August 11,2011 15:49:52
[DoS Attack: RST Scan] from source: 174.23.133.168, port 22461, Thursday, August 11,2011 15:49:52
[DoS Attack: RST Scan] from source: 63.135.11.86, port 63071, Thursday, August 11,2011 15:49:42
[DoS Attack: RST Scan] from source: 85.229.245.216, port 19866, Thursday, August 11,2011 15:48:44
[DoS Attack: RST Scan] from source: 85.167.139.33, port 53084, Thursday, August 11,2011 15:48:44
[DoS Attack: RST Scan] from source: 174.23.133.168, port 21254, Thursday, August 11,2011 15:47:39
[DoS Attack: ACK Scan] from source: 67.244.88.116, port 62305, Thursday, August 11,2011 15:47:08
[DoS Attack: RST Scan] from source: 85.167.139.33, port 53084, Thursday, August 11,2011 15:45:40
[DoS Attack: RST Scan] from source: 85.229.245.216, port 19866, Thursday, August 11,2011 15:45:20

This is a part of my log from wifi router, i did a bit of googling and apparently this is normal
Is it possible that my comp could be used as a bot for DoS attacks?

Edited by BruceInc, 11 August 2011 - 09:20 PM.


#6 BruceInc

BruceInc
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:04:31 AM

Posted 11 August 2011 - 09:48 PM

@Mods: Pardon my ignorance. Please delete this because I am going to post this topic in the "internet & networking" section. Sorry i didnt realize that a dedicated section existed.

#7 coxchris

coxchris

  • Members
  • 1,151 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Atwater
  • Local time:02:31 AM

Posted 12 August 2011 - 11:27 AM

here is my suggestion and I don't know Comcast

you can probably try to call them and ask them to see what data traffic would cause the high bandwidth on your account. you can say I dont know why I pulling down this much data in a month and I have a secured wifi network with highest encryption available at this time and you could request them to watch your account parameters for any unusual traffic.

on your network I commend you for securing your network with WPA. One suggestion with you network is Mac Filtering. Only allow certain pcs or games consoles to access your router (I just telling you suggestions nothing more)

Physical programs like Bit torrents often use your computer for Per to per networking even if you dont have it running people can still use you because of background processes that establish p2p.

Pandora radio if left on probably do it but Comcast is promoting all of the above movies,etc

WOW +/- 5/mb per hour normal questing and heroics +/- 10/mb per hour (10mans raid) 15-25 mb/per hour is 25 mans

I hope this helps

AA in Computer Networking Technology

BS in Information Technology 

Comptia A+, Project+, L+

Renewable:  N+,S+

CIW Web Design Specialist, JavaScript Specialist,  Database Design Specialist 

LPIC-1, SUSE 


#8 Queen-Evie

Queen-Evie

    Official Bleepin' G.R.I.T.S. (and proud of it)


  • Staff Emeritus
  • 16,485 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:My own little corner of the universe (somewhere in Alabama). It's OK, they know me here
  • Local time:04:31 AM

Posted 12 August 2011 - 12:07 PM

You *may* be able to get some answers if you post this in the Comcast Help Forums.

Those forums are provided to Comcast customers, and are a great resource for vendor specific issues. There are forums for computer issues, email issues, security, internet, cable tv, CDV, billing, and customer service.
Many times we, the users there, can provide answers tech support and customer service can't.

Click the link below. The forum landing page will open. Click Sign In. Log in with your Comcast user ID (the part before .net) and your password. You will next see a first time forum users page, asking you to choose a screen name for use in the forums. Once you set that up, you'll be taken back to the landing page. PLEASE DO NOT USE YOUR COMCAST EMAIL NAME FOR YOUR FORUM USER NAME.

http://forums.comcast.com/

Post in Connectivity and Modem.

(Once you get to the forum, save the page to your favorites. If you want to get to it from the Comcast home page, you have to jump through hoops to reach it)

Edited by Queen-Evie, 12 August 2011 - 01:24 PM.


#9 Layback Bear

Layback Bear

  • Members
  • 1,880 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Northern Ohio
  • Local time:04:31 AM

Posted 12 August 2011 - 03:20 PM

Remove your router and hard wire to the internet and see what your usage is.

Remove your router and hard wire to the internet and see what your usage is.

#10 BruceInc

BruceInc
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:04:31 AM

Posted 14 August 2011 - 02:34 AM

You *may* be able to get some answers if you post this in the Comcast Help Forums.

Those forums are provided to Comcast customers, and are a great resource for vendor specific issues. There are forums for computer issues, email issues, security, internet, cable tv, CDV, billing, and customer service.
Many times we, the users there, can provide answers tech support and customer service can't.

Click the link below. The forum landing page will open. Click Sign In. Log in with your Comcast user ID (the part before .net) and your password. You will next see a first time forum users page, asking you to choose a screen name for use in the forums. Once you set that up, you'll be taken back to the landing page. PLEASE DO NOT USE YOUR COMCAST EMAIL NAME FOR YOUR FORUM USER NAME.

http://forums.comcast.com/

Post in Connectivity and Modem.

(Once you get to the forum, save the page to your favorites. If you want to get to it from the Comcast home page, you have to jump through hoops to reach it)

Following Your advice, So far no replies. Even send an email to the appropriate mod on comcast forums. Keeping fingers crossed.

#11 BruceInc

BruceInc
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:04:31 AM

Posted 14 August 2011 - 02:35 AM

Anyone know of a good bandwidth monitor something that will keep track of usage history that I can review

#12 Queen-Evie

Queen-Evie

    Official Bleepin' G.R.I.T.S. (and proud of it)


  • Staff Emeritus
  • 16,485 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:My own little corner of the universe (somewhere in Alabama). It's OK, they know me here
  • Local time:04:31 AM

Posted 14 August 2011 - 08:02 AM

I saw your post there.

You might want to copy your first post here, then edit your first post in the CHF to paste it there since the one here is more detailed.

To edit click on Options in your post, then choose edit.

#13 g0dsweed

g0dsweed

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:04:31 AM

Posted 14 August 2011 - 10:48 AM

You could try BitMeter, available here: http://download.cnet.com/BitMeter-2/3000-2381_4-10398686.html?tag=contentMain;downloadLinks

ALWAYS check new software for viruses and harmful bits, no matter where you get it.

Windows built in Performance Monitor also can measure bandwidth with Data Collection sets and some tweaking, but BitMeter may do the trick for you.

Edited by g0dsweed, 14 August 2011 - 10:48 AM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users